🚨SlowMist TI Alert🚨 💸 @Balancer Loss: ~234k USD 🔍 Root Cause: Balancer V1 BPool `joinswapPoolAmountOut` lets caller specify BPT output while `calcSingleInGivenPoolOut` reverse-computes input via 18-decimal fixed-point math. After attacker compressed WBTC reserves to dust via public swaps, the computed input rounded down to 1 satoshi WBTC yet full BPT was minted. Missing: minimum effective input, minimum pool balance, and relative-error validation; `MIN_BALANCE` only enforced in `bind/rebind`. 📌 Attacker: 0x338c7ec9befbb451d66fd8a468c32184f5689a41 📌 Attack Contract: 0x9caa8d0e44b22f50057d2f4ce0d1446529e11be3 📌 Vulnerable Contract: 0x2257aaac34bcb27900291f7b84ee2565a6cbac57 Impact: Nested flash loans (Spark/Aave, Morpho, Uniswap V3) funded WBTC reserve compression; 4,408.8 BPT minted at 1-satoshi WBTC per join, then proportionally exited to drain DPI, USDC, WETH, WBTC from the pool. Powered by http://SlowMist.AI Tx: https://etherscan.io/tx/0x72510b257cc09bde8435b83ac1636f9498ffc353583330600b5b8da43d0d1aff https://etherscan.io/tx/0xeef311556b2a2a5be915d1d21785f47311faab26051d5cc832f701fd4ced2c2c https://etherscan.io/tx/0x37e47f0f5f4ec77e96d220410f6aece30a7589d478c6b17badeb55aa70d66628 https://etherscan.io/tx/0xbaedc537df2075c3edbd43bbd918363be4b9c090971ce4f9592c1ddb3061e111 https://etherscan.io/tx/0xb2d84f926ba84a707d91aa1e1b5fda9565d8db414eece9bd93ced733f8417332(SlowMist)