Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Yapeswap Governance Attack: $21.90K Reported Loss

·Source-attributed incident record

Incident Overview

The Ethereum DeFi protocol Yapeswap (an AMM DEX) was hit by a governance attack. WorkersUnion’s zero-quorum setting allowed a proposal backed by only ~0.000055% of voting power to transfer YapeFactory’s feeToSetter role to the attacker. The attacker then installed a malicious Registry that made latestVault() return fake vaults while vaults() still listed real ones. YapePair counted the diverted deposits as farming assets without issuing redeemable shares, resulting in a loss of approximately $21,900.

Sources & References

Original incident referencehttps://x.com/SlowMist_Team/status/2114290073546219799 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    X100

    Attack methodFlash Loan Governance Attack
    Reported loss$ 4,850,000
  2. Incident date
    Target

    Initia

    Attack methodZero-day vulnerability
    Reported loss$ 2,700,000
  3. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 90,500
  4. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 783,100
  5. Incident date
    Attack methodSupply Chain Attack
    Reported loss$ 947,000