Yearn Finance Suffers yETH Hack as Attacker Drains Millions
The post Yearn Finance Suffers yETH Hack as Attacker Drains Millions appeared on BitcoinEthereumNews.com.
Yearn Finance confirmed an active exploit affecting its yETH product on Sunday, after an attacker minted an effectively unlimited amount of yETH and drained liquidity from Balancer pools. The incident triggered heavy on-chain movement, including multiple 100 ETH transfers routed through Tornado Cash. Sponsored Sponsored Infinite-Mint Attack Drains Liquidity From Balancer Pools According to blockchain data, the exploit occurred around 21:11 UTC on November 30, when a malicious wallet executed an infinite-mint attack that created roughly 235 trillion yETH in a single transaction. some other balancer related stuff looking like an exploit considering heavy interactions with tornado yearn, rocket pool, origin, dinero and other LST going around pic.twitter.com/wUuexeQJyg — Togbe (@Togbe0x) November 30, 2025 Nansen’s alert system later confirmed the attack and identified the event as an infinite-mint vulnerability in the yETH token contract, not in Yearn’s Vault infrastructure. The attacker used the newly minted yETH to drain real assets—primarily ETH and Liquid Staking Tokens (LSTs)—from Balancer liquidity pools. Early estimates suggest roughly $2.8 million in assets were removed. Around 1,000 ETH was laundered through Tornado Cash shortly after the attack. Several helper contracts used in the exploit were deployed minutes before the incident and self-destructed afterward to obscure the trail. some other balancer related stuff looking like an exploit considering heavy interactions with tornado yearn, rocket pool, origin, dinero and other LST going around pic.twitter.com/wUuexeQJyg — Togbe (@Togbe0x) November 30, 2025 Yearn stated that V2 and V3 Vaults were not affected, and the vulnerability appears limited to the legacy yETH implementation. Sponsored Sponsored The protocol’s Total Value Locked (TVL) remains above $600 million, according to CoinGecko, suggesting core systems were not compromised. YFI Price Spikes as Market Reverses Initial Panic However, the market reaction created an unexpected dynamic. Shortly after the exploit was flagged on social media and by…
Filed under: News - @ December 1, 2025 12:19 am