42DAO loses $912K in BTCB oracle manipulation exploit
Security & Exploits ·
An attacker triggered cascading vault liquidations on 42DAO after manipulating a BTCB oracle price feed, draining roughly $912K on July 22, 2026.
The exploit centered on an abnormal BTCB oracle price update that let the attacker force multiple BTCB vault liquidations within a single transaction, according to a post detailing the incident. The attacker address has been identified as 0x9d8dd9f2d734675e2bfcc142d1c7a45609ca213c.
Two structural gaps made the manipulation possible: 42DAO's oracle system lacked price deviation checks, and its liquidation mechanism had no delay or minimum price protection to slow down or block liquidations triggered by a sudden, abnormal price move. Together, these omissions meant a single distorted BTCB price reading could cascade through multiple vaults at once rather than being flagged or throttled.
The fallout extended beyond the vault liquidations themselves. Balance Coin, described as an algorithmic stablecoin tied to 42DAO, collapsed roughly 99% following the incident, with its price reported to have depegged to $0.001358 after the exploit, per wublockchain.xyz. Coverage of the crash has put the associated loss at approximately $915K, a figure close to but not identical to the $912K cited in the initial exploit report, with cointelegraph.com and cryptopotato.com both covering the token's 99% plunge. A separate account frames the mechanism as Median Oracle manipulation rather than a straightforward BTCB feed error, and other reporting references GemJoin's involvement in the exploit chain on BNB Chain, as detailed at leviathan.news.
The incident took place on BNB Chain, where 42DAO's vault infrastructure operated. Five distinct sources have covered aspects of the exploit, though reported loss figures vary slightly between $912K and $915K depending on the outlet.
What remains unclear is whether the discrepancy between the $912K and $915K figures reflects different accounting methods or separate stages of the exploit, and whether 42DAO or Balance Coin plan to implement oracle deviation checks or liquidation delays in response. Any recovery efforts, fund freezes, or compensation plans for affected users have not yet been detailed.