PANews|10月 25, 2026 09:48
[SlowMist: Yapeswap Attack Causes Losses of Approximately $21,900; Attacker Seizes Key Controls with Very Low Voting Power] According to SlowMist, Yapeswap suffered an attack resulting in a loss of approximately $21,900. The root cause lies in the WorkersUnion governance mechanism's zero quorum requirement. This led to a proposal receiving only about 0.000055% of the voting power transferring the feeToSetter control of YapeFactory to the attacker. The attacker then deployed a malicious Registry contract, causing latestVault() to return a forged vault address, while vaults() still listed the real vault. YapePair recorded the transferred deposits as farm assets but did not receive a redeemable share, ultimately resulting in financial loss.
Share To
Timeline
HotFlash
APP
X
Telegram
CopyLink