Verify a decision

{"actor":"system:backfill","investigation_id":"5ba41826-a316-4076-b123-f3b41fc76057","kind":"publish","page_slug":"yearn-ether","published_at":"2026-05-26T18:37:06.847Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Yearn Ether","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://research.checkpoint.com/2025/16-wei/","type":"other","url":""},{"credibility":3,"name":"https://slowmist.medium.com/9-million-stolen-analysis-of-the-yearn-yeth-pool-vulnerability-557237092054","type":"other","url":""},{"credibility":3,"name":"https://thedefiant.io/news/defi/yearn-finance-suffers-usd9-million-exploit","type":"other","url":""},{"credibility":3,"name":"https://coinpaper.com/12778/yearn-finance-hit-by-9-m-y-eth-exploit-attacker-funnels-eth-through-tornado-cash","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/yearn-finance-yeth-exploit-3m-sent-tornado-cash-2025/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://research.checkpoint.com/2025/16-wei/","type":"other","url":""},{"credibility":3,"name":"https://slowmist.medium.com/9-million-stolen-analysis-of-the-yearn-yeth-pool-vulnerability-557237092054","type":"other","url":""},{"credibility":3,"name":"https://www.chainsecurity.com/security-audit/yearn-yeth-smart-contracts","type":"other","url":""},{"credibility":3,"name":"https://www.infosecurity-magazine.com/news/yearn-finance-yeth-pool-exploit/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://gov.yearn.fi/t/yip-90-yeth-optimistic-recovery-plan/14573","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/yearn-finance-recovers-2-4m-yeth-exploit-2025/","type":"other","url":""},{"credibility":3,"name":"https://www.cryptopolitan.com/yearn-finance-begins-clawback-after-9m-hack/","type":"other","url":""},{"credibility":3,"name":"https://gov.yearn.fi/t/yip-72-launch-yeth/13158","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/tech/2021/02/04/yearn-finance-dai-vault-has-suffered-an-exploit-11m-drained","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/business/2023/04/13/defi-protocols-aave-yearn-finance-likely-impacted-in-exploit-peckshield","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-yearn-finance-hack-april-2023","type":"other","url":""},{"credibility":3,"name":"https://coingeek.com/hackers-mint-1-quadrillion-yusdt-in-11-6m-yearn-finance-exploit/","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/yearn-finance-hit-by-fourth-exploit-as-attacker-drains-legacy-v1-vault/","type":"other","url":""},{"credibility":3,"name":"https://www.web3isgoinggreat.com/single/yearn-finance-exploit-4","type":"other","url":""},{"credibility":3,"name":"https://www.cryptopolitan.com/yearn-finance-tusd-vault-hacked/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://finance.yahoo.com/news/yearn-finance-yeth-suffers-major-044612480.html","type":"other","url":""},{"credibility":3,"name":"https://coinpaper.com/12778/yearn-finance-hit-by-9-m-y-eth-exploit-attacker-funnels-eth-through-tornado-cash","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/yearn-finance-yeth-exploit-3m-sent-tornado-cash-2025/","type":"other","url":""},{"credibility":3,"name":"https://coinlaw.io/yearn-finance-3m-exploit-tornado-cash/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://gov.yearn.fi/t/yip-72-launch-yeth/13158","type":"other","url":""},{"credibility":3,"name":"https://gov.yearn.fi/t/yip-90-yeth-optimistic-recovery-plan/14573","type":"other","url":""},{"credibility":3,"name":"https://99bitcoins.com/news/altcoins/everything-you-need-to-know-about-yearn-finance-exploit/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.bitget.com/news/detail/12560605101839","type":"other","url":""},{"credibility":3,"name":"https://research.checkpoint.com/2025/16-wei/","type":"other","url":""},{"credibility":3,"name":"https://www.theblock.co/post/381740/yearn-finance-9-million-yeth-exploit-confirms-partial-recovery-outlines-remediation","type":"other","url":""}]}],"sources_used":[],"summary":"Yearn Ether (yETH) is a liquid staking token aggregation vault developed by Yearn Finance, launched under YIP-72 as a self-governed, permissionless product. On November 30, 2025, the yETH weighted stableswap pool was exploited via an arithmetic underflow and stale cache vulnerability, resulting in approximately $9 million in losses — the third major security incident involving a Yearn product since 2021. Approximately $2.4 million was partially recovered; roughly $6.6 million remains unrecovered, with a significant portion laundered through Tornado Cash.","timeline":[{"date":"2020-07-17","event":"Yearn Finance launches, founded by Andre Cronje. YFI governance token distributed with no pre-mine or team allocation.","source":""},{"date":"2021-02-04","event":"Yearn v1 DAI vault exploited via flash loan attack across 160 nested transactions. $11 million drained from vault; attacker nets approximately $2.8 million. Tether freezes $1.7 million USDT.","source":"CoinDesk","source_url":"https://www.coindesk.com/tech/2021/02/04/yearn-finance-dai-vault-has-suffered-an-exploit-11m-drained"},{"date":"2023-04-13","event":"Legacy yUSDT contract exploited due to misconfigured Fulcrum address. Attacker mints 1.2 quadrillion yUSDT; approximately $11.54 million drained and laundered via Tornado Cash. V2 vaults unaffected.","source":"CoinDesk / Halborn","source_url":"https://www.coindesk.com/business/2023/04/13/defi-protocols-aave-yearn-finance-likely-impacted-in-exploit-peckshield"},{"date":"2023-03-13","event":"Yearn Finance suffers estimated $1.4 million indirect loss from Euler Finance attack.","source":"Web3 Is Going Great","source_url":"https://www.web3isgoinggreat.com/single/yearn-finance-hack-2023"},{"date":"2025-11-30","event":"yETH weighted stableswap pool exploited at block 23,914,086 (~21:11 UTC). Attacker deposits 16 wei, mints 235 septillion yETH via stale cache + arithmetic underflow vulnerability. Approximately $9 million in LSTs drained.","source":"The Defiant / Check Point Research","source_url":"https://thedefiant.io/news/defi/yearn-finance-suffers-usd9-million-exploit"},{"date":"2025-12-01","event":"Yearn Finance coordinates with Plume and Dinero teams to recover 857.49 pxETH ($2.39 million). Attacker transfers first batches totaling 1,000 ETH to Tornado Cash in 100 ETH increments.","source":"crypto.news / coinpaper","source_url":"https://crypto.news/yearn-finance-recovers-2-4m-yeth-exploit-2025/"},{"date":"2025-12-17","event":"Yearn v1 legacy TUSD vault ('iearn TUSD') exploited via flash loan donation attack for approximately $300,000 (~103 ETH). Fourth exploit of a Yearn product in recent history.","source":"crypto.news / web3isgoinggreat","source_url":"https://crypto.news/yearn-finance-hit-by-fourth-exploit-as-attacker-drains-legacy-v1-vault/"},{"date":"2025-12-01","event":"Yearn publishes official yETH exploit post-mortem and announces technical remediation plan.","source":"Yearn Finance (X/Twitter)","source_url":"https://x.com/yearnfi/status/1997110690763661805"},{"date":"2026-01-01","event":"YIP-90 'yETH Optimistic Recovery Plan' proposed. Treasury to deploy ~1,600 ETH in yield-bearing strategies to fund gradual depositor restitution; immediate recovery floor set at approximately 30.38% of pre-exploit positions.","source":"Yearn Governance Forum","source_url":"https://gov.yearn.fi/t/yip-90-yeth-optimistic-recovery-plan/14573"}]},"v":1}