DeFi

Bitcoin

Nexo

<p>Yearn Finance has suffered a serious security breach after an attacker managed to mint what amounted to an unlimited supply of yETH tokens, exploiting a flaw that ultimately drained an estimated $9 million from the protocol.</p>
<p>The incident marks one of Yearn’s most disruptive exploits in recent years and immediately reignited concerns around smart-contract risks in legacy DeFi infrastructure.</p>
<p>Early analysis from on-chain investigators shows that the attacker targeted a vulnerability inside one of Yearn’s older vault contracts, manipulating the system’s internal accounting to create an “infinite mint” environment.</p>
<blockquote class="twitter-tweet">
 <p>At 21:11 UTC on Nov 30, an incident occurred involving the yETH stableswap pool that resulted in the minting of a large amount of yETH. The contract impacted is a custom version of popular stableswap code, unrelated to other Yearn products. Yearn V2/V3 vaults are not at risk.</p>
 <p>— yearn (@yearnfi) <a href="https://twitter.com/yearnfi/status/1995344733154250993?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">December 1, 2025</a></p>
</blockquote>
<p></p>
<p>By generating a massive amount of synthetic yETH at virtually no cost, the exploiter was able to swap the tokens for real assets and siphon value across multiple liquidity pools before the abnormal flows were detected.</p>
<p>The Yearn team moved quickly to pause affected components and begin an internal investigation, while security researchers worked to trace the path of the stolen funds. Although the exploit was contained to a specific legacy contract and did not impact newer vaults, the event has renewed conversations within the DeFi community about the long-term maintenance of older smart-contract systems that still hold meaningful liquidity.</p>
<div class="read-more tdi_7">
 <div class="td_module_flex td_module_flex_1 td_module_wrap td-animation-stack td-cpt-post td-module-exclusive">
  <div class="td-module-container">
   <div class="td-image-container">
    <div class="td-module-thumb">
     <a href="https://www.ethnews.com/market-heats-up-tether-bitcoin-nexo-become-thanksgivings-top-crypto-stories/" rel="noopener noreferrer nofollow"> <span></span> </a>
    </div>
   </div>
   <div class="td-module-meta-info">
    <h3 class="entry-title td-module-title" id="a-href-https-www-ethnews-com-market-heats-up-tether-bitcoin-nexo-become-thanksgivings-top-crypto-stories-rel-noopener-noreferrer-nofollow-market-heats-up-tether-bitcoin-nexo-become-thanksgiving-s-top-crypto-stories-a"><a href="https://www.ethnews.com/market-heats-up-tether-bitcoin-nexo-become-thanksgivings-top-crypto-stories/" rel="noopener noreferrer nofollow">Market Heats Up: Tether, Bitcoin &amp; Nexo Become Thanksgiving’s Top Crypto Stories</a></h3>
   </div>
  </div>
 </div>
</div>
<p>Market reaction was immediate, with Yearn-related assets experiencing volatility as traders assessed whether the exploit posed systemic risks. Developers emphasized that user funds in active, up-to-date vaults remain safe, but acknowledged that recovering the stolen assets will depend on negotiations with the attacker or cooperation across exchanges and on-chain enforcement tools.</p>
<p>The Yearn Finance exploit serves as a reminder that even established DeFi protocols remain vulnerable to sophisticated attacks if older code is not continuously audited, upgraded, and phased out. As investigations continue, the community now awaits a detailed post-mortem that will outline the technical root cause, patch measures, and the protocol’s path toward restoring confidence after the $9 million breach.</p>
<p>The post <a href="https://www.ethnews.com/yearn-finance-hit-by-9m-exploit-after-attacker-mints-unlimited-yeth-tokens/" rel="noopener noreferrer nofollow">Yearn Finance Hit by $9M Exploit After Attacker Mints Unlimited yETH Tokens</a> appeared first on <a href="https://www.ethnews.com" rel="noopener noreferrer nofollow">ETHNews</a>.</p>

Yearn Finance Hit by $9M Exploit After Attacker Mints Unlimited yETH Tokens

Table of Contents

ETHNews

Other articles published on Dec 1, 2025

Join our free newsletter for daily crypto updates!