Yearn Finance Suffers $9M Breach As Attacker Creates Endless yETH Tokens
Yearn Finance reported that a legacy yETH product was hit by an exploit that allowed an attacker to mint a massive amount of fake tokens and swap them for real assets. Related Reading: Bitcoin Miners Face A Harsh December: Rising BTC Difficulty, Falling Hashprice According to on-chain alerts and protocol statements, the attacker created a near-infinite supply of yETH in a single transaction, then used those tokens to pull ETH and liquid-staking derivatives from liquidity pools. The incident was first flagged on November 30, 2025, and the total impact has been reported at roughly $9....
Related News
Instead of receiving dividends, Yearn.finance would buy and redistribute tokens with protocol revenue. The Yearn.finance community is introducing a proposal to reform the current token economics of YFI. Popularly called “buyback and build,” the proposal aims to bolster the project’s treasury while also generating value for all stakeholders. Its list of authors includes Yearn core developers Banteg, Tracheopteryx and Lehnberg, as well as Gabriel Shapiro, partner at BSV Law and occasional Yearn contributor. Currently, Yearn.finance uses a staking and dividends model. Holders must place their....
One of the fastest growing DeFi projects, Yearn.finance has spawned a range of core products that provide passive earnings on crypto assets. Launched in July 2020, Yearn.finance has emerged as one of the major players in the emerging decentralized finance (DeFi) space that provides services such as staking, lending aggregation and yield generation on the Ethereum blockchain. Boasting the most user-friendly crypto trading services that are being meted out autonomously, the project uses its native ERC-20 Yearn Finance (YFI) cryptocurrency to incentivize those who lock their crypto tokens in....
The latest attack relied on user permissions granted to the protocol The latest “evil contract” exploit has netted an attacker over $14 million in stolen funds. Furucombo, a tool designed to help users “batch” transactions and interactions with multiple protocols at once, fell victim to the attack which centered on token approvals from users. The attacker’s address currently has $14 million worth of various cryptocurrencies, but the attack appears to be larger as they have been transferring ETH to privacy mixer Tornado Cash in batches over the last hour. This attack is conceptually similar....
Yearn.finance’s YFI token has been facing some intense selling pressure today as the focus shifts back to Bitcoin. YFI and other blue-chip DeFi tokens have posted some massive gains throughout the past few days, with the Yearn ecosystem’s token rallying from lows of $7,500 to highs of $18,000 over the course of an hour. Other […]
Yearn.Finance (YFI) is one of the most talked-about cryptocurrencies of 2020, both due to its scarce 30,000 token supply and its miraculous price increase to more than 1 BTC in value. However, the DeFi token could fall to $15,000 or deeper if Bitcoin brings down the rest of the crypto market. Yearn.Finance, Other DeFi Tokens […]