Yearn Finance Hit by Fourth Exploit as Attacker Drains Legacy v1 Vault

iconOdaily
Share
Share IconShare IconShare IconShare IconShare IconShare IconCopy
Yearn Finance has faced its fourth exploit, with an attacker draining a legacy v1 vault via a flash loan attack. PeckShield reported the exploit involved token price manipulation in a deprecated iearn vault. The attacker withdrew assets and converted them into another token. This follows a $9 million yETH token exploit earlier this month and prior hacks in 2023 and 2021. Yearn is reviewing contracts and urging caution with older v1 vaults as flash loan attacks persist. A new token launch is not on the immediate roadmap, but security upgrades are in progress.
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.