Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Yala Security Vulnerability: $7.64M Reported Loss

·Historical incident record

Incident Overview

On September 14, the stablecoin protocol Yala disclosed that a recent security incident occurred when a hacker abused a temporary deployment key during the setup of an authorized cross-chain bridge. The attacker deployed an unauthorized bridge and extracted 7.64 million USDC (approximately 1,636 ETH). On October 29, the suspect involved in the case was arrested by law enforcement in Bangkok, Thailand, and most of the affected funds have been successfully recovered.

Sources & References

Original incident referencehttps://blog.yala.org/yala-post-mortem-september-14/ (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodFlash Loan Attack
    Reported loss$ 2,400,000
  2. Incident date
    Target

    GriffinAI

    Attack methodPrivate Key Leakage
    Reported loss$ 3,000,000
  3. Incident date
    Attack methodUnknown
    Reported loss$ 21,000,000
  4. Incident date
    Target

    UXLINK

    Attack methodSocial Engineering
    Reported loss$ 11,000,000
  5. Incident date
    Attack methodContract Vulnerability
    Reported loss$ 1,320,000