DeFi platform Yearn Finance’s yETH product was hit by a limiteless minting of tokens on Monday, draining your entire yETH pool in a single transaction.
Yearn later confirmed the “incident”, assuring that its V2 and V3 Vaults stay safe and unaffected.
We’re investigating an incident involving the yETH LST stableswap pool.
Yearn Vaults (each V2 and V3) aren’t affected.— yearn (@yearnfi) November 30, 2025
In line with blockchain information, the exploit generated a near-infinite variety of yETH, draining tens of millions from Balancer swimming pools. Attackers roughly profited 1,000 ETH, value $3 million, which was routed by way of the Twister Money mixer, Chinese language journalist Colin Wu famous.
yETH is an index token consisting of a number of completely different liquid staked variations of ETH, in different phrases, Ethereum Liquid Staking Derivatives (LSTs). The assault was first flagged by an X consumer Togbe, who highlighted “heavy transactions” on LSTs, together with yearn, rocket pool, origin and dinero.
yETH Incident Places DeFi Safety Beneath Lens
The incident apparently concerned a number of newly deployed sensible contracts, which self-destructed after the transaction, per blockchain information. The whole monetary losses stay unclear; nevertheless, the yETH pool had a complete worth round $11 million previous to the assault, Dexscreener information exhibits.
Following the exploit, combined reactions got here from the neighborhood, with some expressing concern over the continued use of outdated contracts.
Moreover, Yearn Finance suffered a hack in 2021, affecting its yDAI vault and dropping $11 million in worth. The hacker apparently bought away with $2.8 million at the moment. Later, that protocol flagged a defective script in December 2023, wiping out 63% of a place in its treasury.
Crypto Misplaced $127M to Hacks, Scams in November Alone
In the meantime, blockchain safety agency CertiK confirmed on Sunday that the crypto trade suffered an estimated $127 million in losses to hacks and exploits.
The corporate’s month-to-month menace report famous that the precise affected funds have been greater than $172 million. Nonetheless, the numbers diminished by $45 million after a number of the stolen funds have been recovered.
Balancer DeFi protocol assault tops the checklist of main exploits in November, marking certainly one of 2025’s largest DeFi safety breaches. The platform misplaced over $116 million in a classy cross-chain exploit that affected a number of blockchains.
About $135 million was misplaced in DeFi incidents, adopted by $29.8 million drained in trade hacks, CertiK information famous.
The put up Yearn Finance’s yETH Suffers Main Hack, Attackers Ship $3M ETH to Twister Money appeared first on Cryptonews.