{"investigation":{"slug":"balance-coin-blc-oracle-manipulation-42dao","entity_name":"Balance Coin (BLC) Oracle Manipulation / 42DAO","trust_score":4,"severity_base":null,"score_modifier":0,"confidence":0.78,"status":"published","content_type":"investigation","summary":"On July 22, 2026, Balance Coin (BLC), an algorithmic stablecoin issued through the 42DAO-governed Balance Protocol on BNB Chain, lost its dollar peg and fell more than 99% after an attacker manipulated a BTCB price oracle to trigger unauthorized vault liquidations and mint millions of unbacked BLC tokens. Security firms PeckShield and SlowMist estimated losses of roughly $912,000 to $915,000; 42DAO is the protocol that suffered the exploit, not its perpetrator. As of this writing, 42DAO has not published an official post-mortem, compensation plan, or public statement, and whether the incident was purely an external exploit or involved insider conduct remains unresolved in available reporting.","sections":[{"content":"On July 22, 2026, an attacker exploited 42DAO's Median Oracle, which supplied the protocol's Spotter contract with BTCB (Binance-pegged Bitcoin) price data. According to a SlowMist analysis cited by multiple outlets, the Median Oracle fed an abnormally low BTCB price into the system, and the attacker used the Spotter contract's 'poke' function to write that manipulated price directly into the protocol's core accounting contract (referred to in reporting as the Vat). Because the Spotter reportedly lacked price deviation checks, maximum drawdown limits, and a minimum price floor, the bad price was accepted without a sanity check or circuit breaker. The protocol's liquidation module (referred to as Dog, with a 'bark' function) then processed the artificially low price with no liquidation delay or oracle validation, allowing the attacker to trigger immediate liquidations across multiple BTCB-collateralized vaults in a single transaction and profit from the resulting arbitrage. Security firms PeckShield and SlowMist estimated the loss at approximately $915,000 and $912,000 respectively; the discrepancy between the two figures has not been reconciled in public reporting. Cybersecurity firm TenArmor separately flagged two related transactions involving GemJoin contracts and 42DAO infrastructure on BNB Chain.","heading":"The Oracle Manipulation Exploit","sources":[{"url":"https://cointelegraph.com/news/algorithmic-stablecoin-balance-coin-plummets-99-after-exploit","name":"Cointelegraph: Balance Coin crashes 99% after reported $915K exploit","type":"news_article","credibility":2},{"url":"https://www.kucoin.com/news/flash/42dao-attack-exploited-oracle-s-abnormally-low-btcb-price-to-liquidate-btcb-vaults","name":"KuCoin Flash: 42DAO attack exploited oracle's abnormally low BTCB price to liquidate BTCB vaults","type":"news_article","credibility":2},{"url":"https://www.techtimes.com/articles/321253/20260722/stablecoin-blc-loses-dollar-peg-after-oracle-attack-drains-915k-42dao-protocol.htm","name":"Tech Times: Stablecoin BLC loses dollar peg after oracle attack drains $915K from 42DAO protocol","type":"news_article","credibility":2},{"url":"https://coincentral.com/balance-coin-crashes-99-after-915k-exploit-hits-42dao-protocol/","name":"CoinCentral: Balance Coin crashes 99% after $915K exploit hits 42DAO protocol","type":"news_article","credibility":2}],"severity":"critical"},{"content":"On-chain analysis cited by AMBCrypto and other outlets indicates the attacker executed the exploit in two stages: a first transaction minted approximately 4.5 million BLC from a null address and routed the tokens through PancakeSwap V2 pools, swapping them for Binance-pegged USDT and BTCB; a second transaction roughly two hours later minted an additional 5,900 BLC and extracted further assets from liquidity pools. The resulting sell pressure broke BLC's peg. Reported post-crash prices vary by source and by the moment each outlet checked the market: Cointelegraph cited CoinMarketCap showing a fall from $0.9954 to about $0.001358; AMBCrypto reported a 99.75% drop to about $0.002462; CoinCentral and Parameter.io cited an intraday low of $0.001209; and Bitcoin.com cited a 24-hour decline of 99.92% to an intraday low near $0.000795. These figures are not fully reconcilable from available reporting and likely reflect different snapshot times. AMBCrypto also reported that large wallets held about 64.42% of BLC's supply at the time, indicating high ownership concentration.","heading":"Unbacked Token Minting and Market Collapse","sources":[{"url":"https://ambcrypto.com/balance-coins-99-75-crash-exploit-rug-pull-or-something-else/","name":"AMBCrypto: Balance Coin's 99.75% crash: Exploit, rug pull, or something else?","type":"news_article","credibility":2},{"url":"https://coincentral.com/balance-coin-crashes-99-after-915k-exploit-hits-42dao-protocol/","name":"CoinCentral: Balance Coin crashes 99% after $915K exploit hits 42DAO protocol","type":"news_article","credibility":2},{"url":"https://parameter.io/balance-coin-blc-plummets-99-following-915k-oracle-exploit-on-42dao/","name":"Parameter.io: Balance Coin (BLC) plummets 99% following $915K oracle exploit on 42DAO","type":"news_article","credibility":2},{"url":"https://news.bitcoin.com/another-stablecoin-bites-the-dust-as-blc-crashes-from-1-to-near-worthless/","name":"Bitcoin.com News: Another stablecoin bites the dust as BLC crashes from $1 to near worthless","type":"news_article","credibility":2}],"severity":"critical"},{"content":"Pre-crash, BLC's market capitalization has been reported at approximately $3.5 million, a figure that appears in secondary aggregations attributed to CryptoBriefing and in community posts, though it could not be independently confirmed against a primary CoinMarketCap or CoinGecko snapshot. A Bitrue blog post published August 4, 2026, states that after the exploit 'the token's market cap collapsed to around $12,000' and that, weeks later, 'the token's market cap sits in the low thousands.' No other source reviewed gives a specific post-crash market cap figure; most outlets report only price-percentage declines rather than absolute market capitalization. The $12,000 figure should therefore be treated as resting on a single source of medium credibility rather than being independently corroborated.","heading":"Market Capitalization Collapse","sources":[{"url":"https://www.bitrue.com/blog/balance-coin-exploit-blc-crash","name":"Bitrue Blog: Balance Stablecoin Exploit: Why BLC Crashed by 99%","type":"news_article","credibility":2}],"severity":"high"},{"content":"Multiple outlets report that 42DAO's Balance Protocol lacked basic oracle-safety mechanisms common to comparable Maker-style collateralized stablecoin systems, including a time-weighted average price feed, a price-deviation or bounds check to reject implausible oracle updates, and a liquidation delay analogous to MakerDAO's Oracle Security Module. The absence of these controls allowed a single manipulated price update to cascade into cross-vault liquidations within one transaction. Separately, reporting notes that 42DAO had previously published a CertiK audit covering its BLC minting contract, which commentators describe as a genuine audit that nonetheless did not cover oracle configuration or adversarial price-feed scenarios — a scope limitation common to smart-contract audits generally, which typically treat external oracle inputs as trusted rather than as an attack surface. No source reviewed disputes that the CertiK audit existed; the dispute in reporting is only over its relevance to this specific failure mode.","heading":"Protocol Design Failures","sources":[{"url":"https://www.techtimes.com/articles/321253/20260722/stablecoin-blc-loses-dollar-peg-after-oracle-attack-drains-915k-42dao-protocol.htm","name":"Tech Times: Stablecoin BLC loses dollar peg after oracle attack drains $915K from 42DAO protocol","type":"news_article","credibility":2},{"url":"https://www.kucoin.com/news/flash/42dao-attack-exploited-oracle-s-abnormally-low-btcb-price-to-liquidate-btcb-vaults","name":"KuCoin Flash: 42DAO attack exploited oracle's abnormally low BTCB price to liquidate BTCB vaults","type":"news_article","credibility":2}],"severity":"high"},{"content":"Several outlets, including AMBCrypto, examined whether the collapse was an external exploit or an insider-driven rug pull. On-chain investigators reportedly found evidence of unauthorized token minting through compromised contract functions rather than developer wallet outflows or ownership/permission changes that would typically indicate an insider rug pull, which supports the exploit explanation favored by most coverage. However, Analytics Insight noted that the precise technical root cause remained unclear because 42DAO had not published a detailed post-incident technical report, and some reporting could not fully reconcile the oracle-manipulation narrative with the minting-from-null-address mechanism described in on-chain data. As of this writing, no independent forensic report or law-enforcement finding has definitively closed the question, and 42DAO itself has not addressed it publicly. This question should be treated as unresolved rather than settled.","heading":"Exploit vs. Rug Pull — Unresolved Question","sources":[{"url":"https://ambcrypto.com/balance-coins-99-75-crash-exploit-rug-pull-or-something-else/","name":"AMBCrypto: Balance Coin's 99.75% crash: Exploit, rug pull, or something else?","type":"news_article","credibility":2},{"url":"https://www.analyticsinsight.net/news/balance-coin-crashes-99-after-suspected-915k-bnb-chain-exploit","name":"Analytics Insight: Balance Coin crashes 99% after suspected $915K BNB Chain exploit","type":"news_article","credibility":2}],"severity":"medium"},{"content":"As of the most recent reporting reviewed, 42DAO had not issued a public statement addressing the exploit, its root cause, or any compensation or recovery plan for affected BLC holders. Tech Times reported directly that 'the team behind 42DAO has not issued a statement,' and Cointelegraph reported that it had sought comment from 42DAO without receiving a response. No subsequent coverage located in this research — including through October 2026 — documents a published post-mortem, a compensation program, or confirmation of a relaunch. Community posts referencing a hoped-for transparency report or recovery plan are unverified social-media commentary, not confirmed project announcements, and are not treated as findings here.","heading":"Absence of Official Response","sources":[{"url":"https://www.techtimes.com/articles/321253/20260722/stablecoin-blc-loses-dollar-peg-after-oracle-attack-drains-915k-42dao-protocol.htm","name":"Tech Times: Stablecoin BLC loses dollar peg after oracle attack drains $915K from 42DAO protocol","type":"news_article","credibility":2},{"url":"https://cointelegraph.com/news/algorithmic-stablecoin-balance-coin-plummets-99-after-exploit","name":"Cointelegraph: Balance Coin crashes 99% after reported $915K exploit","type":"news_article","credibility":2},{"url":"https://www.globalcrypto.tv/balance-coin-plunges-99-after-915k-crypto-hack/","name":"GlobalCrypto.tv: Balance Coin plunges 99% after $915K crypto hack","type":"news_article","credibility":3}],"severity":"medium"}],"timeline":[{"date":"2026-07-22","event":"An attacker manipulates 42DAO's BTCB price oracle via the Spotter contract's 'poke' function, triggering mass liquidations of BTCB vaults through the Dog liquidation module and minting approximately 4.5 million unbacked BLC tokens, which are swapped on PancakeSwap for USDT and BTCB.","source":"Cointelegraph","source_url":"https://cointelegraph.com/news/algorithmic-stablecoin-balance-coin-plummets-99-after-exploit","date_evidence":"The article was published July 22, 2026, and updated that day at 4:37 am UTC with additional SlowMist information."},{"date":"2026-07","event":"Roughly two hours after the first transaction, a second attack mints approximately 5,900 additional BLC and extracts further assets from liquidity pools.","source":"CoinCentral","source_url":"https://coincentral.com/balance-coin-crashes-99-after-915k-exploit-hits-42dao-protocol/","date_original":"2026-07-22"},{"date":"2026-07","event":"BLC loses its dollar peg, falling from roughly $0.9954–$1.00 to as low as approximately $0.0008–$0.0024 depending on the source and timing of the price check, a decline of more than 99%.","source":"Cointelegraph / AMBCrypto / Bitcoin.com","source_url":"https://cointelegraph.com/news/algorithmic-stablecoin-balance-coin-plummets-99-after-exploit","date_original":"2026-07-22"},{"date":"2026-07","event":"PeckShield first flags the exploit publicly, estimating losses at approximately $915,000; SlowMist later publishes a more detailed breakdown putting the loss at approximately $912,000.","source":"Tech Times","source_url":"https://www.techtimes.com/articles/321253/20260722/stablecoin-blc-loses-dollar-peg-after-oracle-attack-drains-915k-42dao-protocol.htm","date_original":"2026-07-22"},{"date":"2026-08","event":"A Bitrue blog post reports BLC's market capitalization has collapsed to approximately $12,000, with the token continuing to trade near zero.","source":"Bitrue","source_url":"https://www.bitrue.com/blog/balance-coin-exploit-blc-crash","date_original":"2026-08-04"}],"sources_used":[{"url":"https://cointelegraph.com/news/algorithmic-stablecoin-balance-coin-plummets-99-after-exploit","name":"Cointelegraph: Balance Coin crashes 99% after reported $915K exploit","type":"news_article","credibility":2},{"url":"https://ambcrypto.com/balance-coins-99-75-crash-exploit-rug-pull-or-something-else/","name":"AMBCrypto: Balance Coin's 99.75% crash: Exploit, rug pull, or something else?","type":"news_article","credibility":2},{"url":"https://www.kucoin.com/news/flash/42dao-attack-exploited-oracle-s-abnormally-low-btcb-price-to-liquidate-btcb-vaults","name":"KuCoin Flash: 42DAO attack exploited oracle's abnormally low BTCB price to liquidate BTCB vaults","type":"news_article","credibility":2},{"url":"https://www.techtimes.com/articles/321253/20260722/stablecoin-blc-loses-dollar-peg-after-oracle-attack-drains-915k-42dao-protocol.htm","name":"Tech Times: Stablecoin BLC loses dollar peg after oracle attack drains $915K from 42DAO protocol","type":"news_article","credibility":2},{"url":"https://coincentral.com/balance-coin-crashes-99-after-915k-exploit-hits-42dao-protocol/","name":"CoinCentral: Balance Coin crashes 99% after $915K exploit hits 42DAO protocol","type":"news_article","credibility":2},{"url":"https://parameter.io/balance-coin-blc-plummets-99-following-915k-oracle-exploit-on-42dao/","name":"Parameter.io: Balance Coin (BLC) plummets 99% following $915K oracle exploit on 42DAO","type":"news_article","credibility":2},{"url":"https://news.bitcoin.com/another-stablecoin-bites-the-dust-as-blc-crashes-from-1-to-near-worthless/","name":"Bitcoin.com News: Another stablecoin bites the dust as BLC crashes from $1 to near worthless","type":"news_article","credibility":2},{"url":"https://www.bitrue.com/blog/balance-coin-exploit-blc-crash","name":"Bitrue Blog: Balance Stablecoin Exploit: Why BLC Crashed by 99%","type":"news_article","credibility":2},{"url":"https://www.analyticsinsight.net/news/balance-coin-crashes-99-after-suspected-915k-bnb-chain-exploit","name":"Analytics Insight: Balance Coin crashes 99% after suspected $915K BNB Chain exploit","type":"news_article","credibility":2},{"url":"https://www.globalcrypto.tv/balance-coin-plunges-99-after-915k-crypto-hack/","name":"GlobalCrypto.tv: Balance Coin plunges 99% after $915K crypto hack","type":"news_article","credibility":3},{"url":"https://cryptopotato.com/balance-coin-blc-crashes-99-after-42dao-suffers-exploit/","name":"CryptoPotato: Balance Coin (BLC) Crashes 99% After 42DAO Suffers Exploit","type":"news_article","credibility":2},{"url":"https://bingx.com/en/flash-news/post/balance-coin-blc-drops-after-dao-exploit-estimated-near-to","name":"BingX Flash News: Balance Coin (BLC) plunges 99% after $915,000 exploit hits 42DAO","type":"news_article","credibility":3},{"url":"https://cryptorank.io/news/feed/5a873-balance-coin-blc-crashes-99-after-42dao-suffers-exploit","name":"CryptoRank News Feed: 42DAO oracle exploit crashes Balance Coin (BLC) 99% after $912K DeFi hack","type":"news_article","credibility":3}],"source_tags":[],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-code-investigator","created_at":"2026-07-29T12:31:54.739584+00:00","updated_at":"2026-10-27T00:20:31.498+00:00"},"source_quality":{"total":13,"tier1":0,"tier2":1,"tier3":0,"unrated":12},"follower_count":null,"content_updated_at":"2026-10-27T00:20:31.856Z","last_fact_checked_at":"2026-08-27T02:06:26.313Z","fact_check_next_allowed_at":null,"update_next_allowed_at":"2026-11-03T00:20:37.277Z"}