The Berachain Foundation sent an update regarding X to users affected by last week’s exploit. The foundation that oversees the blockchain has reported that the lost funds have been almost fully recovered and shared its plans for reimbursing users.
The platform suspended operations earlier this month to contain the attack and announced it would soon launch a claims page where depositors could get their assets back.
— Bellachain Foundation 🐻⛓ (@berachain) November 10, 2025
Exploits and white hat recovery
Balancer V2’s composable stable pool exploit also affected other chains, resulting in up to $128 million in losses across various chains, including Berachain’s decentralized exchange, and approximately $12 million in losses for BEX, which runs on a fork of Balancer V2’s codebase.
The team responded by suspending all affected vaults and liquidity pools, suspending HONEY minting, and coordinating a network-wide emergency outage among validators.
A white hat actor who claimed to be behind the exploit reportedly contacted the foundation and offered to return the stolen funds. The hackers pre-signed a transaction that would return the assets to VeraChain deployer addresses upon VeraChain’s restart, and the chain resumed operations on November 4th. The funds were transferred to the Foundation’s wallet.
VeraChain also shared a detailed breakdown showing the assets recovered: 5.7 million sUSDe, 2.15 million USDe, 3.2 million HONEY, and smaller amounts of wBERA, iBERA, wETH, beraETH. The recovery covers almost the entire value affected by the exploit, except for minor discrepancies and white hat-owned tokens that are still being processed.
Refund procedure and user authentication
Berachain shared a multi-tab spreadsheet in the same post on X. This spreadsheet includes affected addresses, token balances, and estimated recoveries across each pool category.
The exploited pool said it was set into “emergency withdrawal mode” on Wednesday, November 12, allowing users to withdraw their remaining balances from BEX before claim redemption begins. A claim page to facilitate the redistribution of recovered assets is currently under review for quality assurance and the community.
“To calculate how much redistribution rights each user has, we determined each user’s percentage of pool ownership prior to the exploit,” the team explained. “We then calculated each user’s pro-rata share of the recovered funds based on that percentage and verified the results by cross-checking post-exploit ownership figures.”
“We will continue to check and gather feedback on the distribution of recovered funds until the final recovery claim is finalized,” the foundation said, adding that minor adjustments may be made as review continues.
What’s next for Vera Chain?
Berachain’s collaboration with validators, as well as security researchers and service providers such as LayerZero, RedStone, and Pyth, helped limit potential spillovers. VeraChain said the chain was offline for about 30 hours before being restarted, but there was no manipulation of the consensus layer or damage to unrelated dApps.
In a post-mortem report, the Berachain Foundation said it will integrate future post-patches for Balancer, decommission compromised pool types, and conduct an external audit before reactivating BEX.
Get a free seat in our exclusive 1,000 member crypto trading community.