Balance Coin Plunges 99% After $912K Oracle Attack

Balance Coin (BLC) lost about 99.75% of its value on July 22, 2026, dropping from near a $1 peg to roughly $0.0014 after an attacker manipulated the protocol’s BTCB price feed and drained funds from the protocol’s governance entity. The exploit executed in a single transaction on BNB Chain and removed most of the token’s nominal market value, which had been about $3.5 million before the attack.

Balance Protocol is a lending system that allows users to lock BTCB as collateral and mint BLC. Vaults are designed to be liquidated automatically if the collateral value falls below a required threshold. The attacker injected an abnormally low BTCB price into the protocol’s Median Oracle and pushed that value into the lending contracts through the functions that update and trigger liquidations.

According to security firms SlowMist and PeckShield, the protocol accepted the manipulated price without checking whether it was plausible and without imposing a delay before liquidations. The false price made overcollateralized vaults appear undercollateralized, allowing the attacker to trigger liquidations, seize collateral, mint about 4.5 million BLC and convert assets through PancakeSwap. On-chain analysis places the proceeds from the operation at roughly $912,000 to $915,000.

The protocol had undergone a smart contract audit that reviews code for programming vulnerabilities. The audit did not cover the oracle configuration that supplied price data to the contracts. The exploit targeted the oracle inputs and liquidation logic rather than a bug in the on-chain code.

Multiple components that are commonly used to limit this kind of risk were not present: the system lacked checks that reject reported prices outside a plausible range and it had no time buffer between price updates and liquidation execution. Those missing checks allowed the manipulated price to be treated as authoritative and liquidations to occur immediately.

Incidents this year have included attacks that used manipulated price reports to drain vaults in other lending protocols. Regulators in 2026 narrowed allowable designs for U.S. payment stablecoins to reserves held in cash and short-dated Treasuries, excluding uncollateralized algorithmic models from that framework.

As of publication, 42DAO had not provided a detailed public explanation or announced a plan for compensation. BLC continued to trade near zero.