Sonic Labs Exploit Recovery Finalizes Beets.fi Compensation

Sonic Labs Exploit Recovery Ecosystem

The exploit occurred on November 3, 2025, when attackers abused a subtle arithmetic rounding error in Balancer V2 Composable Stable Pools. Specifically, incorrect precision handling such as using mulDown instead of mulUp allowed repeated batch swaps to manipulate pool invariants. As a result, attackers gradually drained liquidity over time.

This vulnerability did not remain isolated. Instead, it affected several Balancer deployments and forks across multiple chains. On Sonic, the most impacted pools on Beets.fi were the stS/S and stS/wOS pairs. Before containment measures took effect, losses on Sonic reached an estimated $3–3.4 million.

Meanwhile, the same flaw caused far greater damage across the broader ecosystem. In total, losses across all affected chains reached approximately $120–128 million. This incident marked Balancer’s third major exploit. 

In June 2020, a flash loan attack tied to deflationary tokens led to about $500,000 in losses. Later, in August 2023, a vulnerability in boosted pools resulted in losses ranging from $900,000 to $3 million. However, the November 2025 event was the most severe, driven by weaknesses in V2 composable pool logic.

Historically, such incidents have triggered sharp but short-lived market reactions. Sonic’s native token (S) saw limited publicly reported price impact. Even so, the incident once again underscored the ongoing risks of DeFi composability.

Sonic Labs Exploit Recovery Response

Loading chart...

It responded within minutes of detecting suspicious activity. At approximately 3:45 AM EST, the team activated a pre-planned emergency safety mechanism.

This tool allowed Sonic to freeze attacker-linked wallets at the protocol level. Transfers, swaps, and conversions from those addresses were immediately halted.

Sonic coordinated closely with the Beets.fi team throughout the incident. Together, they shared intelligence and aligned on containment efforts. The response proved highly effective compared to other affected chains. Roughly $3.3–$3.4 million in assets were initially locked on Sonic.

Although some funds later escaped via permit-based mechanisms in tokens like stS, the majority of value remained contained. In contrast, chains such as Ethereum, Base, and Optimism had limited intervention options.

The incident highlighted Sonic’s proactive design for crisis management at the chain level.

Future Outlook

The successful conclusion of the Sonic Labs Beets.fi exploit recovery sends a strong positive signal to the ecosystem. All 5,829,196 recovered S tokens were distributed proportionally, with a transparent GitHub breakdown published for verification.

Looking ahead, Sonic Labs has permanently renounced unilateral wallet-freezing powers.
Any future intervention will now require community or validator-approved hard forks.