Balance Coin, an algorithmic stablecoin built on BNB Chain, collapsed more than 99% on July 22, 2026, after an attacker manipulated a price oracle and siphoned roughly $912,000 in bitcoin-backed collateral from protocol vaults governed by 42DAO. On-chain security firms PeckShield and SlowMist reported and confirmed the exploit within hours.
Exploit Details
According to security researchers, the attacker leveraged an oracle manipulation to distort collateral valuations used by Balance Coin’s smart contracts. The inflated or mispriced data enabled the withdrawal of approximately $912,000 worth of bitcoin-backed assets from vaults controlled by 42DAO, the decentralized organization overseeing the protocol.
The exploit triggered a rapid loss of confidence and a severe depeg, sending the stablecoin’s price from its intended $1 target to near-worthless levels. At the time of reporting, no official recovery plan or detailed post-mortem had been published by the project’s maintainers.
What Is Balance Coin?
Balance Coin is an algorithmic stablecoin designed to maintain a $1 peg through on-chain mechanisms and collateral management on BNB Chain, a popular smart-contract network for decentralized finance. Governance of the protocol is conducted by 42DAO, which manages key parameters and vaults holding crypto collateral, including bitcoin-backed assets.
Oracle Risks and Algorithmic Stablecoins
Price oracles, which feed external market data to blockchains, are a critical component of many DeFi protocols. If compromised or manipulated, they can misprice collateral and enable unauthorized withdrawals or forced liquidations. Oracle-related attacks have been a recurring risk in DeFi and are especially damaging for stablecoins that rely on accurate pricing to hold their pegs.
The incident adds to the wider history of vulnerabilities and instability in algorithmic stablecoin designs. Notable past failures, including the TerraUSD collapse in 2022, have underscored the challenges of maintaining a dollar peg without robust collateralization and resilient market data sources.
Outlook
PeckShield and SlowMist have flagged the attacker’s activity on-chain, but it remains unclear whether the drained funds can be recovered. The Balance Coin community and 42DAO are expected to review the exploit’s root cause and consider protocol changes aimed at strengthening oracle defenses and collateral safeguards.