Earnings Misconfigured: Yearn.finance Exploit Explained
ID: 189a7b3f-f0b4-58e2-bdff-10847f2421e7
STIX ID: report--189a7b3f-f0b4-58e2-bdff-10847f2421e7
Feed Name: CertiK Blog
Threat Score
On April 13, 2023 Yearn Finance suffered a misconfiguration exploit of the yUSDT vault: the contract referenced Fulcrum's iUSDC instead of iUSDT, causing approximately $10M in losses due to token-exchange rate discrepancies; the issue was attributed to configuration error and noted as out of scope by a prior audit.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.