Security Incident
Yearn Finance Contract Vulnerability: $10.00M Reported Loss
The decentralized revenue aggregation platform Yearn Finance was attacked, and the hackers made more than $10 million in profits.
- Reported loss
- $ 10,000,000
- Attack category
- Contract Vulnerability
Incident Overview
According to the analysis of SlowMist, the reason for this attack is that the attacker used the yUSDT contract to set the fulcrum address by mistake, thereby manipulating the stablecoin reserve balance in the yUSDT contract, and depositing USDT in yUSDT to obtain a large amount of unexpected yUSDT Tokens for profit.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.