Digital Asset
Intelligence
Security Incident · ETH Ecosystem

YAM Contract Vulnerability: $750.00K Reported Loss

·Historical incident record

Incident Overview

On August 13, 2020, the well-known Ethereum DeFi project YAM officially issued a post on Twitter indicating that there were loopholes in the contract. The price plummeted by 99% within 24 hours, resulting in the “permanent destruction” of the governance contract, with a value of 750,000 USD Curve tokens. It is locked and cannot be used. Since the value of totalSupply was taken during rebase, the value of totalSupply calculated incorrectly will not be immediately applied to initSupply through mint, so before the next rebase, the community still has a chance to recover this error and reduce losses. But once the next rebase is executed, the entire mistake will become irreparable.

Sources & References

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Ledger

    Attack methodUnknown
    Reported loss100,000 ERC-20
  2. Incident date
    Target

    ETC

    Attack method51% attack
    Reported loss$ 1,680,000
  3. Incident date
    Target

    Opyn

    Attack methodContract Vulnerability
    Reported loss371,260 USDC
  4. Incident date
    Target

    2gether

    Attack methodTrojan horse virus
    Reported loss$ 7,000,000
  5. Incident date
    Target

    NUGS/NEXE

    Attack methodRug Pull
    Reported lossNot disclosed