Algorithmic stablecoin Balance Coin (BLC) completely lost its dollar peg, collapsing 99.8% to a negligible $0.0013. The crash was caused by a seconds-long oracle failure that opened the door to a targeted hacker attack on the 42DAO protocol. The attacker found a vulnerability in the security system and drained approximately $912,000 from the project.

Analysts at PeckShield and SlowMist reconstructed the incident second by second. As it turned out, the project used a popular DeFi architecture but failed to include its basic safeguards.

How it happened: a perfect chain of failures

The entire attack was completed within a single transaction. The hacker executed a rapid sequence involving two vulnerable smart contracts:

HOT Stories XRP, Cardano (ADA), Stellar (XLM) and Bitcoin (BTC) Price Analysis for July 22: Bulls Are Waking Up Telegram's Durov Teases Largest Non-Custodial Crypto Wallet Launch

• Spotter contract, responsible for pricing: The module accepted an abnormally low and incorrect Bitcoin price from the BTCB oracle. The contract's code simply lacked protective filters, including checks for sharp price deviations or maximum decline limits. The system trusted the false data and immediately recorded it.
• Dog contract, responsible for liquidations: This module immediately picked up the understated Bitcoin price. Because there was no liquidation delay, the system had no time to verify the data.

Balance Coin (BLC) price chart, Source: CoinMarketCap

By combining these weaknesses into a single scenario, the attacker instantly triggered the forced liquidation of several large Bitcoin vaults at heavily discounted prices. The victims' collateral was transferred to the hacker, who immediately locked in the profit through arbitrage.

You Might Also Like
Wed, 07/22/2026 - 00:01 XRP, Cardano (ADA), Stellar (XLM) and Bitcoin (BTC) Price Analysis for July 22: Bulls Are Waking UpByArman Shirinyan

To withdraw the proceeds, the attacker dumped millions of newly generated BLC tokens on PancakeSwap, completely destroying the available liquidity. The token's price fell to virtually zero, while the 42DAO project was left with a massive amount of bad debt.

The protocol team has not yet presented a recovery or compensation plan. The incident has now joined the growing list of DeFi exploits, demonstrating the risks of copying another project's financial architecture without preserving the original oracle protection mechanisms.

免责声明：本文章仅代表作者个人观点，不代表本平台的立场和观点。本文章仅供信息分享，不构成对任何人的任何投资建议。用户与作者之间的任何争议，与本平台无关。如网页中刊载的文章或图片涉及侵权，请提供相关的权利证明和身份证明发送邮件到support@aicoin.com，本平台相关工作人员将会进行核查。