Cover photo

Yearn Suffers yETH Pool Exploit

Yearn Finance suffered an exploit on its yETH stableswap pool. About $9 million was drained, with $2.4 million recovered.

Gm frENS. Happy Monday, cheers to a new month!

Quick Take

  • Yearn suffers yETH exploit.

  • Yearn recovers $2.4 million.

  • The Beacon Chain turns 5.

  • Amundi launches a fund on Ethereum.


[

Yearn Suffers yETH Pool Exploit

Listen to this episode from Ethereum News on Spotify. Yearn Finance suffers an exploit on its yETH pool. Yearn recovers $2.4 million. The Ethereum Beacon Chain turns 5. And Amundi launches a tokenized fund on Ethereum. Read more: https://ethdaily.io/833 Sponsor: Arkiv is an Ethereum-aligned data layer for Web3.

https://spotify.com

post image

](https://open.spotify.com/episode/2Ixq7MYhOfXgFQo1fJpYFx)


Sponsored by

Lido Earn

EarnUSD is a stablecoin vault by Lido for earning transparent, onchain USD-denominated rewards. Get started today at stake.lido.fi/earn


Yearn Suffers yETH Pool Exploit

Yearn Finance suffered an exploit on its yETH stableswap pool, resulting in an approximate loss of $9 million in assets. On November 30, 2025, at 21:11 UTC, an attacker exploited a math-related vulnerability in the pool’s custom stableswap implementation, enabling them to over-mint yETH LP tokens. They then redeemed the LP tokens, draining the underlying WETH and various liquid staking tokens (LSTs) from the affected Balancer and Curve pools. After the exploit, the attacker deposited 1,000 ETH into Tornado Cash in 100 ETH increments. The remaining stolen LSTs have not been sold. Yearn contributor banteg published a preliminary post-mortem attributing the root cause to a subtle bug in the pool’s supply solver logic within a custom version of Curve-style stableswap code. Yearn’s V2 and V3 vaults were not affected.

Yearn Recovers $2.4 Million

In coordination with the Plume and Dinero teams, Yearn successfully recovered 857.49 pxETH, worth $2.39 million, from the exploiter’s wallet. pxETH, one of several liquid staking tokens (LSTs) held in the legacy yETH stableswap pool, was recovered using a burn-and-mint mechanism that burned the tokens in the attacker’s address. The attacker still holds roughly $3.6 million in remaining LSTs, primarily frxETH, rETH, wstETH, and cbETH. Recovery efforts for the remaining tokens are ongoing. All recovered assets will be returned to users.

Ethereum Beacon Chain Turns 5

Today marks five years since Ethereum’s Beacon Chain launched on mainnet, with its genesis block activated on December 1, 2020. At its inception, the Beacon Chain saw approximately 500,000 ETH deposited on the first day. Today, over 35.6 million ETH, representing 29.5% of the total ETH supply, is staked on the Beacon Chain, supported by more than 10,000 node operators. The Beacon Chain has maintained 100% uptime since its launch. On September 15, 2022, it merged seamlessly with Ethereum's execution layer, marking the network’s complete transition from proof of work to proof of stake.

Amundi Tokenized Fund On Ethereum

Amundi, Europe’s largest asset manager with over $2.6 trillion in assets under management, launched the first tokenized share class of an existing euro-denominated money market fund on Ethereum. The structure allows institutional investors to choose between the traditional fund or the new onchain fund with shares and transactions recorded directly on the Ethereum. The fund invests in short-term euro-denominated debt instruments. The rollout was developed in partnership with CACEIS, which provides the tokenization infrastructure, wallets, and a digital order-routing system for 24/7 subscriptions and redemptions. Amundi’s launch marks the first major euro-denominated tokenized fund.

Other News


Disclaimer: Content is for informational purposes only, not endorsement or investment advice. The accuracy of information is not guaranteed.