律动BlockBeats|Nov 30, 2025 23:59
**[Yearn Finance Suspected of Being Hacked, Hacker Sends 1,000 ETH Stolen Funds to Tornado Cash]**
BlockBeats reported on December 1, citing The Block, that Yearn Finance appears to have been hacked. Its popular LST (Liquid Staking Token) aggregation product, Yearn Ether (yETH), has been drained of millions of dollars worth of LST assets.
Blockchain data shows that the attacker exploited a carefully crafted vulnerability to mint an almost unlimited amount of yETH tokens in a single transaction, completely draining the pool. The attack transaction resulted in 1,000 ETH (approximately $3 million at current prices) being sent to the mixing protocol Tornado Cash. The attack involved multiple newly deployed smart contracts, some of which self-destructed after the transactions. The exact scale of the loss remains unclear, but prior to the attack, the yETH pool was valued at approximately $11 million.
The hack was first discovered by X user Togbe, who noticed the attack while monitoring large transfers. "Net transfers show that the excessive minting of yETH allowed the attacker to somehow drain the pool and gain approximately 1,000 ETH in profit," Togbe stated in a post. "For some reason, part of the ETH was sacrificed during the process, but they ultimately still profited."
"We are investigating the incident involving the yETH LST stable swap pool," Yearn stated on X. "Yearn's V2 and V3 Vaults were not affected."
Yearn Finance previously suffered an attack in 2021 that impacted its yDAI vault, resulting in a loss of $11 million, with the hacker ultimately profiting $2.8 million. In December 2023, the protocol experienced a script error that caused a 63% loss in one of its vault positions, though user funds were not affected. Yearn's founder, Andre Cronje, launched the project in 2020 and left two years later.
Share To
Timeline
HotFlash
APP
X
Telegram
CopyLink