The post Yearn Finance Exploit Drains $9M as Hacker Launders 1,000 ETH appeared on BitcoinEthereumNews.com. Yearn Finance suffered an exploit that drained about $9 million from its yETH pool. PeckShieldAlert posted the loss estimate on X, linking the breach to a single transaction that minted an excessive number of yETH tokens. The mint drained the pool immediately. First, the attacker triggered the contract. Then, the pool’s liquidity dropped to near zero in the same call. The exploit hit the Ethereum side of Yearn’s ecosystem, which supports vaults that manage staking and wrapped ETH positions. Yearn’s yETH token is a yield-bearing asset that tracks staked Ethereum derivatives. Protocols that rely on token mint functions often secure them with internal caps, audits, and delayed ownership transfers. However, the exploited contract allowed uncontrolled minting in this case. As a result, the liquidity pool absorbed the full impact without a time buffer. Tornado Cash Receives 1,000 ETH The attacker transferred 1,000 ETH, valued at about $3 million, to Tornado Cash. The transfer used a known Ethereum mixer that pools deposits before splitting them across withdraw addresses. On-chain data  shows repeated 100 ETH transfer chunks flowing to Tornado Cash under the same sender tag.  Each 100 ETH line item lists $284,921.69, mapping to a $2,854.49 ETH price at the traced time. Yearn Finance yETH Exploit Transfers. Source: Etherscan First, a 1,600 ETH transfer also appears labeled to a Yearn exploiter-linked address, but it precedes Tornado movements in the internal transaction logs. Next, a consolidated 1,000 ETH outflow line item marks the mixer deposits. The pattern shows a clear split—some assets moved, while others stayed. Wallet Retains $6M After Transfers The exploiter-controlled address holds about $6 million in remaining crypto assets.  Arkham interface data lists a primary wallet value of $6,206,427. The same image’s wallet panel also logs $5,058,627 in ETH-denominated holdings, including derivatives tied to Rocket Pool and Lido positions.… The post Yearn Finance Exploit Drains $9M as Hacker Launders 1,000 ETH appeared on BitcoinEthereumNews.com. Yearn Finance suffered an exploit that drained about $9 million from its yETH pool. PeckShieldAlert posted the loss estimate on X, linking the breach to a single transaction that minted an excessive number of yETH tokens. The mint drained the pool immediately. First, the attacker triggered the contract. Then, the pool’s liquidity dropped to near zero in the same call. The exploit hit the Ethereum side of Yearn’s ecosystem, which supports vaults that manage staking and wrapped ETH positions. Yearn’s yETH token is a yield-bearing asset that tracks staked Ethereum derivatives. Protocols that rely on token mint functions often secure them with internal caps, audits, and delayed ownership transfers. However, the exploited contract allowed uncontrolled minting in this case. As a result, the liquidity pool absorbed the full impact without a time buffer. Tornado Cash Receives 1,000 ETH The attacker transferred 1,000 ETH, valued at about $3 million, to Tornado Cash. The transfer used a known Ethereum mixer that pools deposits before splitting them across withdraw addresses. On-chain data  shows repeated 100 ETH transfer chunks flowing to Tornado Cash under the same sender tag.  Each 100 ETH line item lists $284,921.69, mapping to a $2,854.49 ETH price at the traced time. Yearn Finance yETH Exploit Transfers. Source: Etherscan First, a 1,600 ETH transfer also appears labeled to a Yearn exploiter-linked address, but it precedes Tornado movements in the internal transaction logs. Next, a consolidated 1,000 ETH outflow line item marks the mixer deposits. The pattern shows a clear split—some assets moved, while others stayed. Wallet Retains $6M After Transfers The exploiter-controlled address holds about $6 million in remaining crypto assets.  Arkham interface data lists a primary wallet value of $6,206,427. The same image’s wallet panel also logs $5,058,627 in ETH-denominated holdings, including derivatives tied to Rocket Pool and Lido positions.…

Yearn Finance Exploit Drains $9M as Hacker Launders 1,000 ETH

For feedback or concerns regarding this content, please contact us at crypto.news@mexc.com

Yearn Finance suffered an exploit that drained about $9 million from its yETH pool. PeckShieldAlert posted the loss estimate on X, linking the breach to a single transaction that minted an excessive number of yETH tokens. The mint drained the pool immediately.

First, the attacker triggered the contract. Then, the pool’s liquidity dropped to near zero in the same call. The exploit hit the Ethereum side of Yearn’s ecosystem, which supports vaults that manage staking and wrapped ETH positions.

Yearn’s yETH token is a yield-bearing asset that tracks staked Ethereum derivatives. Protocols that rely on token mint functions often secure them with internal caps, audits, and delayed ownership transfers. However, the exploited contract allowed uncontrolled minting in this case. As a result, the liquidity pool absorbed the full impact without a time buffer.

Tornado Cash Receives 1,000 ETH

The attacker transferred 1,000 ETH, valued at about $3 million, to Tornado Cash. The transfer used a known Ethereum mixer that pools deposits before splitting them across withdraw addresses.

On-chain data  shows repeated 100 ETH transfer chunks flowing to Tornado Cash under the same sender tag.  Each 100 ETH line item lists $284,921.69, mapping to a $2,854.49 ETH price at the traced time.

Yearn Finance yETH Exploit Transfers. Source: Etherscan

First, a 1,600 ETH transfer also appears labeled to a Yearn exploiter-linked address, but it precedes Tornado movements in the internal transaction logs. Next, a consolidated 1,000 ETH outflow line item marks the mixer deposits. The pattern shows a clear split—some assets moved, while others stayed.

Wallet Retains $6M After Transfers

The exploiter-controlled address holds about $6 million in remaining crypto assets.  Arkham interface data lists a primary wallet value of $6,206,427.

The same image’s wallet panel also logs $5,058,627 in ETH-denominated holdings, including derivatives tied to Rocket Pool and Lido positions. stETH appears staked at Rocket Pool for 234.42 ETH, worth $669,172.95. Lido shows 167.67 stETH valued at $478,626.77.

The wallet breakdown table shows live balances of 857.49 pXETH worth $2,447,696, 742.63 fXETH worth $2,099,554, 128.05 ETH worth $365,517.01, 48.96 cbETH worth $154,861.16, and 26 tETH worth $669,173.  No names or personal identifiers reveal who controls the address beyond its public blockchain reference tags.

Yearn Exploiter Wallet Portfolio. Source: Arkham

PeckShieldAlert tagged the event publicly as an attack, not a routine contract function. The breach drew attention because minting functions need fixed limits to prevent sudden liquidity depletion.

The exploit details and ETH movement data trace back to public blockchain security alerts shared on X by PeckShieldAlert.

Ether Slides 5% As Sellers Push Price Below Key Levels

Ether fell sharply on Dec. 1, dropping about 5.3% on the day. The daily candle shows ETH sliding from near $2,992 at the open to roughly $2,834 at the close, a loss of about $158. The move keeps ETH well below its 50-day exponential moving average around $3,392, which continues to slope downward and signals a firm short-term downtrend.

Ethereum ETH Daily Price Chart. Source: TradingView

At the same time, trading volume picked up compared with several recent sessions. The red bars on the daily histogram show sellers dominating flows as price pulled back from its brief consolidation in late November. That extra volume confirms that the latest leg lower is not just a thin-market move but comes with heavier participation.

Momentum indicators also lean bearish. The 14-day RSI sits near 34, below the neutral 50 line and not far from the oversold band. This reading shows that downside pressure has built steadily since October, when ETH last traded comfortably above the 50-day line. For now, the chart points to a market still working through selling pressure after months of lower highs and lower lows.

Source: https://coinpaper.com/12778/yearn-finance-hit-by-9-m-y-eth-exploit-attacker-funnels-eth-through-tornado-cash

Market Opportunity
Ethereum Logo
Ethereum Price(ETH)
$2,161.36
$2,161.36$2,161.36
+1.20%
USD
Ethereum (ETH) Live Price Chart
Disclaimer: The articles reposted on this site are sourced from public platforms and are provided for informational purposes only. They do not necessarily reflect the views of MEXC. All rights remain with the original authors. If you believe any content infringes on third-party rights, please contact crypto.news@mexc.com for removal. MEXC makes no guarantees regarding the accuracy, completeness, or timeliness of the content and is not responsible for any actions taken based on the information provided. The content does not constitute financial, legal, or other professional advice, nor should it be considered a recommendation or endorsement by MEXC.

You May Also Like

Wormhole launches reserve tying protocol revenue to token

Wormhole launches reserve tying protocol revenue to token

The post Wormhole launches reserve tying protocol revenue to token appeared on BitcoinEthereumNews.com. Wormhole is changing how its W token works by creating a new reserve designed to hold value for the long term. Announced on Wednesday, the Wormhole Reserve will collect onchain and offchain revenues and other value generated across the protocol and its applications (including Portal) and accumulate them into W, locking the tokens within the reserve. The reserve is part of a broader update called W 2.0. Other changes include a 4% targeted base yield for tokenholders who stake and take part in governance. While staking rewards will vary, Wormhole said active users of ecosystem apps can earn boosted yields through features like Portal Earn. The team stressed that no new tokens are being minted; rewards come from existing supply and protocol revenues, keeping the cap fixed at 10 billion. Wormhole is also overhauling its token release schedule. Instead of releasing large amounts of W at once under the old “cliff” model, the network will shift to steady, bi-weekly unlocks starting October 3, 2025. The aim is to avoid sharp periods of selling pressure and create a more predictable environment for investors. Lockups for some groups, including validators and investors, will extend an additional six months, until October 2028. Core contributor tokens remain under longer contractual time locks. Wormhole launched in 2020 as a cross-chain bridge and now connects more than 40 blockchains. The W token powers governance and staking, with a capped supply of 10 billion. By redirecting fees and revenues into the new reserve, Wormhole is betting that its token can maintain value as demand for moving assets and data between chains grows. This is a developing story. This article was generated with the assistance of AI and reviewed by editor Jeffrey Albus before publication. Get the news in your inbox. Explore Blockworks newsletters: Source: https://blockworks.co/news/wormhole-launches-reserve
Share
BitcoinEthereumNews2025/09/18 01:55
SlowMist: Attackers have stolen approximately 300GB of data due to the LiteLLM vulnerability. Encryption developers are advised to conduct an immediate self-check.

SlowMist: Attackers have stolen approximately 300GB of data due to the LiteLLM vulnerability. Encryption developers are advised to conduct an immediate self-check.

PANews reported on March 25th that 23pds, Chief Information Security Officer of SlowMist Technology, issued another warning regarding the LiteLLM attack: "All cryptocurrency
Share
PANews2026/03/25 10:30
Important news from last night and this morning (March 24-25)

Important news from last night and this morning (March 24-25)

SpaceX plans to file for an IPO as early as this week, aiming to raise more than $75 billion. According to a report by Cailian Press, a source familiar with th
Share
PANews2026/03/25 10:30