Yearn Finance exploit Flash News List | Blockchain.News
Flash News List

List of Flash News about Yearn Finance exploit

Time Details
2025-12-05
08:05
Yearn Finance Exploit On-Chain: $9M Haul, 1,100 ETH to Tornado Cash, 1,184.9 WETH and 128 ETH Still Held, $2.4M pxETH Recovered

According to @MistTrack_io, the Yearn Finance exploit generated roughly 9 million dollars, with the initial seed funds traced to ETH routed via Railgun, source: @MistTrack_io on X 2025-12-05; https://etherscan.io/tx/0x68f88d2ffcef1ceafde26fc290cf1d31ff9a461b4ee2aeb68da8aa9cf70e600c. After the attack execution, the exploiter sent 1,100 ETH to Tornado Cash and later withdrew 100 ETH to continue operations, source: @MistTrack_io on X 2025-12-05; https://etherscan.io/tx/0x53fe7ef190c34d810c50fb66f0fc65a1ceedc10309cf4b4013d64042a0331156. Approximately 6 million dollars in remaining profit comprising 128 ETH, 48.96 cbETH, 203.55 rETH, 742.63 frxETH, 857.48 pxETH, and 167.67 stETH was consolidated into address 0xa80d3f2022f6bfd0b260bf16d72cad025440c822, source: @MistTrack_io on X 2025-12-05; https://etherscan.io/address/0xa80d3f2022f6bfd0b260bf16d72cad025440c822. To prepare batch operations, the exploiter executed a 7702 delegatecall to 0x1A1Efc..., source: @MistTrack_io on X 2025-12-05; https://etherscan.io/tx/0x91054b9f0bf8e94ef2ebf27141872662776636b68ab3122eeb0afec421ba71bb. The attacker then swapped cbETH, rETH, frxETH, and stETH into 1,184.9 WETH in a single transaction; a subsequent attempt to convert WETH to ETH and batch-deposit into Tornado Cash failed, source: @MistTrack_io on X 2025-12-05; https://etherscan.io/tx/0x9bdf92698cbd53adc42568cf205748da96d348f576be18d21e7c5180571ee825; https://etherscan.io/tx/0x18582f9cf70349f0f86105a79f2bab20cb2a5305f17911ee23a092fc9ea86785. Yearn recovered about 2.4 million dollars by burning the exploiter’s 857.48 pxETH and re-minting it to the Redacted Cartel multisig, source: @MistTrack_io on X 2025-12-05; https://etherscan.io/tx/0x0e83bb95bb9d05fb81213b2fad11c01ea671796752e8770b09935f7052691c35. As of the latest update, the exploiter-controlled address still holds 1,184.9 WETH and 128 ETH, making on-chain flows traceable for monitoring, source: @MistTrack_io on X 2025-12-05; https://etherscan.io/address/0xa80d3f2022f6bfd0b260bf16d72cad025440c822.

Source