Balancer V2's Composable Stable Pools were exploited on Nov. 4 across Ethereum, Base, Avalanche, Polygon, Arbitrum, and other chains due to a rounding logic flaw in batchSwap EXACT_OUT transactions, an official incident report released Nov. 6 shows. The vulnerability allowed attackers to manipulate pool balances and extract assets, while Balancer V3 and other pool types remained unaffected. The team, working with security partners and white hat groups, contained the exploit through Hypernative's automatic pause, asset freezes, and SEAL framework interventions. StakeWise recovered approximately 73.5% of stolen osETH, with BitFinding and Base MEV bot teams assisting in partial fund recovery.

DeFi risk management firm Gauntlet submitted a proposal on November 5 recommending temporary emergency pauses for three Compound v3 Comet lending markets on Ethereum: USDC, USDS, and USDT, the Compound forum post shows. The firm cited liquidity crises affecting Elixir's deUSD and sdeUSD tokens, both listed as collateral across the three markets. The proposal would prevent new borrowing positions and liquidity withdrawals until pending risk parameter updates receive governance committee approval. The recommendation follows Stream Finance's November 4 disclosure of a $93 million fund loss, including $68 million exposure tied to Elixir.