Balance Coin (BLC) Oracle Manipulation / 42DAO
Summary
Balance Coin (BLC) is a USD-pegged stablecoin issued by the Balance Protocol, governed by 42DAO on BNB Chain. On July 22, 2026, an oracle manipulation exploit targeting the protocol's unprotected Spotter and GemJoin modules drained approximately $912,000–$915,000, causing BLC to collapse more than 99% from its $1 peg. The 42DAO team issued no public statement or recovery plan in the aftermath, and the exploit was executed twice within two hours with no circuit breaker triggering between incidents.
Connected Entities
1 entities · 10 linked investigationsTimeline(5 events)
2025-01-27
CertiK delivers audit of the 42DAO BLC Minting smart contract, identifying 13 findings (0 critical, 1 major centralization risk). All findings acknowledged by team; none resolved.
CertiK Skynet - 42DAO Project Page2026-07-22
Attacker exploits 42DAO's Median Oracle on BNB Chain by injecting an artificially low BTCB price via the Spotter poke function. Dog liquidation module triggers mass vault liquidations. Attacker mints approximately 4.5 million unbacked BLC tokens from a null address via GemJoin and swaps them for BSC-USD and BTCB on PancakeSwap V2. Approximately $912,000–$915,000 is drained. BLC price collapses from ~$0.9954 to ~$0.001358 (over 99% decline).
CryptoTimes / PeckShield / SlowMist / TenArmor2026-07-22
Approximately two hours after the initial exploit, an identical replay transaction mints an additional 5,900 BLC from a null address and drains further liquidity from PancakeSwap V2. No circuit breaker or pause mechanism activated between the two attacks.
TFTC / Blockonomi / Crypto.news2026-07-22
PeckShield publicly reports the exploit, estimating losses at $915,000. TenArmor flags suspicious GemJoin transactions on BNB Chain. SlowMist publishes analysis attributing root cause to the unprotected Median Oracle and absent Spotter safeguards.
Blockonomi / CryptoRank / Cryptopolitan2026-07-29
No public statement, post-mortem, or recovery plan from 42DAO has been published. The incident remains unresolved with no team communication recorded in available reporting.
Multiple news sources confirming team silenceDecision Log
- #1publish⛓ pending7/29/2026, 12:32:05 PMhash: 8op2aZEXETMWx88iDrECk9rrYy1HsiBujUri2bgqE1BG
17 of 19 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 7/29/2026, 12:31:54 PM
last updated: 7/29/2026, 8:29:07 PM
avoid.net — verified advice for a post-truth world