Gnosis Chain validators that do not follow Balancer funds’ hard fork may face penalties in the following days, the official account warns.
Gnosis Chain GNO $121.5 24h volatility: 2.3% Market cap: $320.79 M Vol. 24h: $5.73 M executed, on December 22, a governance-approved hard fork to recover around $9.4 million of the frozen funds from the Balancer hack.
Passed one day of the execution, the Gnosis official account warned “remaining validators” to upgrade and “avoid penalties.”
On December 12, Gnosis’ head of infrastructure Philippe Schommers explained in a governance forum post that “contributors, validators and other stakeholders have been working on a hard fork” to recover funds previously frozen on the Gnosis Chain.
The freezing happened following a validators-approved soft fork in November 2025, addressing part of the funds identified as belonging to the Balancer exploit’s attacker.
Balance hack: hard fork proposal on Dec. 12, 2025. | Source: Gnosis Governance Forum
As planned, Gnosis node operators had ten days to upgrade, executing the hard fork that allowed for the funds’ seizure.
Earlier this year, the Sui SUI $1.42 24h volatility: 4.2% Market cap: $5.30 B Vol. 24h: $526.38 M network faced a setback following the CETUS hack.
The Sui Foundation, Cetus Protocol, and OtterSec gained community approval to use a special signature to seize the attacker’s funds, recovering part of the losses.
Following this series of developments, the Gnosis Chain has now posted a warning on X to all “remaining” validators to upgrade their nodes accordingly.
Not upgrading would result in penalties, executed via the GNO token. The penalties can range from not receiving staking rewards to potentially leading to slashing in extreme cases of prolonged non-participation or if interpreted as disruptive behavior.
Yesterday, our community of operators decided to execute a hard fork to recover the funds lost in Balancer hack. The funds are now out of the hacker's control.
All remaining node operators should take action to avoid penalties.
— Gnosis Chain (@gnosischain) December 23, 2025
Divided Reactions
Despite the reported approval, Gnosis’s decision has divided opinions, with some praising transparency and others criticizing the breach of immutability.
Ignas DeFi commented on the matter, mentioning this hard fork sets precedents for future decisions.
“But this fork sets a big precedent: Do we hard fork for every hack? Only if losses > 5% of TVL? Why not 3%? Can app devs start assuming the chain will step in if they mess up, lowering security standards?” He noted that “The hard fork and the debate will end up setting hard-fork precedent rules for other chains to follow.”
In one of his related posts, however, he explained that the soft fork already broke Gnosis’ neutrality and claimed that other chains took similar decisions around the Balancer hack.
“We’ve already seen similar censorship interventions elsewhere,” Ignas said, pointing out “Berachain and Sonic after the same Balancer hack, and Sui after the $162M Cetus exploit.”
Gnosis is considering a hard fork to recover funds from the Balancer hack.
After the hack, ~$9.4M was frozen on Gnosis Chain via a soft fork.
Funds cannot move from the attacker's address. The funds are stuck.
Returning them to victims requires a hard fork.
I think Gnosis… pic.twitter.com/osoXg1wppJ
— Ignas | DeFi (@DefiIgnas) December 15, 2025
The Balance V2 Hack and Gnosis
The referenced incident involved a Balancer V2 Protocol exploit that drained approximately $128 millionacross affected pools. This was not a chain-specific hack, but a protocol exploit that affected multiple chains, including Gnosis.
Harry Donnelly, founder and CEO of Circuit, called Balancer’s breach “a serious warning” for the DeFi ecosystem, noting that this was “one of the most trusted names in the space” and “an early pioneer with a culture of compliance, backed by rigorous audits and open disclosure,” according to a report by The Defiant.
next