Yearn Finance Suffers $9M Breach As Attacker Creates Endless yETH Tokens
Yearn Finance reported that a legacy yETH product was hit by an exploit that allowed an attacker to mint a massive amount of fake tokens and swap them for real assets. Related Reading: Bitcoin Miners Face A Harsh December: Rising BTC Difficulty, Falling Hashprice According to on-chain alerts and protocol statements, the attacker created a near-infinite supply of yETH in a single transaction, then used those tokens to pull ETH and liquid-staking derivatives from liquidity pools. The incident was first flagged on November 30, 2025, and the total impact has been reported at roughly $9....
Related News
Instead of receiving dividends, Yearn.finance would buy and redistribute tokens with protocol revenue. The Yearn.finance community is introducing a proposal to reform the current token economics of YFI. Popularly called “buyback and build,” the proposal aims to bolster the project’s treasury while also generating value for all stakeholders. Its list of authors includes Yearn core developers Banteg, Tracheopteryx and Lehnberg, as well as Gabriel Shapiro, partner at BSV Law and occasional Yearn contributor. Currently, Yearn.finance uses a staking and dividends model. Holders must place their....
One of the fastest growing DeFi projects, Yearn.finance has spawned a range of core products that provide passive earnings on crypto assets. Launched in July 2020, Yearn.finance has emerged as one of the major players in the emerging decentralized finance (DeFi) space that provides services such as staking, lending aggregation and yield generation on the Ethereum blockchain. Boasting the most user-friendly crypto trading services that are being meted out autonomously, the project uses its native ERC-20 Yearn Finance (YFI) cryptocurrency to incentivize those who lock their crypto tokens in....
Yearn.finance’s YFI token has been facing some intense selling pressure today as the focus shifts back to Bitcoin. YFI and other blue-chip DeFi tokens have posted some massive gains throughout the past few days, with the Yearn ecosystem’s token rallying from lows of $7,500 to highs of $18,000 over the course of an hour. Other […]
The latest attack relied on user permissions granted to the protocol The latest “evil contract” exploit has netted an attacker over $14 million in stolen funds. Furucombo, a tool designed to help users “batch” transactions and interactions with multiple protocols at once, fell victim to the attack which centered on token approvals from users. The attacker’s address currently has $14 million worth of various cryptocurrencies, but the attack appears to be larger as they have been transferring ETH to privacy mixer Tornado Cash in batches over the last hour. This attack is conceptually similar....
Yearn Finance’s native token YFI has been seeing significant capitulation as the price has dropped from an all-time high (ATH) of $43k in mid-September to today’s $13,875 USD value. Despite the -67.7% loss since the token’s ATH, the Yearn Finance project still has around $624 million total value locked into the platform. Yearn Finance and the native token YFI has been a hot topic during the latter half of 2020. This is because the YFI token went from an all-time low of $739 on July 21, 2020, to reaching an ATH of $43k on September 12. In between that time, YFI saw a....