TL;DR
- Balance Coin fell more than 99% after an attacker manipulated 42DAO’s Bitcoin price oracle and drained approximately $912,000 to $915,000 from collateralized vaults.
- Missing deviation checks, drawdown limits, price floors, oracle validation, and liquidation delays allowed false BTCB pricing to trigger instant liquidations in one transaction.
- BLC traded near $0.0014 to $0.0025 as market capitalization fell toward $12,000, showing how quickly confidence disappears when stablecoin backing mechanisms fail without warning.
Balance Coin collapsed almost completely after an attacker exploited 42DAO’s pricing system and drained roughly $912,000 to $915,000 from Bitcoin-backed vaults. The algorithmic stablecoin, designed to track $1, plunged more than 99% from about $0.997 to fractions of a cent. The bewildering outcome is that one manipulated price transformed supposedly protected collateral into instantly liquidatable assets, erasing nearly all of BLC’s nominal value in a single transaction. The episode exposed how a protocol can appear solvent until one unchecked external input rewrites its internal accounting and triggers irreversible market consequences for users and investors alike.
#PeckShieldAlert Balance Coin $BLC has plummeted -99% @42dao_official @42dao_official has been exploited for ~$915K pic.twitter.com/1bdRpMQBs3
— PeckShieldAlert (@PeckShieldAlert) July 22, 2026
Missing Safeguards Turn an Oracle Error Into a Collapse
Security researchers traced the incident to 42DAO’s Median Oracle, which reportedly supplied an abnormally low BTCB price. The attacker used the Spotter poke function to write that value directly into the VAT contract. The decisive failure was not broken cryptography, but missing validation around an ordinary price feed. The Spotter lacked deviation checks, maximum drawdown limits, and a minimum price floor, allowing distorted data to enter the system unchecked. Once accepted, the false valuation made several collateralized vaults appear unsafe even though they should never have qualified for liquidation under normal market conditions at all.
🚨SlowMist TI Alert🚨
💸 @42dao_official Loss: ~ 912k USD
🔍 Root Cause: Attackers exploited an abnormally low BTCB oracle price from Median Oracle via Spotter `poke` and Dog `bark`. The spotter lacked price deviation checks, max drawdown limits, and minimum price protections,…
— SlowMist (@SlowMist_Team) July 22, 2026
The protocol’s Dog module then processed the manipulated value without an oracle check or liquidation delay, enabling several BTCB vaults to be liquidated immediately in one transaction. The attacker swapped the seized collateral and retained the difference as profit. A lending mechanism intended to protect solvency instead accelerated the theft once its safeguards failed, leaving 42DAO bearing most of the damage. Estimates varied slightly between about $912,000 and $915,000, but both assessments describe the same basic sequence: false pricing, instant liquidations, seized collateral, and a stablecoin whose backing and credibility collapsed together in one stroke.
The market reaction was brutal. One report placed BLC near $0.0014, while another recorded roughly $0.0025, down 99.75% over 24 hours. Its market capitalization fell to about $12,000, with approximately $94,900 in volume across more than 1,600 transactions. The collapse shows how quickly a small stablecoin can lose its identity once confidence in its collateral mechanism disappears. More than 1,000 recorded transactions were buys, an odd detail suggesting speculation continued even after the peg had effectively vanished. The incident adds another 2026 DeFi breach driven by weak operational safeguards rather than compromised keys once again.
