SlowMist founder Yu Xian stated on X platform (formerly Twitter) that the Balancer attack is likely a DNS hijacking attack, related to the well-known Angel Drainer phishing group. The distribution of interests in the phishing industry is high, and various traditional advanced techniques may be used. The security threats of Web3 projects come not only from their own smart contract code, but also from various basic components in Web1/2, including people.