Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Yearn Finance Contract Vulnerability: $9.00M Reported Loss

·Historical incident record

Incident Overview

According to PeckShieldAlert on X, Yearn Finance suffered an attack in which the hacker drained the liquidity pool by infinitely minting yETH, causing losses of roughly $9 million. Approximately 1,000 ETH (about $3 million) was transferred to Tornado Cash, while the attacker’s address still holds around $6 million worth of crypto assets. On December 1, according to PeckShield’s monitoring, Yearn recovered 2.4 million USD by burning the pxETH held by the hacker. An equivalent amount of pxETH has been re-minted and returned to the Redacted Cartel multisig wallet.

Sources & References

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodContract Vulnerability
    Reported loss$ 10,000,000
  2. Incident date
    Attack methodAffected by Euler Finance Attack
    Reported loss$ 1,380,000
  3. Incident date
    Target

    Goldfinch

    Attack methodcontract vulnerability
    Reported loss$ 330,000
  4. Incident date
    Target

    Upbit

    Attack methodUnknown
    Reported loss$ 30,300,000
  5. Incident date
    Attack methodContract Vulnerability
    Reported loss$ 830,000