- Yearn Finance suffered a second hack since early December 2025, losing approximately $300,000 in crypto assets.
- The breach exploited a vulnerability within the Yearn Finance V1 contract.
- The attacker converted stolen assets into 103 ETH and left 214,000 sUSD in the vault.
- The vulnerability was tied to the configuration of iEarn storage and known issues with outdated contracts.
Yearn Finance Faces Second Hack Since Early December
In a significant setback for Yearn Finance, the project faced its second hack since early December 2025. The incident resulted in an estimated loss of $300,000 as reported by PeckShield experts. This breach highlights ongoing security challenges within decentralized finance (DeFi) protocols.
Exploiting Vulnerabilities in Yearn Finance V1
The recent attack targeted vulnerabilities within the Yearn Finance V1 contract. According to security analysts, including William Lee, the issue stemmed from misconfigurations in iEarn’s storage system. The attacker leveraged these vulnerabilities to manipulate asset transfers and maximize their gain.
Technical Breakdown of the Attack
The attacker initiated their plan by taking loans in TUSD and sUSD. They transferred sUSD to Fulcrum and subsequently deposited TUSD into Yearn. By transferring Fulcrum sUSD back into storage, they artificially inflated share values before executing a rebalance function that drastically reduced share prices. This enabled them to profit from selling shares through Curve Finance pools.
Notably, despite converting some assets into 103 ETH for personal gain, they left behind a substantial amount—214,000 sUSD—inaccessible within the vault.
Response from Yearn Finance
Yearn Finance addressed this incident by emphasizing that it exclusively affected iEarn storage and did not impact other components of their ecosystem. The team acknowledged that the exploited contract was outdated with long-known vulnerabilities.
The firm’s response underscores ongoing efforts to mitigate risks associated with legacy systems while reinforcing newer components’ resilience against similar threats.
Implications for DeFi Security
This latest attack on Yearn Finance underlines persistent security concerns plaguing decentralized finance platforms. It serves as both a cautionary tale for investors and an urgent call-to-action for developers across DeFi ecosystems to prioritize robust security measures and timely updates on all contracts—especially those considered obsolete or vulnerable.
As DeFi continues evolving rapidly alongside broader cryptocurrency markets globally; ensuring secure infrastructure remains paramount not only preserving user trust but also safeguarding burgeoning industry growth potential worldwide.
