Suspicious attack on BSC-linked GemJoin and 42DAO causes about $900,000 loss

Suspicious attack on BSC-linked GemJoin and 42DAO causes about $900,000 loss

Manipulated Bitcoin oracle data and missing liquidation safeguards let an attacker force healthy vault liquidations, drain about $912,000, and send BLC down 99.92% to an intraday low near $0.000795.

BTC
BNB
CAKE

Fact Check
Two independent, high-authority security monitoring firms (TenArmor and PeckShield) corroborate the claim. TenArmor reported a suspicious attack on GemJoin and 42DAO on BSC causing ~$900K loss, while PeckShield confirmed the 42DAO exploit at ~$915K and the associated 99% plunge in Balance Coin's BLC token. A secondary news source (PANews) further reproduces the report. All key elements of the claim—the BSC projects involved, the ~$900K–$915K loss range, the suspected-attack characterization, and the BLC token collapse—are directly supported.
    Reference123
Summary

Balance Protocol’s Balance Coin lost its dollar peg and plunged 99.92% to about $0.000795 on July 22, 2026 after an attack on BNB Chain-linked 42DAO exploited oracle and liquidation weaknesses, draining about $912,000 in BTCB from vaults. SlowMist and PeckShield said the exploit used a manipulated Median Oracle price feed: the attacker pushed an artificially low BTCB price through the Spotter contract’s poke function, causing healthy collateralized vaults to appear insolvent and be liquidated through the Dog module. The seized BTCB was then sold on PancakeSwap. BLC, which had traded near $0.995 to $1.00 before the attack, briefly fell to around $0.0014 and later traded between roughly $0.0008 and $0.0013 on major trackers. The collapse wiped out nearly all of its roughly $3.5 million nominal value, cutting market capitalization to about $2,800, while 24-hour trading volume rose to about $103,000. SlowMist described the exploit as a single-transaction combination made possible by missing safeguards including price deviation checks, drawdown limits, a price floor and any delay between oracle updates and liquidations. No private keys were compromised, and 42DAO has not announced a recovery plan or compensation for affected users.

Terms & Concepts
  • Median Oracle: A price-feed mechanism that supplies market data to a protocol’s smart contracts for accounting and risk management.
  • liquidation: The forced seizure or sale of collateral when a borrowing position no longer meets a protocol’s collateral requirements.
  • vaults: Collateralized positions where users lock assets to mint or borrow against a protocol-issued token.