Skip to main content
Sign in

Yearn Ether

avoid.net/yearn-ether→58/100·88% conf.
[VERIFIED][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·2FWVMt…wej9

Summary

Yearn Ether (yETH) is a liquid staking token aggregation vault developed by Yearn Finance, launched under YIP-72 as a self-governed, permissionless product. On November 30, 2025, the yETH weighted stableswap pool was exploited via an arithmetic underflow and stale cache vulnerability, resulting in approximately $9 million in losses — the third major security incident involving a Yearn product since 2021. Approximately $2.4 million was partially recovered; roughly $6.6 million remains unrecovered, with a significant portion laundered through Tornado Cash.

Connected Entities

1 entities
Organizations
□Yearn Ether
Relationships
    Have evidence about Yearn Ether?

    Timeline(9 events)

    17 July 2020

    Yearn Finance launches, founded by Andre Cronje. YFI governance token distributed with no pre-mine or team allocation.

    4 February 2021

    Yearn v1 DAI vault exploited via flash loan attack across 160 nested transactions. $11 million drained from vault; attacker nets approximately $2.8 million. Tether freezes $1.7 million USDT.

    CoinDesk

    13 April 2023

    Legacy yUSDT contract exploited due to misconfigured Fulcrum address. Attacker mints 1.2 quadrillion yUSDT; approximately $11.54 million drained and laundered via Tornado Cash. V2 vaults unaffected.

    CoinDesk / Halborn

    13 March 2023

    Yearn Finance suffers estimated $1.4 million indirect loss from Euler Finance attack.

    Web3 Is Going Great

    30 November 2025

    yETH weighted stableswap pool exploited at block 23,914,086 (~21:11 UTC). Attacker deposits 16 wei, mints 235 septillion yETH via stale cache + arithmetic underflow vulnerability. Approximately $9 million in LSTs drained.

    The Defiant / Check Point Research

    December 2025

    Yearn Finance coordinates with Plume and Dinero teams to recover 857.49 pxETH ($2.39 million). Attacker transfers first batches totaling 1,000 ETH to Tornado Cash in 100 ETH increments.

    crypto.news / coinpaper

    17 December 2025

    Yearn v1 legacy TUSD vault ('iearn TUSD') exploited via flash loan donation attack for approximately $300,000 (~103 ETH). Fourth exploit of a Yearn product in recent history.

    crypto.news / web3isgoinggreat

    December 2025

    Yearn publishes official yETH exploit post-mortem and announces technical remediation plan.

    Yearn Finance (X/Twitter)

    2026

    YIP-90 'yETH Optimistic Recovery Plan' proposed. Treasury to deploy ~1,600 ETH in yield-bearing strategies to fund gradual depositor restitution; immediate recovery floor set at approximately 30.38% of pre-exploit positions.

    Yearn Governance Forum
    Provenance & Audit Trail
    Anchored on SolanaVerify on-chain22 Wayback Archivessrc:defillama

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain (5 events). 22 of 23 cited source URLs have an Internet Archive snapshot.

    full audit log →version history →

    model: claude-sonnet-4-6

    generated: 5/4/2026, 2:54:20 AM

    last updated: 8/29/2026, 11:26:11 PM

    avoid.net — verified advice for a post-truth world