Balancer's core idea is that a liquidity pool need not hold two assets in equal value. Pools can hold eight assets at arbitrary weights, rebalance themselves, use external rate providers to price yield-bearing tokens correctly, and nest inside one another. That expressiveness is why so much liquid staking and rate-provider liquidity lives here, and why the protocol has a longer vulnerability list than its simpler competitors.
The vault architecture
All Balancer pools share a single vault contract that holds the assets, while pool contracts hold only the pricing logic. This makes multi-hop swaps gas-efficient — tokens move once through the vault rather than between separate pools — and centralises the most security-critical code in one heavily audited place. The core vault has held throughout; the failures have been in pool types built on top of it.
The security record
In August 2023 a vulnerability in boosted pools forced an emergency call for liquidity providers to withdraw; roughly $2m was lost from pools whose owners did not exit in time, out of a far larger amount at risk. In November 2025 a rounding error in the invariant calculation of Composable Stable Pools was exploited across Ethereum, Base, Polygon and Arbitrum for well over $100m — one of the largest DeFi losses of the year, with only a fraction recovered through partner freezes. Balancer's disclosure in both cases was prompt and detailed, which is more than most protocols manage, but the pattern is what the score reflects: composability creates edges, and edges are where the bugs live.
Where Balancer is genuinely useful
Index-style exposure through weighted pools, liquidity for liquid staking tokens where a rate provider correctly prices accruing value, and protocol-owned liquidity structures that a two-asset AMM cannot express. veBAL governance directs emissions in a market similar to Curve's, and Aura Finance exists to give liquidity providers boosted returns without locking BAL themselves.
Who should use Balancer
Builders and sophisticated liquidity providers who need what only Balancer can express, and traders whose route happens to pass through it via an aggregator. For plain swaps on major pairs, Uniswap and Curve are deeper and have cleaner records. If you provide liquidity here, know which pool type you are in and whether it has been through an incident.