【Blockchain Rhythm】Yearn Finance’s V1 version was attacked on December 17. According to on-chain security team monitoring data, the incident resulted in approximately $300,000 in funds lost. The hacker has converted the stolen funds into 103 Ethereum and has completed the transfer of the funds.
This attack once again reminds us that even well-known DeFi protocols need to be highly vigilant about security risks. As an important platform in liquidity mining and yield optimization, the vulnerability of Yearn Finance’s V1 version was exploited by attackers. Although the loss amount is relatively limited, the impact on user confidence should not be underestimated.
Relevant authorities are tracking the subsequent transfer of this ETH, and the security community is analyzing the attack methods to help other projects prevent similar risks in a timely manner.
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
13 Likes
Reward
13
6
Repost
Share
Comment
0/400
AirdropHarvester
· 4h ago
Here we go again, how brave are those still using version V1?
View OriginalReply0
DAOdreamer
· 6h ago
Yearn has been hit again. Shouldn't this v1 be taken offline? What's it still doing running in the production environment?
View OriginalReply0
GasFeeTherapist
· 7h ago
Yearn is in trouble again? How many people are still using version 1? They really can't keep up with the iterations.
By the way, hackers can cash out so quickly—shouldn't exchanges also reflect on their risk controls...
I've said it before, don't put large positions all in a single protocol. Have you all woken up this time?
View OriginalReply0
PoolJumper
· 7h ago
It's another Yearn... V1 version. What era are we in still using this? Hurry up and migrate to V3, really.
---
Just 300,000 USD, switch to ETH and run, hackers still have some brains.
---
It's always big-name projects having issues. Why are people still willing to put money into DeFi?
---
Wait, 103 ETH just gone like that? Doesn't Yearn have an emergency plan?
---
Where's the promised security audit? Laughing to death.
---
Starting to track again, most likely won't find anything in the end.
---
That's why I only play with stablecoin liquidity pools, the risk is much lower.
---
The V1 vulnerability should have been fixed long ago, why has it only been exposed now?
View OriginalReply0
ContractCollector
· 7h ago
It's the V1 version again... It should have been retired long ago, so why are you still keeping it?
View OriginalReply0
StakeHouseDirector
· 7h ago
Yearn gets slapped again; is v1 about to be completely phased out?
---
Can't catch $300,000; what's the point of security audits?
---
Wait, 103 ETH just disappeared so quickly? Aren't these on-chain folks supposed to be able to track it?
---
No matter how fancy the contract is written, hackers can't be stopped. Yet so many people still use Yearn.
---
V1 should have been taken offline long ago; why the procrastination until now?
---
Now it's time for meetings, statements, and compensation. DeFi is really exhausting.
Yearn Finance V1 version was attacked, and the hacker stole $300,000 worth of funds, which has been converted into 103 ETH.
【Blockchain Rhythm】Yearn Finance’s V1 version was attacked on December 17. According to on-chain security team monitoring data, the incident resulted in approximately $300,000 in funds lost. The hacker has converted the stolen funds into 103 Ethereum and has completed the transfer of the funds.
This attack once again reminds us that even well-known DeFi protocols need to be highly vigilant about security risks. As an important platform in liquidity mining and yield optimization, the vulnerability of Yearn Finance’s V1 version was exploited by attackers. Although the loss amount is relatively limited, the impact on user confidence should not be underestimated.
Relevant authorities are tracking the subsequent transfer of this ETH, and the security community is analyzing the attack methods to help other projects prevent similar risks in a timely manner.