Bitget App
Trade smarter
Buy cryptoMarketsTradeFuturesEarnSquareMore
YFI +0.62% Following Partial Bounce Back After $9M Hack

YFI +0.62% Following Partial Bounce Back After $9M Hack

Bitget-RWA2025/12/03 00:26
By:Bitget-RWA

- Yearn Finance recovered $2.4M of $9M lost in a yETH stableswap pool exploit via Plume and Dinero collaboration. - Attackers exploited contract vulnerabilities on Nov 30, 2025, draining assets through yETH and yETH–WETH pools. - Partial Ethereum recovery was hindered by Tornado Cash laundering, though LST assets were traced and redirected. - V2/V3 vaults ($600M+) remained unaffected; protocol emphasizes patching legacy contracts to prevent future breaches. - YFI rebounded 0.62% after partial recovery, tho

YFI Price Movement and Recent Developments

As of December 2, 2025, Yearn Finance’s YFI token experienced a modest 0.62% increase over the past day, reaching a value of $3,713. Despite this short-term gain, YFI has seen a decline of 9.5% over the last week, a 9.87% drop in the past month, and a significant 53.36% decrease compared to its price a year ago.

Yearn Finance Recoups $2.4 Million After Major yETH Pool Exploit

Yearn Finance has managed to recover $2.4 million out of the $9 million that was stolen during a major exploit targeting its legacy yETH stableswap pool. The attack, which took place on November 30, 2025, exploited a flaw in the pool’s custom contract, allowing the perpetrators to mint excessive yETH and drain funds from two separate pools. In total, more than $8.9 million was extracted from both the yETH stableswap and yETH–WETH pools on Curve.

This partial recovery was achieved through collaboration with Plume and Dinero. On December 1, 2025, Yearn announced the successful retrieval of 857.49 pxETH, valued at approximately $2.39 million, which will be returned to those affected. The protocol has stated that reimbursements to users will commence soon, and efforts to recover additional funds are ongoing.

Swift Security Measures and Continued Recovery

In response to the breach, Yearn joined forces with security experts from SEAL 911 and ChainSecurity to quickly address the situation. Their teams worked to limit further losses and trace the stolen assets. Some of the stolen Ethereum was funneled through Tornado Cash, complicating the recovery process. Nevertheless, investigators managed to identify and neutralize several LST assets connected to the attacker’s wallets, enabling them to reclaim value for users by unwinding pxETH positions.

Yearn has reassured its community that its V2 and V3 vaults, which collectively hold over $600 million, were not impacted by this incident due to their separate codebases. The team remains committed to auditing and updating older contracts to safeguard against similar vulnerabilities in the future.

DeFi Security Remains a Pressing Issue

This yETH exploit is the latest in a series of security breaches affecting the DeFi sector. In late November, both Prisma Finance and Raft Finance suffered losses stemming from contract vulnerabilities and compromised private keys. Earlier in the year, Curve Finance was also targeted due to a flaw in the Vyper compiler.

Experts continue to warn about the dangers posed by outdated smart contracts and the growing complexity of DeFi systems. Yearn Finance is preparing a comprehensive post-mortem report, which will be released after its audit partners complete their review. The report will detail the nature of the exploit, the steps taken in response, and the measures being implemented to prevent similar incidents.

Community Engagement and Market Reaction

The Yearn community has been actively monitoring recovery efforts through Discord and other channels. The exploit initially triggered a sharp decline in YFI’s price, with the token dropping nearly 10% on the day of the attack. However, news of the partial fund recovery helped restore some confidence, resulting in a partial price rebound. At the latest update, YFI is trading at $3,713.

As the DeFi community keeps a close eye on Yearn Finance’s next steps, there is growing interest in how the protocol will strengthen its security and address any remaining vulnerabilities. For now, the successful recovery of a portion of the stolen funds highlights the resilience and determination of the Yearn ecosystem in overcoming significant security challenges.

0
0

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.

PoolX: Earn new token airdrops
Lock your assets and earn 10%+ APR
Lock now!
© 2025 Bitget