2025-12-01 03:24:12

Yearn Finance has encountered an issue!

This attack was quite severe—hackers found a vulnerability and crazily minted yETH, directly draining the liquidity pool. How big are the losses? About 9 million USD.

What's even more exciting is the subsequent operation: the attacker first threw 1000 ETH (about 3 million dollars) into Tornado Cash for laundering, and what's left? That address now still holds cryptocurrency assets worth 6 million dollars.

This kind of infinite minting attack method is actually not new, but every time I see it, it still makes my scalp tingle. The security audits of DeFi protocols really cannot be taken lightly; one vulnerability can lead to lessons worth millions or tens of millions.

ETH-4.48%

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.

21 Likes

Reward
21
8
Repost
Share

Comment

0/400

PumpingCroissant

· 12-04 02:27

9 million dollars just gone like that, Yearn really dropped the ball this time. Still making infinite minting mistakes—DeFi really is a high-stakes arena.

View OriginalReply0

DefiSecurityGuard

· 12-03 01:44

ngl, unlimited mint vulnerability in 2024? this is exactly why i don't touch yearn without reading the audit report first. 9M gone just like that... actually worse, because the attacker's still sitting on 6M. classic exploit vector nobody caught before mainnet. not financial advice but DYOR before depositing anywhere.

Reply0

RamenStacker

· 12-03 01:05

9 million USD just disappeared like that; the audit really is just for show.

View OriginalReply0

CoconutWaterBoy

· 12-01 03:54

9 million dollars just disappeared like that, what is the audit team doing? The unlimited minting trick is so clichéd, how can projects still fall for it... Tornado Cash has appeared again, this guy's money laundering skills are top-notch. DeFi really has pitfalls everywhere, you have to think twice before putting in a large amount. It's another minting vulnerability, when will we learn our lesson? 6 million is still lying there, is this provoking law enforcement? Every time they say the audit is done, and what happens? Another bloody lesson.

View OriginalReply0

SignatureCollector

· 12-01 03:50

It's the same old trap of infinite minting, DeFi really needs to be more cautious. --- 9 million just vanished like that, is the audit just a formality? --- Tornado Cash has struck again, a hacker's favorite. --- Every time there are these kinds of vulnerabilities, what is the audit team even doing? --- 6 million hasn't been drained yet, this address should have been frozen by now. --- Repeating such a basic mistake like infinite minting is ridiculous. --- Money laundering is so smooth, it's truly unbelievable. --- That's DeFi for you, a vulnerability causing a million in losses, and then it happens again. --- yETH has directly fallen this time, how unreliable can it be to be clipped like this? --- Do you still dare to trust these contracts? I'm really scared.

View OriginalReply0

ser_ngmi