Skip to main content
AVOID.NET
Sign in

Yearn Ether

avoid.net/yearn-ether→58/100·88% conf.
[VERIFIED][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·2FWVMt…wej9

Summary

Yearn Ether (yETH) is a liquid staking token aggregation vault developed by Yearn Finance, launched under YIP-72 as a self-governed, permissionless product. On November 30, 2025, the yETH weighted stableswap pool was exploited via an arithmetic underflow and stale cache vulnerability, resulting in approximately $9 million in losses — the third major security incident involving a Yearn product since 2021. Approximately $2.4 million was partially recovered; roughly $6.6 million remains unrecovered, with a significant portion laundered through Tornado Cash.

Connected Entities

8 entities · 60 linked investigations
Organizations
□Railgun40□Ethereum64□Tether52□Balancer42□Yearn Ether
Protocols
⌂Euler Finance58⌂Uniswap58⌂Yearn Finance58
Relationships
  • Yearn Finance→mentioned with→Ethereum(70%)
  • Balancer→mentioned with→Ethereum(70%)
  • Euler Finance→mentioned with→Ethereum(80%)
  • Euler Finance→mentioned with→Uniswap(75%)
  • Yearn Ether→mentioned with→Tether(65%)
  • Yearn Ether→mentioned with→Balancer(65%)
  • Yearn Ether→mentioned with→Uniswap(60%)
  • Yearn Ether→mentioned with→Railgun(65%)
  • Yearn Ether→mentioned with→Ethereum(65%)
  • Uniswap→mentioned with→Ethereum(80%)
  • + 5 more
Also appears in
Aperture LM·28Euler Finance·58Crossmint·70Tether·52Gurhan Kiziloz·0Bedrock Protocol·41BNB Chain Bridge·16Nobitex June 2025 Hack (Predatory Sparrow)·10Robinhood Crypto·54KelpDAO / LayerZero Bridge Exploit (April 2026) — DPRK Lazarus·0+ 50 more
Have evidence about Yearn Ether?

Timeline(9 events)

17 July 2020

Yearn Finance launches, founded by Andre Cronje. YFI governance token distributed with no pre-mine or team allocation.

4 February 2021

Yearn v1 DAI vault exploited via flash loan attack across 160 nested transactions. $11 million drained from vault; attacker nets approximately $2.8 million. Tether freezes $1.7 million USDT.

CoinDesk

13 April 2023

Legacy yUSDT contract exploited due to misconfigured Fulcrum address. Attacker mints 1.2 quadrillion yUSDT; approximately $11.54 million drained and laundered via Tornado Cash. V2 vaults unaffected.

CoinDesk / Halborn

13 March 2023

Yearn Finance suffers estimated $1.4 million indirect loss from Euler Finance attack.

Web3 Is Going Great

30 November 2025

yETH weighted stableswap pool exploited at block 23,914,086 (~21:11 UTC). Attacker deposits 16 wei, mints 235 septillion yETH via stale cache + arithmetic underflow vulnerability. Approximately $9 million in LSTs drained.

The Defiant / Check Point Research

December 2025

Yearn Finance coordinates with Plume and Dinero teams to recover 857.49 pxETH ($2.39 million). Attacker transfers first batches totaling 1,000 ETH to Tornado Cash in 100 ETH increments.

crypto.news / coinpaper

17 December 2025

Yearn v1 legacy TUSD vault ('iearn TUSD') exploited via flash loan donation attack for approximately $300,000 (~103 ETH). Fourth exploit of a Yearn product in recent history.

crypto.news / web3isgoinggreat

December 2025

Yearn publishes official yETH exploit post-mortem and announces technical remediation plan.

Yearn Finance (X/Twitter)

2026

YIP-90 'yETH Optimistic Recovery Plan' proposed. Treasury to deploy ~1,600 ETH in yield-bearing strategies to fund gradual depositor restitution; immediate recovery floor set at approximately 30.38% of pre-exploit positions.

Yearn Governance Forum
Provenance & Audit Trail
Anchored on SolanaVerify on-chain23 Wayback Archivessrc:defillama

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (5 events). 23 of 23 cited source URLs have an Internet Archive snapshot.

full audit log →version history →

model: claude-sonnet-4-6

generated: 5/4/2026, 2:54:20 AM

last updated: 9/15/2026, 5:10:50 PM

4 views

avoid.net — verified advice for a post-truth world