Yearn Finance

2020-07-17

Andre Cronje launches Yearn Finance and distributes the YFI governance token via a fair launch with no pre-mine or founder allocation.

2020-11-01

Yearn enters strategic partnership with Cream Finance, forming broad DeFi ecosystem alliances; Iron Bank uncollateralized lending to whitelisted protocols introduced.

2021-02-02

Governance vote passes to mint 6,666 additional YFI tokens (approximately 20% supply inflation), sparking community debate about token dilution.

2021-02-04

Yearn v1 yDAI vault exploited via flash-loan-based Curve 3pool price manipulation; approximately $11 million in losses, with $2.8 million extracted by the attacker. Yearn responds within 11 minutes.

2021-02-13

A second exploit targets the legacy Yearn iearn vault within the same month, compounding concerns over undecommissioned legacy contracts.

2021-02-27

Alpha Homora exploited via Iron Bank; over $37 million drained; Alpha Homora agrees to repay Iron Bank via fee-sharing and ALPHA token collateral.

2021-03-01

Yearn uses YFI from treasury to open a MakerDAO vault and mint 9.7 million DAI, making yDAI vault depositors whole following the February exploit.

2021-10-27

Cream Finance suffers its third hack of the year; approximately $130 million stolen via flash loan exploit that technically involved Yearn's yUSD oracle, prompting a public dispute between Yearn, Cream, and Aave communities.

2022-03-06

Andre Cronje and Anton Nell announce their departure from DeFi and Yearn Finance; YFI falls approximately 13-14%. Cronje later attributes the decision to an SEC investigation begun in 2021.

2023-03-01

Iron Bank unilaterally modifies smart contracts to freeze Alpha Homora's lending accounts over approximately $32 million in unresolved bad debt, citing protection of depositors including Yearn Finance.

2023-12-11

A faulty multisig script causes Yearn's treasury to swap its entire lp-yCRVv2 balance rather than only earned fees, incurring a 63% slippage loss worth approximately $1.4 million.

2025-11-30

Yearn Finance yETH weighted stableswap pool exploited; attacker mints 235 septillion yETH tokens by depositing 16 wei, draining approximately $9 million. Stolen funds laundered through Tornado Cash within hours.

2025-12-17

Fourth exploit in weeks: Yearn v1 legacy TUSD vault drained via donation attack against a misconfigured Fulcrum sUSD strategy; approximately $300,000 lost.