Stability Coin (BLC) collapsed by over 99% on Tuesday after DeFi protocol 42DAO suffered an exploit that safety researchers estimate could have drained about $915,000 from the platform.
The assault despatched BLC from practically $1 to fractions of a cent in a single fell swoop, including one other entry to a rising listing of crypto protocols breached in 2026.
Oracle Manipulation Triggered Fast Liquidation
The incident was first flagged by blockchain safety agency PeckShield, which reported that 42DAO had been exploited for roughly $915,000. SlowMist later revealed a extra detailed breakdown, placing the loss nearer to $912,000 and tracing the foundation trigger to 42DAO’s Median Oracle, which reportedly fed an abnormally low BTCB worth into the system.
In keeping with SlowMist, the attacker used the protocol’s Spotter poke operate to jot down that dangerous worth straight into the VAT contract for the reason that Spotter lacked a number of safeguards, together with no worth deviation checks, no most drawdown limits, and no minimal worth flooring protections.
As soon as the manipulated worth entered the protocol’s accounting system, the Canine module picked it up with “no liquidation delay or oracle worth validation,” permitting the attacker to set off instantaneous liquidations throughout a number of BTCB vaults in a single transaction. SlowMist recognized the dangerous actor’s pockets as 0x9d8d…231c and the sufferer contract as 0x973a…a9c0c, whereas the exploited Spotter and Canine contracts sit at 0x849d…29288 and 0x0010…1f634e.
The market response was swift, with information from GeckoTerminal displaying BLC buying and selling round $0.0025 on the time of writing, down 99.75% within the final 24 hours after beforehand buying and selling at round $0.997. The token’s market cap has additionally fallen to about $12,000, with buying and selling quantity at $94,900 throughout greater than 1,600 transactions, over 1,000 of these being buys and the remainder being sells.
One other Safety Breach Hits DeFi
42DAO is the most recent in a run of DeFi and bridge exploits this 12 months. Different latest ones embrace an assault on Allbridge, a cross-chain stablecoin bridge, which was compelled to pause exercise on July 20 after a hacker made off with $1.65 million. In keeping with investigators, the thief manipulated Allbridge’s stablecoin pool ratios utilizing transactions funded by a flash mortgage earlier than extracting funds from distorted liquidity swimming pools.
In June, Syscoin suffered a bridge exploit that allowed an attacker to mint as many as 5 billion SYS tokens, an act that triggered a close to 20% drop within the asset’s worth. A month earlier than that, the Echo Protocol ended up suspending cross-chain transactions after an exploit involving the minting of 1000 eBTC. That exact incident additionally harm Echo’s native token, because it instantly dumped greater than 12% of its worth.
Whereas the technical particulars could also be completely different, the 42DAO incident adopted a well-recognized sample the place the exploit didn’t depend on breaking cryptography or stealing keys however as an alternative took benefit of lacking safeguards round worth feeds and liquidations.
The put up Stability Coin (BLC) Crashes 99% After 42DAO Suffers Exploit appeared first on CryptoPotato.