PeckShield says hackers minted unlimited yETH, drained a custom stETH/rETH pool, and laundered over $3 million in ETH through Tornado Cash.PeckShield says hackers minted unlimited yETH, drained a custom stETH/rETH pool, and laundered over $3 million in ETH through Tornado Cash.

Yearn Finance Loses $9M in Single-Transaction Exploit of yETH Vault

2025/12/01 18:34

Yearn Finance has suffered a major security breach, resulting in the loss of approximately $9 million.

The exploit targeted a legacy stable swap pool associated with the protocol’s yETH token that allowed the hackers to mint an infinite number of coins.

Flaw in the yETH Contract

Blockchain security firm Peckshield was the first to flag the incident via X, stating, “Yearn Finance suffered an attack resulting in a total loss of ~$9M.”

According to the analysts, the attacker abused a critical vulnerability in the yETH token contract that let them mint fresh yETH without posting adequate collateral, effectively inflating the token supply at will. This loophole was then used to drain liquidity from a pool outside of Yearn’s core vault products.

Targeted in the exploit was a custom-built contract designed to aggregate staked Ethereum derivatives such as stETH and rETH. The protocol later shared that the yUSND pool and Nerite’s vaults remained secure and were not impacted by the protocol failure. Following the attack, those responsible then laundered over $3 million in stolen ETH through Tornado Cash. Meanwhile, the remaining $6 million in various staked Ethereum assets remain in their wallet address (0xa80d…c822) as of the latest blockchain scans.

Yearn also confirmed the compromise on X. It reported that $0.9 million was lost from the yETH-WETH stableswap pool on Curve, while an additional $8 million was drained from the affected pool. Impacted users were also advised to open a support ticket on the project’s Discord.

Early Investigation Findings

The platform announced that it has assembled a war room, comprising SEAL911 and its audit partner, Chain Security, with a full postmortem investigation underway.

Early findings suggest that the incident shares a similar level of technical complexity with the recent Balancer hack. That unauthorized access resulted in more than $120 million being stolen across the platform’s main protocol and several forks.

On-chain analysts traced the Balancer event to a precision-loss bug in the integer fixed-point arithmetic used to calculate scaling factors within Composable Stable Pools, which are optimized for near-parity asset pairs like USDC/USDT or WETH/stETH.

SlowMist later shared that the flaw led to subtle but repeated price discrepancies during swaps, particularly when attackers executed multiple operations within a single transaction using the batch swap function.

Meanwhile, Yearn’s incident follows shortly after Korean exchange Upbit suffered its own security lapse, which resulted in the loss of $50 million in Ethereum.

The post Yearn Finance Loses $9M in Single-Transaction Exploit of yETH Vault appeared first on CryptoPotato.

Disclaimer: The articles reposted on this site are sourced from public platforms and are provided for informational purposes only. They do not necessarily reflect the views of MEXC. All rights remain with the original authors. If you believe any content infringes on third-party rights, please contact service@support.mexc.com for removal. MEXC makes no guarantees regarding the accuracy, completeness, or timeliness of the content and is not responsible for any actions taken based on the information provided. The content does not constitute financial, legal, or other professional advice, nor should it be considered a recommendation or endorsement by MEXC.

You May Also Like

Shocking OpenVPP Partnership Claim Draws Urgent Scrutiny

Shocking OpenVPP Partnership Claim Draws Urgent Scrutiny

The post Shocking OpenVPP Partnership Claim Draws Urgent Scrutiny appeared on BitcoinEthereumNews.com. The cryptocurrency world is buzzing with a recent controversy surrounding a bold OpenVPP partnership claim. This week, OpenVPP (OVPP) announced what it presented as a significant collaboration with the U.S. government in the innovative field of energy tokenization. However, this claim quickly drew the sharp eye of on-chain analyst ZachXBT, who highlighted a swift and official rebuttal that has sent ripples through the digital asset community. What Sparked the OpenVPP Partnership Claim Controversy? The core of the issue revolves around OpenVPP’s assertion of a U.S. government partnership. This kind of collaboration would typically be a monumental endorsement for any private cryptocurrency project, especially given the current regulatory climate. Such a partnership could signify a new era of mainstream adoption and legitimacy for energy tokenization initiatives. OpenVPP initially claimed cooperation with the U.S. government. This alleged partnership was said to be in the domain of energy tokenization. The announcement generated considerable interest and discussion online. ZachXBT, known for his diligent on-chain investigations, was quick to flag the development. He brought attention to the fact that U.S. Securities and Exchange Commission (SEC) Commissioner Hester Peirce had directly addressed the OpenVPP partnership claim. Her response, delivered within hours, was unequivocal and starkly contradicted OpenVPP’s narrative. How Did Regulatory Authorities Respond to the OpenVPP Partnership Claim? Commissioner Hester Peirce’s statement was a crucial turning point in this unfolding story. She clearly stated that the SEC, as an agency, does not engage in partnerships with private cryptocurrency projects. This response effectively dismantled the credibility of OpenVPP’s initial announcement regarding their supposed government collaboration. Peirce’s swift clarification underscores a fundamental principle of regulatory bodies: maintaining impartiality and avoiding endorsements of private entities. Her statement serves as a vital reminder to the crypto community about the official stance of government agencies concerning private ventures. Moreover, ZachXBT’s analysis…
Share
BitcoinEthereumNews2025/09/18 02:13
Tom Lee Predicts Major Bitcoin Adoption Surge

Tom Lee Predicts Major Bitcoin Adoption Surge

The post Tom Lee Predicts Major Bitcoin Adoption Surge appeared on BitcoinEthereumNews.com. Key Points: Tom Lee suggests significant future Bitcoin adoption. Potential 200x increase in Bitcoin adoption forecast. Ethereum positioned as key settlement layer for tokenization. Tom Lee, co-founder of Fundstrat Global Advisors, predicted at Binance Blockchain Week that Bitcoin adoption could surge 200-fold amid shifts in institutional and retirement capital allocations. This outlook suggests a potential major restructuring of financial ecosystems, boosting Bitcoin and Ethereum as core assets, with tokenization poised to reshape markets significantly. Tom Lee Projects 200x Bitcoin Adoption Increase Tom Lee, known for his bullish stance on digital assets, suggested that Bitcoin might experience a 200 times adoption growth as more traditional retirement accounts transition to Bitcoin holdings. He predicts a break from Bitcoin’s traditional four-year cycle. Despite a market slowdown, Lee sees tokenization as a key trend with Wall Street eyeing on-chain financial products. The immediate implications suggest significant structural changes in digital finance. Lee highlighted that the adoption of a Bitcoin ETF by BlackRock exemplifies potential shifts in finance. If retirement funds begin reallocating to Bitcoin, it could catalyze substantial growth. Community reactions appear positive, with some experts agreeing that the tokenization of traditional finance is inevitable. Statements from Lee argue that Ethereum’s role in this transformation is crucial, resonating with broader positive sentiment from institutional and retail investors. As Lee explained, “2025 is the year of tokenization,” highlighting U.S. policy shifts and stablecoin volumes as key components of a bullish outlook. source Bitcoin, Ethereum, and the Future of Finance Did you know? Tom Lee suggests Bitcoin might deviate from its historical four-year cycle, driven by massive institutional interest and tokenization trends, potentially marking a new era in cryptocurrency adoption. Bitcoin (BTC) trades at $92,567.31, dominating 58.67% of the market. Its market cap stands at $1.85 trillion with a fully diluted market cap of $1.94 trillion.…
Share
BitcoinEthereumNews2025/12/05 10:42
‘Real product market fit’ – Can Chainlink’s ETF moment finally unlock $20?

‘Real product market fit’ – Can Chainlink’s ETF moment finally unlock $20?

The post ‘Real product market fit’ – Can Chainlink’s ETF moment finally unlock $20? appeared on BitcoinEthereumNews.com. Chainlink has officially joined the U.S. Spot ETF club, following Grayscale’s successful debut on the 3rd of December.  The product achieved $13 million in day-one trading volume, significantly lower than the Solana [SOL] and Ripple [XRP], which saw $56 million and $33 million during their respective launches.  However, the Grayscale spot Chainlink [LINK] ETF saw $42 million in inflows during the launch. Reacting to the performance, Bloomberg ETF analyst Eric Balchunas called it “another insta-hit.” “Also $41m in first day flows. Another insta-hit from the crypto world, only dud so far was Doge, but it’s still early.” Source: Bloomberg For his part, James Seyffart, another Bloomberg ETF analyst, said the debut volume was “strong” and “impressive.” He added,  “Chainlink showing that longer tail assets can find success in the ETF wrapper too.” The performance also meant broader market demand for LINK exposure, noted Peter Mintzberg, Grayscale CEO.  Impact on LINK markets Bitwise has also applied for a Spot LINK ETF and could receive the green light to trade soon. That said, LINK’s Open Interest (OI) surged from $194 million to nearly $240 million after the launch.  The surge indicated a surge in speculative interest for the token on the Futures market.  Source: Velo By extension, it also showed bullish sentiment following the debut. On the price charts, LINK rallied 8.6%, extending its weekly recovery to over 20% from around $12 to $15 before easing to $14.4 as of press time. It was still 47% down from the recent peak of $27.  The immediate overheads for bulls were $15 and $16, and clearing them could raise the odds for tagging $20. Especially if the ETF inflows extend.  Source: LINK/USDT, TradingView Assessing Chainlink’s growth Chainlink has grown over the years and has become the top decentralized oracle provider, offering numerous blockchain projects…
Share
BitcoinEthereumNews2025/12/05 10:26