On September 17, Yala released a follow-up analysis report on the September 14 attack incident. The attacker exploited a temporary deployment key used during the authorized cross-chain bridge deployment to establish an unauthorized cross-chain bridge and extract funds. The YU token once depegged to $0.2, later stabilizing at $0.94. The official statement clarified that the attack did not exploit any protocol vulnerabilities and that Bitcoin reserves were unaffected. The hacker has returned 22,287,000 YU tokens, while the remaining 7,713,000 YU have been converted into 1,635.572 ETH, of which 151.5 ETH were mixed through Tornado Cash, and 1,474.6 ETH are distributed across 146 hacker-controlled wallets. Yala announced that the illegally minted YU tokens will be destroyed on September 23, restoring the 1:1 USDC redemption ratio. Additionally, users who suffered liquidation losses due to the depegging will be compensated, and Yala has already cooperated with law enforcement agencies to track down the hacker.