PANews reported on November 28th that, according to CoinDesk, weeks after a major vulnerability in Balancer v2 vaults led to the loss of over $110 million, the Balancer DAO has begun discussing a plan to distribute approximately $8 million of recovered assets to affected LPs. The proposed scheme includes structured rewards for white-hat hackers and compensation based on snapshots of user pool assets at the time of the exploit, consistent with the Safe Harbor Protocol. This protocol stipulates a bounty cap of $1 million per incident, requiring white-hat hackers to undergo comprehensive KYC and sanctions screening. Several anonymous rescuers on Arbitrum have waived their bounty claims. Recovered tokens cover networks such as Ethereum, Polygon, Base, and Arbitrum, with liquidity providers receiving compensation proportionally to the tokens initially provided and per pool. The claims mechanism is currently under development; if the proposal is adopted, users will need to accept updated terms of use.
Additionally, $19.7 million worth of osETH and osGNO were recovered by StakeWise and will be handled separately; the $4.1 million recovered internally in collaboration with Certora is ineligible for the bounty due to a prior agreement. This exploit, caused by a smart contract flaw, marks Balancer's third major security incident, resulting in a plunge in total value locked (TVL) from approximately $775 million to $258 million, and a loss of approximately 30% in the value of BAL tokens.
