Bitget App
Trade smarter
Open
HomepageSign up
Bitget>
News>
Markets>
Legacy Agreements Scrutinized: Yearn Faces $9M Loss, Highlighting DeFi Vulnerabilities

Legacy Agreements Scrutinized: Yearn Faces $9M Loss, Highlighting DeFi Vulnerabilities

Bitget-RWA2025/12/01 14:04
By: Bitget-RWA
- Yearn Finance lost $9M after attackers exploited a yETH contract vulnerability, draining liquidity pools via infinite minting. - Attackers created 235 trillion tokens, laundered $3M through Tornado Cash, and used self-destructing contracts to hide trails. - Core Vaults were unaffected; Yearn partnered with security firms to address the legacy yETH flaw. - YFI spiked due to short squeeze but stabilized as clarity emerged on secure Vaults. - Incident highlights DeFi risks, especially legacy contracts, amid

Major Security Breach Hits Yearn Finance

Yearn Finance recently experienced a severe security incident, where hackers exploited a critical flaw in the yETH token contract, resulting in the theft of approximately $9 million worth of assets. The breach, which occurred on November 30, 2025, involved the creation of an unlimited number of synthetic yETH tokens. These tokens were then exchanged for genuine assets from various liquidity pools. The vulnerability was found in an older version of the yETH product, a liquid staking index that aggregates Ethereum-based derivatives.

Details of the Exploit

The attackers took advantage of an infinite-mint bug in the yETH contract, enabling them to mint 235 trillion tokens in a single transaction. Using these artificially created tokens, they drained funds from several pools, including:

To conceal their tracks, the perpetrators laundered roughly 1,000 ETH (valued at $3 million at the time) through Tornado Cash, a service that obscures blockchain transactions. They also deployed and later destroyed helper contracts to further hide their activities.

Yearn Finance Security Breach

Response and Impact

Yearn Finance has assured users that its main V2 and V3 Vaults were not impacted by the attack, stressing that the vulnerability was limited to the outdated yETH contract. Reports indicate that the protocol’s Total Value Locked (TVL) stayed above $600 million, suggesting the core infrastructure remained secure. To address the breach, Yearn Finance has enlisted the help of external security experts, including Chain Security and SEAL911, to investigate and apply necessary fixes.

Market Reaction

The market’s response to the hack was mixed. Surprisingly, Yearn’s governance token, YFI, saw a rapid price increase from $4,080 to over $4,160 within an hour of the news. Analysts believe this was due to a short squeeze, as some traders misunderstood the extent of the breach. Once it became clear that the main vaults were unaffected, short-sellers rushed to cover their positions, pushing the price higher.

Broader DeFi Security Concerns

This event highlights persistent security risks in decentralized finance, especially those linked to outdated smart contracts and liquid staking products. Yearn Finance has faced similar attacks in the past, including a 2021 exploit that cost its yDAI vault $11 million and a 2023 incident that wiped out 63% of a treasury holding. The DeFi sector as a whole has struggled with security in 2025, with CertiK reporting $127 million in losses from hacks and exploits in November alone.

Ongoing Investigation and User Guidance

Yearn Finance is urging users to keep a close eye on their holdings and to contact support through its Discord channel if needed. The investigation is ongoing, with teams working to determine the full impact and strengthen security measures. As DeFi continues to evolve, this breach serves as a stark reminder of the importance of thorough audits and proactive risk management in complex financial protocols.

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
PoolX: Earn new token airdrops
Lock your assets and earn 10%+ APR
Lock now!

You may also like

Goldman Buys Leading ETF Innovator to Capitalize on Growth in Active Investing

- Goldman Sachs acquires Innovator Capital Management for $2 billion in cash and equity, expanding its active ETF portfolio with $28 billion in assets under supervision. - The deal strengthens Goldman's position in structured ETFs, a 66% CAGR niche market offering downside protection and yield enhancement strategies since 2020. - Innovator's leadership in defined-outcome ETFs aligns with Goldman's strategy to capitalize on shifting investor demand for active management amid tighter monetary policy. - The a

Bitget-RWA2025/12/01 15:41
Ethereum Updates Today: BitMine Bets Big on Fusaka for Ethereum, Aiming for 5% Treasury Allocation

- BitMine, led by Tom Lee, holds 3.63M ETH (3.1% of supply) as of November 2025, aiming to control 5% of Ethereum through aggressive buying ahead of the Fusaka upgrade. - The firm's $12.1B crypto portfolio includes 39% weekly ETH purchases, but faces $4-4.2B unrealized losses amid Ethereum's 30% monthly price decline. - Upcoming Fusaka upgrade (Dec 3) and 2026's MAVAN staking network aim to boost ETH demand, while equity dilution and crypto market volatility have driven BitMine's stock down 80% from peak.

Bitget-RWA2025/12/01 15:41
Bitcoin Updates Today: Bitcoin Faces Uncertain Drop as Large Holders, Market Signals, and Federal Reserve Actions Strengthen Bearish Outlook

- Bitcoin faces critical support at $93,000; analysts warn a break could trigger deeper correction toward $70,000 or $40,000. - Whale inflows to Binance ($7.5B in 30 days) and thinning liquidity signal potential sell-offs, mirroring 2025's crash pattern. - JPMorgan's macro asset classification and Peter Brandt's bearish technical analysis highlight growing institutional caution. - Fed policy uncertainty and global regulations compound risks, though long-term optimism persists amid 2026 growth projections.

Bitget-RWA2025/12/01 15:41

Trending news

More
1
Goldman Buys Leading ETF Innovator to Capitalize on Growth in Active Investing
2
Ethereum Updates Today: BitMine Bets Big on Fusaka for Ethereum, Aiming for 5% Treasury Allocation

Crypto prices

More
Bitcoin
Bitcoin
BTC
$84,856.71
-7.33%
Ethereum
Ethereum
ETH
$2,768.37
-8.80%
Tether USDt
Tether USDt
USDT
$0.9999
-0.02%
XRP
XRP
XRP
$2.01
-8.36%
BNB
BNB
BNB
$811.28
-9.35%
USDC
USDC
USDC
$0.9997
-0.02%
Solana
Solana
SOL
$124.54
-9.95%
TRON
TRON
TRX
$0.2778
-1.76%
Dogecoin
Dogecoin
DOGE
$0.1338
-10.64%
Cardano
Cardano
ADA
$0.3762
-11.17%
How to buy BTC
Bitget lists BTC – Buy or sell BTC quickly on Bitget!
Trade now
Become a trader now?A welcome pack worth 6200 USDT for new users!
Sign up now
Trade smarter