Digital Asset
Intelligence
Security Incident

Yearn Finance Contract Vulnerability: $10.00M Reported Loss

·Historical incident record

Incident Overview

The decentralized revenue aggregation platform Yearn Finance was attacked, and the hackers made more than $10 million in profits. According to the analysis of SlowMist, the reason for this attack is that the attacker used the yUSDT contract to set the fulcrum address by mistake, thereby manipulating the stablecoin reserve balance in the yUSDT contract, and depositing USDT in yUSDT to obtain a large amount of unexpected yUSDT Tokens for profit.

Sources & References

Original incident referencehttps://twitter.com/yearnfi/status/1646436798086672385 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodAffected by Euler Finance Attack
    Reported loss$ 1,380,000
  2. Incident date
    Attack methodContract Vulnerability
    Reported loss$ 9,000,000
  3. Incident date
    Target

    SyncDex

    Attack methodRug Pull
    Reported loss$370,000
  4. Incident date
    Target

    MetaPoint

    Attack methodContract Vulnerability
    Reported loss$ 920,000
  5. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000