On 30 November 2025, Yearn’s legacy yETH product was exploited. The attacker used a critical bug to mint a near-infinite amount of yETH tokens in a single transaction.

With that inflated supply of yETH — tokens that supposedly represent value in underlying assets — the attacker swapped them for real assets (ETH + liquid-staking derivatives) from liquidity pools (on platforms like Balancer).

As a result, roughly US$8–9 million was drained from the affected pools.

Some stolen ETH (about 1,000 ETH — ≈ US$3M) was transferred through a mixer service (Tornado Cash), likely to obfuscate the trail.

Important caveat: the exploit targeted a legacy yETH contract not the newer vaults (V2 / V3) of Yearn. So the core vault infrastructure was reportedly unaffected."

#BTC86kJPShock #BinanceBlockchainWeek #Write2Earn $ETH

ETH

3,253

-1.39%