Ethereum

when

Tornado

Stable

Balancer

Yearn Finance has suffered a major security breach, resulting in the loss of approximately $9 million.
The exploit targeted a legacy stable swap pool associated with the protocol’s yETH token that allowed the hackers to mint an infinite number of coins.
<h2 id="flaw-in-the-yeth-contract">Flaw in the yETH Contract</h2>
Blockchain security firm Peckshield was the first to flag the incident via X, <a href="https://x.com/PeckShieldAlert/status/1995311852310675537?s=20" rel="noopener noreferrer nofollow">stating</a>, “Yearn Finance suffered an attack resulting in a total loss of ~$9M.”
According to the analysts, the attacker abused a critical vulnerability in the yETH token contract that let them mint fresh yETH without posting adequate collateral, effectively inflating the token supply at will. This loophole was then used to drain liquidity from a pool outside of Yearn’s core vault products.
Targeted in the exploit was a custom-built contract designed to aggregate staked Ethereum derivatives such as stETH and rETH.&nbsp;The protocol later <a href="https://x.com/yearnfi/status/1995259652288729315?t=soMCsWEdS9cmwbBthejuSg&amp;s=19" rel="noopener noreferrer nofollow">shared</a> that the yUSND pool and Nerite’s vaults remained secure and were not impacted by the protocol failure. Following the attack, those responsible then laundered over $3 million in stolen ETH through Tornado Cash. Meanwhile, the remaining $6 million in various staked Ethereum assets remain in their wallet address (0xa80d…c822) as of the latest blockchain scans.
Yearn also <a href="https://x.com/yearnfi/status/1995344733154250993?t=jIGJYnqUOXXzKBxTkzRuIA&amp;s=19" rel="noopener noreferrer nofollow">confirmed</a> the compromise on X. It reported that $0.9 million was lost from the yETH-WETH stableswap pool on Curve, while an additional $8 million was drained from the affected pool. Impacted users were also advised to open a support ticket on the project’s Discord.
<h2 id="early-investigation-findings">Early Investigation Findings</h2>
The platform announced that it has assembled a war room, comprising SEAL911 and its audit partner, Chain Security, with a full postmortem investigation underway.
Early findings suggest that the incident shares a similar level of technical complexity with the recent Balancer hack. That unauthorized access <a href="https://cryptopotato.com/og-defi-giant-balancer-exploited-for-128m-forks-are-now-bleeding-out-too/" rel="noopener noreferrer nofollow">resulted</a> in more than $120 million being stolen across the platform’s main protocol and several forks.
On-chain analysts traced the Balancer event to a precision-loss bug in the integer fixed-point arithmetic used to calculate scaling factors within Composable Stable Pools, which are optimized for near-parity asset pairs like USDC/USDT or WETH/stETH.
SlowMist later <a href="https://cryptopotato.com/balancers-120m-meltdown-how-a-series-of-small-swaps-almost-broke-a-top-amm/" rel="noopener noreferrer nofollow">shared</a> that the flaw led to subtle but repeated price discrepancies during swaps, particularly when attackers executed multiple operations within a single transaction using the batch swap function.
Meanwhile, Yearn’s incident follows shortly after Korean exchange Upbit <a href="https://cryptopotato.com/upbit-exchange-hacked-confirms-50-million-worth-of-ethereum-eth-stolen/" rel="noopener noreferrer nofollow">suffered</a> its own security lapse, which resulted in the loss of $50 million in Ethereum.
The post <a href="https://cryptopotato.com/yearn-finance-loses-9m-in-single-transaction-exploit-of-yeth-vault/" rel="noopener noreferrer nofollow">Yearn Finance Loses $9M in Single-Transaction Exploit of yETH Vault</a> appeared first on <a href="https://cryptopotato.com/" rel="noopener noreferrer nofollow">CryptoPotato</a>.

Yearn Finance Loses $9M in Single-Transaction Exploit of yETH Vault

Table of Contents

CryptoPotato_News

Other articles published on Dec 1, 2025

Join our free newsletter for daily crypto updates!