Yearn Finance yETH Pool Hit by $9M Exploit
ID: 521c73f1-0421-5802-b31a-7baab7069896
STIX ID: report--521c73f1-0421-5802-b31a-7baab7069896
Feed Name: Infosecurity Magazine (News)
Threat Score
**Yearn yETH pool drained (~$9M) via cached-balance desync exploit** — A flaw in the pool's cached virtual balances (packed_vbs[]) allowed an attacker to desynchronize state, repeatedly poison virtual balances via flash-loan deposit/withdraw cycles, reset on-chain supply to zero, then trigger a flawed "first deposit" minting path by depositing 16 wei to mint massively inflated yETH and convert it to underlying LSDs and ETH before laundering funds.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.