
Balancer warned users of a bug in its legacy v1 contracts that allows draining LP funds. The affected pools are deprecated and non-pausable, so Balancer urged users to withdraw proportionally via a dedicated interface, stressing that other Balancer products, including currently supported versions, are not affected.
The team has since sent an on-chain message to known addresses involved in the V1 exploit, following best practices and offering a path for the hacker to contact them and return the funds. Balancer said it understands affected users await further updates and will continue to provide them.