Cash

DeFi

Tornado Cash

Tornado

Balancer

<h4>Quick Breakdown&nbsp;</h4>
<ul>
 <li style="font-weight: 400;">Attacker exploited a legacy yETH contract to mint over 235 trillion tokens and drain Balancer pools.</li>
 <li style="font-weight: 400;">At least $3M has moved through Tornado Cash, with more funds still linked to the attacker’s wallets.</li>
 <li style="font-weight: 400;">Yearn says its V2 and V3 vaults remain secure, limiting the impact to outdated infrastructure.</li>
</ul>
<h3 id="span-style-font-weight-400-infinite-mint-attack-drains-millions-from-balancer-pools-span">Infinite-mint attack drains millions from balancer pools</h3>
Yearn Finance is grappling with a fresh security <a style="color: #0000ff;" href="https://x.com/yearnfi/status/1995259652288729315?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E1995259652288729315%7Ctwgr%5E6ead3314fb5186005e3965db2279b9eabf392381%7Ctwcon%5Es1_c10&amp;ref_url=https%3A%2F%2Fcrypto.news%2Fsouth-korea-lawmakers-january-digital-asset-act-2025%2F" rel="noopener noreferrer nofollow">breach</a> after an attacker abused a long-standing flaw in its legacy yETH token contract. Late on November 30, the exploiter triggered an infinite-mint vulnerability that allowed them to generate more than 235 trillion yETH tokens in a single transaction, a supply far beyond what should exist.
<blockquote class="twitter-tweet">
 We are investigating an incident involving the yETH LST stableswap pool.
 Yearn Vaults (both V2 and V3) are not affected.
 — yearn (@yearnfi) <a href="https://twitter.com/yearnfi/status/1995259652288729315?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">November 30, 2025</a>
</blockquote>

Armed with this massive token batch, the attacker rapidly drained Balancer pools holding real assets, including ETH and major liquid staking derivatives. The yETH stableswap pool was drained within minutes, resulting in an estimated $2.8 million deficit.
<h3 id="span-style-font-weight-400-incident-confined-to-old-yeth-product-not-modern-vaults-span">Incident confined to old yETH product, not modern vaults</h3>
Yearn Finance confirmed that the issue stemmed from an outdated version of its yETH logic, stressing that the flaw does not affect its V2 or V3 vaults. Protocols built on Yearn V3, such as Katana, also reported zero exposure.
Security analysts noted that a cluster of helper contracts appeared briefly before the attack and self-destructed once the pools were drained, an evasive tactic commonly used to blur on-chain traces. Early reviews suggest the exploit originated from a known minting weakness in the legacy contract, not Yearn’s current architecture.
The protocol maintains an active bug bounty program offering up to $200,000 for critical findings, though no recovery plan has been announced.
<h3 id="span-style-font-weight-400-funds-routed-through-tornado-cash-amid-ongoing-movement-span">Funds routed through Tornado Cash amid ongoing movement</h3>
On-chain watchers, including researcher Togbo, reported that the attacker moved ETH in batches of 100 through Tornado Cash shortly after the exploit. Roughly 1,000 ETH was mixed within hours, while additional assets worth several million dollars remain in the attacker’s wallets.
The yETH pool held around $11 million before the breach. Yearn reiterated that user funds in active vaults are safe, even as the final loss figures are still being tallied.
The incident adds to Yearn’s <a style="color: #0000ff;" href="https://defi-planet.com/2023/04/yearn-finance-affected-by-11m-exploit-via-aave-v1/" rel="noopener noreferrer nofollow">history</a> of handling legacy risks, following its 2021 yDAI exploit and a 2023 treasury misconfiguration.
&nbsp;
If you would like to read more articles like this, visit<a style="color: #0000ff;" href="https://defi-planet.com/wp-content/uploads/2025/09/Barriers-and-Skepticism-in-Apples-crypto-security-push-1-3.avifwp-content/uploads/2025/09/Barriers-and-Skepticism-in-Apples-crypto-security-push-1-2.avifwp-content/uploads/2025/10/Proof-of-Personhood-A-Privacy-First-Approach-to-Identity-Verification-scaled-1.avifwp-content/uploads/2025/10/Are-We-Ignoring-the-Ethics-of-Crypto-Staking-scaled-2.avifwp-content/uploads/2025/10/Slippage-Front-Running-and-MEV-The-Hidden-Costs-of-DeFi-Trading-scaled-1.avifwp-content/uploads/2025/09/Next-Technology-Holding-1.avifwp-content/uploads/2025/09/Next-Technology-Holding-1.avifwp-content/uploads/2025/10/Russian-Ruble-Backed-Stablecoin-A7A5-1.avifwp-content/uploads/2025/10/IoTeX-1.avifwp-content/uploads/2025/09/Pepeto-eth-ethereum__17576735955xmMW0sU5j-1.jpgwp-content/uploads/2025/10/featured_BitMine_Dark_Background___Logo_1759753804_1759753804OCMtn2Egta-1.avif" rel="noopener noreferrer nofollow"> DeFi Planet</a> and follow us on<a style="color: #0000ff;" href="https://twitter.com/PlanetDefi" rel="noopener noreferrer nofollow"> Twitter</a>,<a style="color: #0000ff;" href="https://www.linkedin.com/company/defi-planet/" rel="noopener noreferrer nofollow"> LinkedIn</a>,<a style="color: #0000ff;" href="https://www.facebook.com/DeFi-Planet-129907662611402" rel="noopener noreferrer nofollow"> Facebook</a>,<a style="color: #0000ff;" href="https://www.instagram.com/defi.planet/" rel="noopener noreferrer nofollow"> Instagram</a>, and<a href="https://coinmarketcap.com/community/profile/DeFiPlanet/" rel="noopener noreferrer"> CoinMarketCap Community</a>.
Take control of your crypto&nbsp; portfolio with MARKETS PRO, DeFi Planet’s suite of analytics tools.”
The post <a href="https://defi-planet.com/2025/12/yearn-finance-hit-by-new-exploit-as-attacker-mints-trillions-of-yeth-tokens/" rel="noopener noreferrer nofollow">Yearn Finance Hit by New Exploit as Attacker Mints Trillions of yETH Tokens</a> appeared first on <a href="https://defi-planet.com" rel="noopener noreferrer nofollow">DeFi Planet</a>.

Yearn Finance Hit by New Exploit as Attacker Mints Trillions of yETH Tokens

Table of Contents

DeFi Planet

Other articles published on Dec 1, 2025

Join our free newsletter for daily crypto updates!