The post Yearn Finance Hit by $9M Exploit as Hacker Mints “Infinite yETH Tokens” appeared first on Coinpedia Fintech News Yearn Finance, one of the most well-known DeFi platforms, has suffered a major security incident that caused nearly $9 million in losses. The attack targeted a custom stable-swap pool linked to Yearn’s yETH token, allowing the hacker to mint almost unlimited tokens and drain the pool in a single strike. Here are the key details. How the Attack Happened According to Yearn Finance, the issue occurred on November 30 around 21:11 UTC. The affected contract was designed differently from Yearn’s main products, but a weakness in that code allowed the attacker to mint a near-infinite number of yETH tokens, far beyond what the system was supposed to allow. With these fake tokens, they withdrew real ETH and liquid staking assets from the pool. Around $8 million was drained from the main stableswap pool, and another $0.9 million was removed from the yETH-WETH pool on Curve. The damage is nearly $9 million. $3 Million Laundered Through Tornado Cash Blockchain security firm PeckShieldAlert confirms that the exploiter quickly moved around 1,000 ETH ($3 million) into Tornado Cash, a platform often used to hide transaction trails. The remaining stolen funds, roughly $6 million, still sit in the attacker’s wallet address (0xa80d…c822). #PeckShieldAlert Yearn Finance @yearnfi suffered an attack resulting in a total loss of ~$9M.The exploit involved minting a near-infinite number of yETH tokens, depleting the pool in a single transaction. ~1K $ETH (worth ~$3M) was sent to #TornadoCash, while the exploiter's… pic.twitter.com/IXNygpwoWa— PeckShieldAlert (@PeckShieldAlert) December 1, 2025 The wallet currently holds a mix of ETH, pxETH, frxETH, cbETH, Lido stETH, and Rocket Pool rETH. Most of this is now staked, likely an attempt to delay recovery or complicate potential legal actions. Yearn Finance’s Response Yearn Finance’s team quickly responded, confirming that the exploit was isolated to the legacy yETH product and assured users that active vaults and their funds remain safe. They have been working with security teams and auditors to investigate the incident further. Until now, no recovery plan has been announced. Following the attack news market reaction saw Yearn’s governance token (YFI) drop about 4.4% post-incident, trading near $3956.The post Yearn Finance Hit by $9M Exploit as Hacker Mints “Infinite yETH Tokens” appeared first on Coinpedia Fintech News Yearn Finance, one of the most well-known DeFi platforms, has suffered a major security incident that caused nearly $9 million in losses. The attack targeted a custom stable-swap pool linked to Yearn’s yETH token, allowing the hacker to mint almost unlimited tokens and drain the pool in a single strike. Here are the key details. How the Attack Happened According to Yearn Finance, the issue occurred on November 30 around 21:11 UTC. The affected contract was designed differently from Yearn’s main products, but a weakness in that code allowed the attacker to mint a near-infinite number of yETH tokens, far beyond what the system was supposed to allow. With these fake tokens, they withdrew real ETH and liquid staking assets from the pool. Around $8 million was drained from the main stableswap pool, and another $0.9 million was removed from the yETH-WETH pool on Curve. The damage is nearly $9 million. $3 Million Laundered Through Tornado Cash Blockchain security firm PeckShieldAlert confirms that the exploiter quickly moved around 1,000 ETH ($3 million) into Tornado Cash, a platform often used to hide transaction trails. The remaining stolen funds, roughly $6 million, still sit in the attacker’s wallet address (0xa80d…c822). #PeckShieldAlert Yearn Finance @yearnfi suffered an attack resulting in a total loss of ~$9M.The exploit involved minting a near-infinite number of yETH tokens, depleting the pool in a single transaction. ~1K $ETH (worth ~$3M) was sent to #TornadoCash, while the exploiter's… pic.twitter.com/IXNygpwoWa— PeckShieldAlert (@PeckShieldAlert) December 1, 2025 The wallet currently holds a mix of ETH, pxETH, frxETH, cbETH, Lido stETH, and Rocket Pool rETH. Most of this is now staked, likely an attempt to delay recovery or complicate potential legal actions. Yearn Finance’s Response Yearn Finance’s team quickly responded, confirming that the exploit was isolated to the legacy yETH product and assured users that active vaults and their funds remain safe. They have been working with security teams and auditors to investigate the incident further. Until now, no recovery plan has been announced. Following the attack news market reaction saw Yearn’s governance token (YFI) drop about 4.4% post-incident, trading near $3956.
Yearn Finance Hit by $9M Exploit as Hacker Mints “Infinite yETH Tokens”
For feedback or concerns regarding this content, please contact us at crypto.news@mexc.com
The post Yearn Finance Hit by $9M Exploit as Hacker Mints “Infinite yETH Tokens” appeared first on Coinpedia Fintech News
Yearn Finance, one of the most well-known DeFi platforms, has suffered a major security incident that caused nearly $9 million in losses. The attack targeted a custom stable-swap pool linked to Yearn’s yETH token, allowing the hacker to mint almost unlimited tokens and drain the pool in a single strike.
Here are the key details.
How the Attack Happened
According to Yearn Finance, the issue occurred on November 30 around 21:11 UTC. The affected contract was designed differently from Yearn’s main products, but a weakness in that code allowed the attacker to mint a near-infinite number of yETH tokens, far beyond what the system was supposed to allow.
With these fake tokens, they withdrew real ETH and liquid staking assets from the pool.
Around $8 million was drained from the main stableswap pool, and another $0.9 million was removed from the yETH-WETH pool on Curve. The damage is nearly $9 million.
$3 Million Laundered Through Tornado Cash
Blockchain security firm PeckShieldAlert confirms that the exploiter quickly moved around 1,000 ETH ($3 million) into Tornado Cash, a platform often used to hide transaction trails. The remaining stolen funds, roughly $6 million, still sit in the attacker’s wallet address (0xa80d…c822).
The wallet currently holds a mix of ETH, pxETH, frxETH, cbETH, Lido stETH, and Rocket Pool rETH. Most of this is now staked, likely an attempt to delay recovery or complicate potential legal actions.
Yearn Finance’s Response
Yearn Finance’s team quickly responded, confirming that the exploit was isolated to the legacy yETH product and assured users that active vaults and their funds remain safe.
They have been working with security teams and auditors to investigate the incident further. Until now, no recovery plan has been announced.
Following the attack news market reaction saw Yearn’s governance token (YFI) drop about 4.4% post-incident, trading near $3956.
Market Opportunity
DeFi Price(DEFI)
$0.000324
$0.000324$0.000324
USD
DeFi (DEFI) Live Price Chart
Disclaimer: The articles reposted on this site are sourced from public platforms and are provided for informational purposes only. They do not necessarily reflect the views of MEXC. All rights remain with the original authors. If you believe any content infringes on third-party rights, please contact crypto.news@mexc.com for removal. MEXC makes no guarantees regarding the accuracy, completeness, or timeliness of the content and is not responsible for any actions taken based on the information provided. The content does not constitute financial, legal, or other professional advice, nor should it be considered a recommendation or endorsement by MEXC.
You May Also Like
Little Pepe leads speculative momentum
The post Little Pepe leads speculative momentum appeared on BitcoinEthereumNews.com. Disclosure: This article does not represent investment advice. The content and materials featured on this page are for educational purposes only. Memecoins are drawing fresh attention in 2025, with Dogecoin’s ETF debut, Shiba Inu’s fight for support, and Little Pepe’s record presale fueling speculation. Summary Dogecoin edges closer to $1 as its first U.S. ETF launch nears. Shiba Inu struggles to hold key support after a sharp price drop. Little Pepe’s $25m+ presale and Layer 2 plans position it as a potential new leader. Memecoins are back in the spotlight as Bitcoin steadies above $115,000 and speculative capital flows into the sector. Investors are asking the big question: which tokens have the momentum to deliver the next round of explosive returns? Dogecoin’s long-awaited ETF debut could set the stage for a run toward $1. Shiba Inu is battling crucial support, and Little Pepe’s record-breaking presale points to a new leader emerging in 2025. Meme legends continue to soar Dogecoin is trading at $0.2645 with a $39.8 billion market cap as investors await the launch of the Rex Shares–Osprey Dogecoin ETF (DOJE). Bloomberg analysts now expect the debut this week, which would make DOJE the first U.S. ETF tied to a memecoin. DOGE has already gained 15% over the past month despite short-term pullbacks, and analysts argue that sustained ETF flows could set up a rally toward $0.35 and eventually the long-anticipated $1 milestone. Shiba Inu is having a hard time staying above $0.00001303 after a sharp 13% drop from its recent highs. The drop has brought SHIB to the daily SMA 200 support level of $0.00001298, which could decide whether it bounces back or drops even more. Market-wide liquidations, coupled with issues surrounding Shibarium, have amplified selling pressure. Little Pepe: The memecoin ready to overtake others While DOGE and SHIB…
Share
BitcoinEthereumNews2025/09/23 15:18
Siren Token Sheds 70% as Analysts Question Supply Structure
The post Siren Token Sheds 70% as Analysts Question Supply Structure appeared on BitcoinEthereumNews.com. The Siren (SIREN) token plunged nearly 70% on Tuesday,
Share
BitcoinEthereumNews2026/03/25 01:00
ArtGis Finance Partners with MetaXR to Expand its DeFi Offerings in the Metaverse
By using this collaboration, ArtGis utilizes MetaXR’s infrastructure to widen access to its assets and enable its customers to interact with the metaverse.
Share
Blockchainreporter2025/09/18 00:07
