Cryptocurrency

DeFi

Million

Read

Tornado

<div class="key-points-section">
 Key Points:
 <ul>
 <li>Yearn Finance's yUSDT vault exploited, significant financial impact.</li>
 <li>Attacker laundered funds using Tornado Cash.</li>
 <li>Community reassured the situation is under investigation.</li>
 </ul>
</div>
Yearn Finance’s yETH vault suffered a substantial hack, resulting in over $11.5 million in stolen funds. The incident occurred through a vulnerability, allowing the attacker to misuse yUSDT vault contracts.
The hack showcases vulnerabilities in DeFi protocols, raising concerns about security and the integrity of smart contracts within the ecosystem.
The Yearn Finance protocol was exploited through a contract misconfiguration, prompting the attacker to mint a large quantity of yUSDT tokens. Using minimal USDT, these tokens were converted into various stablecoins like DAI, USDC, and TUSD.
Key contributors, including security researchers, have been <a href="https://gov.yearn.fi/latest" rel="noopener noreferrer nofollow">raising awareness about the risks</a> of legacy contracts. While the total value locked (TVL) in affected vaults dropped drastically, other Yearn Finance vaults remained unaffected.
As per on-chain data, the attacker managed to swap the minted tokens and <a href="https://bingx.com/partner/cryptodotnews" rel="noopener noreferrer nofollow">launder funds through Tornado Cash</a>, a mixing service. This incident emphasizes ongoing regulatory issues around such platforms used for concealing fund routes.
Historically, DeFi has faced similar scenarios where smart contract vulnerabilities led to substantial fund losses. Yearn Finance’s focus turns to enhancing security measures and safeguarding its ecosystem against such threats in the future.
<blockquote>
 Yearn v2 vaults seem not to be impacted. Yearn contributors are investigating. Further comms to follow on main account.
</blockquote>
<blockquote>
 — Storming0x, Security Researcher, Yearn Finance
</blockquote>
<blockquote class="twitter-tweet">
 <a href="https://twitter.com/intent/tweet?text=DeFi%20protocol%20Yearn%20Finance%20exploited%20with%20over%20%2411M%20stolen&amp;url=https%3A%2F%2Fblog.koddos.net%2Fdefi-protocol-yearn-finance-exploited-with-over-11m-stolen%2F" rel="noopener noreferrer nofollow"></a>
</blockquote>
<figure class="wp-block-table">
 <table class="has-fixed-layout">
 <tbody>
 <tr>
 <td>Disclaimer: The content on <a href="https://nftenex.com/" rel="noopener noreferrer nofollow">nftenex.com</a> is provided for informational purposes only and should not be considered financial or investment advice. Cryptocurrency investments carry inherent risks. Please consult a qualified financial advisor before making any investment decisions.</td>
 </tr>
 </tbody>
 </table>
</figure> <a href="https://nftenex.com/yearn-finance-eth-vault-hack-11m-loss/" rel="noopener noreferrer nofollow">Read original article on nftenex.com</a>

Yearn Finance yETH Hack: Stolen Funds Exceed $11.5 Million

NFTENEX

Other articles published on Dec 1, 2025

Join our free newsletter for daily crypto updates!