Hacker mints 1 quadrillion yUSDT after exploiting previous Yearn Finance contract

Blockchain safety agency PeckShield not too long ago detected a hack that allowed the exploiter to mint over 1 quadrillion Yearn Tether (yUSDT) from $10,000 within the newest decentralized finance (DeFi) hack. 

In line with the safety agency, the hacker then swapped the yUSDT to different stablecoins, permitting them to snatch $11.6 million value of stablecoins. This consists of 61,000 Pax Greenback (USDP), 1.5 million TrueUSD (TUSD), 1.79 million Binance USD (BUSD), 1.2 million Tether (USDT), 2.58 million USD Coin (USDC) and three million in DAI (DAI).

PeckShield mentioned that the hacker has already managed to switch 1,000 Ether (ETH), at the moment value virtually $2 million, to the sanctioned cryptocurrency mixer Twister Money. The blockchain safety firm additionally flagged the DeFi protocols Aave and Yearn Finance to tell them of what was transpiring. 

Associated: Sentiment recovers $870K after negotiations with hacker

After preliminary checks, lending platform Yearn Finance made a press release that the problem was restricted to iearn, which was an outdated contract earlier than Vaults V1 and V2. The DeFi protocol mentioned that the present Yearn Finance contracts and protocols usually are not affected by the exploit.

We’re trying into a difficulty with iearn, an outdated contract from earlier than Vaults v1 and v2.

This drawback appears unique to iearn and doesn’t affect present Yearn contracts or protocols.

iearn is an immutable contract predating YFI, it was deprecated in 2020.

Vaults v1, with…

— yearn (@iearnfinance) April 13, 2023

In the meantime, Aave additionally mentioned that they’re conscious of the transaction as effectively. The liquidity protocol not too long ago confirmed that the hack didn’t have an effect on its Aave V1, V2 or V3. 

Whereas hacks nonetheless plague the DeFi house in 2023, the sum of money misplaced to hacks has been decrease in comparison with the earlier years. In line with the quarterly report of blockchain safety agency CertiK, greater than $320 million were lost to hacks within the first quarter of 2023. The losses had been lots decrease in comparison with 2022’s first quarter the place $1.3 billion had been misplaced and the fourth quarter when $950 million had been misplaced to hacks.

Journal: US enforcement agencies are turning up the heat on crypto-related crime