DeFi platform Yearn Finance’s yETH product was hit by a limiteless minting of tokens on Monday, draining your entire yETH pool in a single transaction.
Yearn later confirmed the “incident”, assuring that its V2 and V3 Vaults stay safe and unaffected.
We’re investigating an incident involving the yETH LST stableswap pool.
Yearn Vaults (each V2 and V3) are usually not affected.— yearn (@yearnfi) November 30, 2025
Based on blockchain knowledge, the exploit generated a near-infinite variety of yETH, draining thousands and thousands from Balancer swimming pools. Attackers roughly profited 1,000 ETH, value $3 million, which was routed by the Twister Money mixer, Chinese language journalist Colin Wu famous.
yETH is an index token consisting of a number of completely different liquid staked variations of ETH, in different phrases, Ethereum Liquid Staking Derivatives (LSTs). The assault was first flagged by an X person Togbe, who highlighted “heavy transactions” on LSTs, together with yearn, rocket pool, origin and dinero.
yETH Incident Places DeFi Safety Underneath Lens
The incident apparently concerned a number of newly deployed sensible contracts, which self-destructed after the transaction, per blockchain knowledge. The overall monetary losses stay unclear; nonetheless, the yETH pool had a complete worth round $11 million previous to the assault, Dexscreener knowledge exhibits.
Following the exploit, combined reactions got here from the group, with some expressing concern over the continued use of outdated contracts.
Apart from, Yearn Finance suffered a hack in 2021, affecting its yDAI vault and dropping $11 million in worth. The hacker apparently received away with $2.8 million at the moment. Later, that protocol flagged a defective script in December 2023, wiping out 63% of a place in its treasury.
Crypto Misplaced $127M to Hacks, Scams in November Alone
In the meantime, blockchain safety agency CertiK confirmed on Sunday that the crypto business suffered an estimated $127 million in losses to hacks and exploits.
The corporate’s month-to-month menace report famous that the precise affected funds have been greater than $172 million. Nonetheless, the numbers decreased by $45 million after among the stolen funds have been recovered.
Balancer DeFi protocol assault tops the record of main exploits in November, marking considered one of 2025’s largest DeFi safety breaches. The platform misplaced over $116 million in a complicated cross-chain exploit that affected a number of blockchains.
About $135 million was misplaced in DeFi incidents, adopted by $29.8 million drained in change hacks, CertiK knowledge famous.
The submit Yearn Finance’s yETH Suffers Main Hack, Attackers Ship $3M ETH to Twister Money appeared first on Cryptonews.