Balancer protocol shutdown vote follows $128M breach, $9M at stake

Balancer’s slow-motion collapse is now heading toward a formal endpoint. Nearly a year after a $128 million exploit tore through its liquidity pools, the decentralized exchange is asking its own token holders to vote on shutting the protocol down for good. The proposed Balancer protocol shutdown would wind operations down in phases, hand over $9 million in remaining treasury assets to BAL holders, and dissolve the DAO that has governed the platform since its early days.

Key takeaways

• Balancer suffered a $128 million security breach in November 2025 that hit its v2 composable stable pools across multiple chains.
• Monthly protocol revenue crashed from $1.13 million in October 2025 to $371,000 in November, then to just $56,781 by August 2026.
• Balancer Labs, the protocol’s corporate entity, shut down in March 2026 after the exploit made its operating costs unsustainable.
• CEO Marcus Hardt has proposed a phased wind-down, with liquidity providers given until October 30 to exit and the DAO dissolving from November 1.
• A governance vote on the shutdown proposal runs from September 25 to 29; rejection would keep Balancer running under its current structure.

Balancer’s $128 Million Exploit and the Revenue Collapse

The trouble traces back to a single attack that drained roughly $128 million from Balancer‘s older architecture. On November 3, 2025, an attacker exploited a rounding bug in the protocol’s “upscale” function, manipulating pool balances during token swaps to siphon assets including WETH, osETH and wstETH out of Balancer v2 Composable Stable Pools. Initial estimates put the damage at around $70 million, but on-chain investigators later traced additional transfers that pushed the total loss above $128 million across Ethereum and several layer-2 networks.

How the November 2025 Breach Unfolded

Balancer moved quickly to contain the damage, pausing affected pools, blocking the creation of new vulnerable pools and halting rewards while working with security firms to trace stolen funds. Some assets were recovered: StakeWise clawed back roughly $19 million in osETH, about 73.5% of what had been stolen in that asset, while Gnosis Chain activated a hard fork in December to recover $9.4 million that had been frozen during the attack. Balancer also proposed returning about $8 million in rescued assets to affected liquidity providers on a pro-rata basis. Still, the reputational hit proved far harder to undo than the technical cleanup.

Revenue in Freefall

The numbers tell the story plainly. Data from DefiLlama shows Balancer’s monthly protocol revenue collapsing from $1.13 million in October 2025 to $371,000 in November, the same month the exploit hit. The decline didn’t stop there. Revenue kept sliding through 2026 and had fallen to just $56,781 by August, a fraction of what the protocol generated before the breach. That trajectory alone explains why the Balancer security breach is now central to any conversation about the protocol’s future.

From Shutdown to Skeleton Crew: Balancer Labs’ Retreat

Balancer Labs, the corporate entity behind the protocol, ceased operations in March 2026 as leadership concluded the company itself had become a liability given its operating costs and legal exposure tied to the exploit. Rather than shutting the protocol down entirely at that point, executives chose a leaner path: keep the underlying technology running through a streamlined operational model and bet on an upgraded version, v3, to reignite growth.

Restructuring Wasn’t Enough

Six months later, that bet hasn’t paid off. Marcus Hardt, Balancer Labs’ CEO, acknowledged that the cost-cutting side of the plan worked, but the revenue side didn’t follow. “What did not come was enough revenue. Most of the protocol’s revenue still comes from v2, and v3 revenue has not grown to replace it. The product worked. It did not sell enough,” Hardt said in a statement on X.

Hardt also admitted he underestimated how sticky the reputational damage would be. “The November 2025 exploit hit legacy v2 pools. v3 is a different architecture, but the event followed the name into every conversation since and made traction harder to build,” he wrote on the Balancer governance forum. In a separate post, he added: “I underestimated how much the exploit would continue to limit adoption.” That admission matters for the broader DeFi industry too — it underscores how a breach in one part of a protocol’s codebase can poison trust in an entirely different, technically unrelated version of the same product.

Inside the Wind-Down Proposal

Hardt authored the formal wind-down plan and posted it to the Balancer governance forum on Monday, framing it as an orderly exit rather than a chaotic collapse. The proposal calls for ending all new business development immediately and distributing the protocol’s remaining treasury, worth more than $9 million, to holders of the BAL token.

Treasury Payout to BAL Holders

Under the plan, BAL holders would receive treasury assets in kind and pro rata to their holdings, but only after burning their tokens to claim the allocation. The proposal would also cancel a previously approved BAL buyback plan in favor of this direct distribution. Other DAO wallets and positions would be pooled into inventory first and folded into the initial redemption round, though BAL held by the treasury itself would be excluded, with a limited exception carved out for holders of tetuBAL, a liquid staking wrapper token. Roughly $400,000 of the treasury has been set aside specifically to cover wind-down expenses.

Timeline for Liquidity Providers and the DAO

The shutdown, if approved, would begin next month. Liquidity providers have until October 30 to prepare their exits, after which pools capable of being paused would shift into withdrawal-only mode. Pools that can’t be paused would keep running, but Balancer intends to zero out protocol fees on them wherever existing smart contracts allow it.

Starting November 1, Balancer would scale down to only the infrastructure needed to process withdrawals, and the DAO would begin dissolving, with a small team left to manage the transition. The first treasury distribution to BAL holders is scheduled for May 2027, running for six months. A second distribution would follow within two months of that window closing, covering unspent wind-down funds and unclaimed shares, with a final sweep of any remaining assets happening six months after that.

The Governance Vote and What Comes Next

The fate of the plan now rests with a Balancer governance vote running as a snapshot ballot from September 25 through September 29. If BAL holders reject the proposal, Balancer would simply keep operating under its current, already-diminished structure. Balancer stressed on X that nothing changes at the protocol level until the vote concludes.

Hardt has made his preference clear, arguing that delay carries its own cost. “Continuing on the current path spends the treasury to arrive at the same place later. That treasury belongs to BAL holders,” he said. “The question is whether what remains reaches holders while it is still substantial, or is spent first on a path that has already been tried.”

Whatever the outcome, the vote is a telling moment for decentralized finance more broadly. A protocol that once ranked among the sector’s most established automated market makers is now asking its community to choose between an orderly retreat and one more attempt at recovery — a decision shaped less by technology than by the lingering shadow of a single exploit. If the ballot passes, this DeFi protocol closure would stand as one of the clearest examples yet of how a nine-figure hack can outlast even a successful cost-cutting turnaround.

FAQ

What caused the Balancer protocol’s financial decline?

A $128 million security breach in November 2025 targeting v2 composable stable pools led to a sharp revenue collapse and lasting reputational damage.

What does the shutdown proposal involve for Balancer?

It involves ceasing new business development, allowing liquidity providers to exit by October 30, dissolving the DAO from November 1, and distributing over $9 million in treasury assets to BAL token holders.

When is the governance vote on Balancer’s shutdown proposal?

The vote is scheduled to run from September 25 to 29, with Balancer continuing under its current operations if the proposal is rejected.

How has the November 2025 breach affected Balancer’s operations after the exploit?

Although v3 uses different architecture, the breach caused lasting reputational damage that hindered user acquisition and revenue growth despite the restructuring effort.

Article produced with the assistance of artificial intelligence and reviewed by the editorial team.