DEX

Balancer disclosed a security exploit on November 3 that resulted in $121.1 million in stolen funds. The protocol recovered or protected $45.7 million through emergency response measures, representing a 38% mitigation rate. BAL token has declined 23.81% to $0.7487 following the incident.

The Sky community has approved the allocation of up to $2.5 billion in USDS stablecoins to support projects developed through the Obex incubator. Framework Ventures is leading a $37 million funding round into Obex and will oversee the initiative focused on generating onchain yield within the Sky ecosystem.

Uniswap generated over $985 million in protocol fees from January through October 2025, averaging approximately $93 million monthly. The decentralized exchange protocol recently introduced a governance proposal implementing fee burns and protocol revenue capture mechanisms, according to The Block's Data and Insights newsletter analysis.

SlowMist identified critical security vulnerabilities in NOFX AI, an open-source crypto futures trading platform built on DeepSeek and Qwen architectures, that allowed attackers to access wallet private keys and exchange API credentials. Binance and OKX worked with SlowMist to identify affected users and revoke compromised credentials by November 17. The flaws affected multiple system versions, with authentication controls failing to protect administrator functions and sensitive endpoints returning API keys by default.

Hyperliquid deployed HIP-3, a framework allowing developers to launch perpetual futures markets without central approval. Co-founder Jeff Yan announced the upgrade alongside initial integrations from TradeXYZ, Ventuals, and Felix Protocol. Each project deployed custom perpetual markets directly on the platform's Layer 1 infrastructure.

Uniswap introduced its Continuous Clearing Auctions (CCA) protocol on November 13, 2025, designed to streamline token launches on its decentralized exchange. The mechanism aims to address liquidity challenges and transparency issues in traditional token launch methods. Aztec Network became the first project to utilize CCA, launching as a privacy-focused Layer 2 solution on Ethereum. The protocol conducts continuous clearing processes that distribute token supply gradually over time through on-chain auctions.

Price manipulation attacks resulted in $42 million in losses across 51 separate incidents during 2025, according to CertiK Alert. The November 12 incident involving Popcat on Hyperliquid demonstrated coordinated manipulation tactics, triggering $63 million in liquidations through artificial buy walls and sudden order withdrawals. CertiK recorded 19 incidents in Q4 alone, approaching Q2's peak of 20 cases.

Aave Labs received regulatory authorization under the EU's Markets in Crypto-Assets framework, enabling its Push service to facilitate euro-to-stablecoin conversions across the European Economic Area. The Central Bank of Ireland granted the license to Push Virtual Assets Ireland Limited, a subsidiary managing Aave's European operations. The protocol will offer regulated fiat on- and off-ramps for its GHO stablecoin and other digital assets.

Crypto exchange OKX has enabled decentralized exchange trading within its self-custody wallet application, giving users access to DEXs on Base, Solana, and X Layer networks. The feature routes orders across more than 100 liquidity pools and is available globally, including in the United States.

An unidentified trader deliberately destroyed $3 million while executing a leveraged manipulation on Hyperliquid's POPCAT perpetual contract, causing approximately $4.9 million in losses to the platform's hyperliquidity provider vault. The attacker withdrew USDC from OKX, distributed funds across multiple wallets, opened over $26 million in long positions, then removed an artificial buy wall to trigger mass liquidations.