Yearn yETH exploit on 2025-11-30
Exploit on Ethereum, 30 Nov 2025. Last verified 4 Nov 2026.
notable
Reported loss
Not stated
no amount published
Recovered
Not in USD
857.49 pxETH
Status
Partially recovered
updated 26 Oct 2026
Date
Ethereum
Summary
On 2025-11-30 an attacker forced the solver of Yearn's yETH weighted stableswap pool on Ethereum into a divergent state, over-minted yETH LP tokens and drained the pool's liquid staking tokens and the yETH/ETH Curve pool. Yearn said its other vaults were unaffected and that 857.49 pxETH was recovered.
- Protocol
- Yearn yETH
- Type
- Exploit
- Reported loss
- not stated
- Recovered
- 857.49 pxETH
Facts and where they come from
| Fact | Value | Source |
|---|---|---|
| Date | November 30, 2025 | github.com ↗ |
| Recovered | 857.49 pxETH | github.com ↗ |
| Scope | isolated to the yETH product | github.com ↗ |
| Transaction | 0x53fe7ef190c34d810c50fb66f0fc65a1ceedc10309cf4b4013d64042a0331156 | github.com ↗ |
On-chain transactions
- EthereumTransaction 0x53fe…1156
Primary sources
- Yearn security: incident disclosure 2025-12-01 (yETH) ↗ post-mortem · accessed 2026-11-04
Our own summary of facts published by the sources above. We do not attribute fault beyond them. Amounts are as the sources state them (no USD conversion by us); links and quoted figures last checked 2026-11-04.
Get the next one first
- Alert on new security incidents: hacks, depegs, TVL drops and exchange outflows, by e-mail or Telegram