{"id":212176,"date":"2023-12-14T01:48:59","date_gmt":"2023-12-13T20:18:59","guid":{"rendered":"https:\/\/dripp.zone\/news\/yearn-finance-hit-by-63-treasury-loss-due-to-script-glitch-crypto-news\/"},"modified":"2023-12-14T01:49:03","modified_gmt":"2023-12-13T20:19:03","slug":"yearn-finance-hit-by-63-treasury-loss-due-to-script-glitch-crypto-news","status":"publish","type":"post","link":"https:\/\/dripp.zone\/news\/yearn-finance-hit-by-63-treasury-loss-due-to-script-glitch-crypto-news\/","title":{"rendered":"Yearn Finance Hit by 63% Treasury Loss Due to Script Glitch &#8211; Crypto News"},"content":{"rendered":"<p><\/p>\n<div>\n<p><span style=\"font-weight: 400;\">In a significant setback for <\/span><a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/coingape.com\/yearn-finance-yfi-price-declines-amid-soaring-whale-activity\/\"><span style=\"font-weight: 400;\">Yearn Finance<\/span><\/a><span style=\"font-weight: 400;\">, a leading player in the decentralized finance (DeFi) sector, a script malfunction in its multisig (multi-signature) system led to a substantial loss of its treasury assets. The incident on December 11 resulted in the unintended swap of Yearn\u2019s treasury balance, amounting to a loss of approximately 63%.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The company confirmed that the loss affected only the treasury funds and did not impact customer funds. The mishap involved the accidental exchange of 3,794,894 <\/span><a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/coingape.com\/yearn-vaults\/\"><span style=\"font-weight: 400;\">lp-yCRVv2 tokens <\/span><\/a><span style=\"font-weight: 400;\">from Yearn\u2019s treasury. This transaction, executed on CoW Swap, led to significant market slippage due to the large volume involved, further exacerbating the loss.<\/span><\/p>\n<p><!-- WP QUADS Content Ad Plugin v. 2.0.72.1 --><\/p>\n<h2><strong>Yearn Finance Treasury Error Triggers Huge Loss<\/strong><\/h2>\n<p><span style=\"font-weight: 400;\">The event unfolded as a result of multiple oversights in handling the treasury funds. Yearn\u2019s <\/span><a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/github.com\/yearn\/yearn-security\/blob\/master\/disclosures\/2023-12-11.md\"><span style=\"font-weight: 400;\">statement explained<\/span><\/a><span style=\"font-weight: 400;\"> that the entire treasury balance, including fees, was mistakenly transferred to a trading multisig, initiating over 30 trade orders. Among these was the critical swap of the treasury balance.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This transaction\u2019s complexity and high volume of trades hindered effective human review, allowing the error to pass unnoticed. The protocol identified that the script used for token swapping lacked adequate output checks and contained a logical flaw. This flaw failed to cap the trade size, leading to the unintended large-scale transaction.<\/span><\/p>\n<h2><strong>New Safety Steps at Yearn Post Loss<\/strong><\/h2>\n<p><!-- WP QUADS Content Ad Plugin v. 2.0.72.1 --><\/p>\n<p><span style=\"font-weight: 400;\">Yearn Finance has implemented several measures to prevent a recurrence in response to this incident. The protocol plans to segregate protocol-owned liquidity (POL) funds into separate entities and enhance its trading scripts to produce more comprehensible output messages. Additionally, it will enforce stricter price impact thresholds during trades.<\/span><\/p>\n<p><!-- WP QUADS Content Ad Plugin v. 2.0.72.1 --><\/p>\n<p><span style=\"font-weight: 400;\">This incident is not the first security challenge Yearn has faced. Earlier in the year, the protocol was the<\/span><a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/coingape.com\/curve-finance-hackers-exploit-vyper-vulnerabilities-could-state-sponsored-hackers-be-involved\/\"><span style=\"font-weight: 400;\"> target of an attack<\/span><\/a><span style=\"font-weight: 400;\"> where a vulnerability in a Yearn vault was exploited, resulting in the theft of approximately $11 million in stablecoins. The attacker utilized a small amount of tether (USDT) to mint a vast quantity of yUSDT. This Yearn-equivalent token was exchanged for stablecoins, culminating in a significant financial loss for the protocol.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Yearn Finance has reached out to the community, appealing to those who profited from arbitraging the mistake to return a reasonable amount to Yearn\u2019s main multisig wallet, ychad.eth. This appeal highlights the collaborative and self-regulating nature of the DeFi community.<\/span><\/p>\n<p><b>Read Also:<\/b> <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/coingape.com\/fasb-introduces-fair-value-crypto-accounting-standards\/\"><span style=\"font-weight: 400;\">FASB Introduces Fair-Value Crypto Accounting Standards<\/span><\/a><\/p>\n<p><!-- WP QUADS Content Ad Plugin v. 2.0.72.1 --><\/p>\n<div class=\"m-on mobiless\">\n<div id=\"social-section-new\">\n<p>\u2713 Share:<\/p>\n<p>                                  <a rel=\"nofollow noopener\" target=\"_blank\" class=\"social-text_new wp_new\" href=\"https:\/\/api.whatsapp.com\/send?text=https:\/\/coingape.com\/yearn-finance-hit-by-63-treasury-loss-due-to-script-glitch\/\" style=\"display: block\">  <i class=\"fa fa-whatsapp\"\/><\/a><\/p>\n<div>\n                                <a rel=\"nofollow noopener\" target=\"_blank\" class=\"social-text_new tw_new_logo\" href=\"https:\/\/twitter.com\/intent\/tweet?text=https:\/\/coingape.com\/yearn-finance-hit-by-63-treasury-loss-due-to-script-glitch\/\"><br \/>\n  <noscript><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/cdn.coingape.com\/wp-content\/uploads\/2023\/08\/14164721\/x-logo.png\" class=\"mb-1\" alt=\"coingape\" width=\"30\" height=\"30\"\/><\/noscript><br \/>\n<\/a>\n                                <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<p>          <!-- \n\n<div class=\"m-on pl-2 pr-2\">\n            \n\n<div class=\"row\">\n            \n\n<div class=\"col-6 pr-2\">\n         \n\n<div class=\"Borderboxies_2 mb-3  fullmobx\">\n             \n            <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/coingape.com\/top-7-crypto-marketing-firms-of-the-year\/?utm_source=abovesidebartabnews&utm_medium=organicarticle\">\n            \n\n<div class=\"SponserdyWebimg_2\"><img loading=\"lazy\" width=\"834\" height=\"833\" src=\"data:image\/svg+xml,%3Csvg%20xmlns=\"http:\/\/www.w3.org\/2000\/svg\"%20viewBox='0%200%20834%20833'%3E%3C\/svg%3E\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"\" decoding=\"async\" data-lazy-src=\"https:\/\/cdn.coingape.com\/wp-content\/uploads\/2022\/12\/15175104\/top_crypto_marketing_agencies.jpg\" ><noscript><img loading=\"lazy\" width=\"834\" height=\"833\" src=\"https:\/\/cdn.coingape.com\/wp-content\/uploads\/2022\/12\/15175104\/top_crypto_marketing_agencies.jpg\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"\" decoding=\"async\" ><\/noscript><\/div>\n\n\n                \n\n<div class=\"Sponserdtent_2 mt-2\">Top Crypto Marketing Firms \/ Agencies 2023; Here\u2019s Best Picks [Updated]\n <\/div>\n\n\n            <\/a>\n          \n            <\/div>\n\n\n            <\/div>\n\n\n                  \n\n<div class=\"col-6 pl-2\">\n                 \n\n<div class=\"Borderboxies_2 mb-3  fullmobx\">\n             \n            <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/coingape.com\/top-10-web-3-games-to-explore-in-2023-here-list\/?utm_source=priceanalysisbar&utm_medium=organicarticle\">\n            \n\n<div class=\"SponserdyWebimg_2\"><img loading=\"lazy\" width=\"834\" height=\"833\" src=\"data:image\/svg+xml,%3Csvg%20xmlns=\"http:\/\/www.w3.org\/2000\/svg\"%20viewBox='0%200%20834%20833'%3E%3C\/svg%3E\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"\" decoding=\"async\" data-lazy-src=\"https:\/\/cdn.coingape.com\/wp-content\/uploads\/2022\/12\/23134356\/jpg_20221223_134223_0000.jpg\" ><noscript><img loading=\"lazy\" width=\"834\" height=\"833\" src=\"https:\/\/cdn.coingape.com\/wp-content\/uploads\/2022\/12\/23134356\/jpg_20221223_134223_0000.jpg\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"\" decoding=\"async\" ><\/noscript><\/div>\n\n\n                \n\n<div class=\"Sponserdtent_2 mt-2\">Top 10 Web3 Games To Explore In 2023; Here List\n <\/div>\n\n\n            <\/a>\n          \n            <\/div>\n\n\n            <\/div>\n\n\n                <\/div>\n\n\n        <\/div>\n\n                    --><\/p>\n<div class=\"TabDicA\">\n<div class=\"TBAcon \">\n<div class=\"authorFlip tabcS\" id=\"TabA169200\">\n<div class=\"authorBox\">\n<div class=\"author_Name\">\n<!--\n                                      \n\n<div class=\"getAuthoname\">\n                                          \n                                                                                 \n                                       <\/div>\n\n \n--><\/p>\n<p>Maxwell is a crypto-economic analyst and Blockchain enthusiast, passionate about helping people understand the potential of decentralized technology. I write extensively on topics such as blockchain, cryptocurrency, tokens, and more for many publications. My goal is to spread knowledge about this revolutionary technology and its implications for economic freedom and social good.                         <\/p>\n<\/p><\/div>\n<div class=\"author_Image\">\n                                             <img loading=\"lazy\" alt=\"\" src=\"data:image\/svg+xml,%3Csvg%20xmlns=\" http:=\"\" data-lazy-srcset=\"https:\/\/secure.gravatar.com\/avatar\/31bfe6e557ba2e32092c8ab3818cacc3?s=400&#038;d=mm&#038;r=g 2x\" class=\"avatar avatar-200 photo\" height=\"200\" width=\"200\" decoding=\"async\" data-lazy-src=\"https:\/\/secure.gravatar.com\/avatar\/31bfe6e557ba2e32092c8ab3818cacc3?s=200&#038;d=mm&#038;r=g\"\/><noscript><img loading=\"lazy\" alt=\"\" src=\"https:\/\/secure.gravatar.com\/avatar\/31bfe6e557ba2e32092c8ab3818cacc3?s=200&#038;d=mm&#038;r=g\" srcset=\"https:\/\/secure.gravatar.com\/avatar\/31bfe6e557ba2e32092c8ab3818cacc3?s=400&#038;d=mm&#038;r=g 2x\" class=\"avatar avatar-200 photo\" height=\"200\" width=\"200\" decoding=\"async\"\/><\/noscript>                                       <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"TabDesCm tabcS\" id=\"TabD169200\">\n<p>  The presented content may include the personal opinion of the author and is subject to market condition. Do your market research before investing in cryptocurrencies. The author or the publication does not hold any responsibility for your personal financial loss.<\/p>\n<\/div><\/div>\n<\/p><\/div>\n<p><!-- \n\n<div class=\"container p-1 mb-3  mt-4 \">\n    \n    \n     \n\n<div class=\"Maintitle clgrn border-0\">\n               <span>Crypto Stories<\/span>\n                    \n                    \n                    <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/coingape.com\/web-stories\/\" class=\"viewAll p-0\">View all<\/a>\n                <\/div>\n\n\n     \n\n<div class=\"row mobileXS \">\n                     \n          \n\n<div class=\"item col-md-4\"> \n        \n\n<div class=\"Newseducation\">\n         \n\n<div class=\"Eduimg WduImg\">\n            <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/coingape.com\/web-stories\/avax-surges-past-doge-in-top-10-crypto-race\/?utm_source=post&utm_medium=web-story\">\n            \n\n<div class=\"edIm StoryWebimg\"><img loading=\"lazy\" width=\"640\" height=\"853\" src=\"data:image\/svg+xml,%3Csvg%20xmlns=\"http:\/\/www.w3.org\/2000\/svg\"%20viewBox='0%200%20640%20853'%3E%3C\/svg%3E\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"avax6\" decoding=\"async\" data-lazy-srcset=\"https:\/\/coingape.com\/wp-content\/uploads\/2023\/12\/cropped-avax6.jpg 640w, https:\/\/coingape.com\/wp-content\/uploads\/2023\/12\/cropped-avax6-225x300.jpg 225w, https:\/\/coingape.com\/wp-content\/uploads\/2023\/12\/cropped-avax6-150x200.jpg 150w\" data-lazy-sizes=\"(max-width: 640px) 100vw, 640px\" data-lazy-src=\"https:\/\/coingape.com\/wp-content\/uploads\/2023\/12\/cropped-avax6.jpg\" \/><noscript><img loading=\"lazy\" width=\"640\" height=\"853\" src=\"https:\/\/coingape.com\/wp-content\/uploads\/2023\/12\/cropped-avax6.jpg\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"avax6\" decoding=\"async\" srcset=\"https:\/\/coingape.com\/wp-content\/uploads\/2023\/12\/cropped-avax6.jpg 640w, https:\/\/coingape.com\/wp-content\/uploads\/2023\/12\/cropped-avax6-225x300.jpg 225w, https:\/\/coingape.com\/wp-content\/uploads\/2023\/12\/cropped-avax6-150x200.jpg 150w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><\/noscript><\/div>\n\n\n                \n\n<div class=\"Educontent\">AVAX Surges Past DOGE in Top 10 Crypto Race <\/div>\n\n\n            <\/a>\n            <\/div>\n\n\n        <\/div>\n\n\n        <\/div>\n\n\n          \n          \n  \n              \n          \n\n<div class=\"item col-md-4\"> \n        \n\n<div class=\"Newseducation\">\n         \n\n<div class=\"Eduimg WduImg\">\n            <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/coingape.com\/web-stories\/shib-lead-teases-1-2m-burn-0-01-goal-uncertain\/?utm_source=post&utm_medium=web-story\">\n            \n\n<div class=\"edIm StoryWebimg\"><img loading=\"lazy\" width=\"640\" height=\"853\" src=\"data:image\/svg+xml,%3Csvg%20xmlns=\"http:\/\/www.w3.org\/2000\/svg\"%20viewBox='0%200%20640%20853'%3E%3C\/svg%3E\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"Shib\" decoding=\"async\" data-lazy-srcset=\"https:\/\/coingape.com\/wp-content\/uploads\/2023\/12\/cropped-737dd2063203dea29cc1297f15b1e2f2.jpg 640w, https:\/\/coingape.com\/wp-content\/uploads\/2023\/12\/cropped-737dd2063203dea29cc1297f15b1e2f2-225x300.jpg 225w, https:\/\/coingape.com\/wp-content\/uploads\/2023\/12\/cropped-737dd2063203dea29cc1297f15b1e2f2-150x200.jpg 150w\" data-lazy-sizes=\"(max-width: 640px) 100vw, 640px\" data-lazy-src=\"https:\/\/coingape.com\/wp-content\/uploads\/2023\/12\/cropped-737dd2063203dea29cc1297f15b1e2f2.jpg\" \/><noscript><img loading=\"lazy\" width=\"640\" height=\"853\" src=\"https:\/\/coingape.com\/wp-content\/uploads\/2023\/12\/cropped-737dd2063203dea29cc1297f15b1e2f2.jpg\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"Shib\" decoding=\"async\" srcset=\"https:\/\/coingape.com\/wp-content\/uploads\/2023\/12\/cropped-737dd2063203dea29cc1297f15b1e2f2.jpg 640w, https:\/\/coingape.com\/wp-content\/uploads\/2023\/12\/cropped-737dd2063203dea29cc1297f15b1e2f2-225x300.jpg 225w, https:\/\/coingape.com\/wp-content\/uploads\/2023\/12\/cropped-737dd2063203dea29cc1297f15b1e2f2-150x200.jpg 150w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><\/noscript><\/div>\n\n\n                \n\n<div class=\"Educontent\">SHIB Lead Teases $1.2M Burn, $0.01 Goal Uncertain <\/div>\n\n\n            <\/a>\n            <\/div>\n\n\n        <\/div>\n\n\n        <\/div>\n\n\n          \n          \n  \n              \n          \n\n<div class=\"item col-md-4\"> \n        \n\n<div class=\"Newseducation\">\n         \n\n<div class=\"Eduimg WduImg\">\n            <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/coingape.com\/web-stories\/altcoins-on-binance-which-could-1000x-anytime-in-future\/?utm_source=post&utm_medium=web-story\">\n            \n\n<div class=\"edIm StoryWebimg\"><img loading=\"lazy\" width=\"640\" height=\"853\" src=\"data:image\/svg+xml,%3Csvg%20xmlns=\"http:\/\/www.w3.org\/2000\/svg\"%20viewBox='0%200%20640%20853'%3E%3C\/svg%3E\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"download (1)\" decoding=\"async\" data-lazy-srcset=\"https:\/\/coingape.com\/wp-content\/uploads\/2023\/12\/cropped-download-1-1-1.jpg 640w, https:\/\/coingape.com\/wp-content\/uploads\/2023\/12\/cropped-download-1-1-1-225x300.jpg 225w, https:\/\/coingape.com\/wp-content\/uploads\/2023\/12\/cropped-download-1-1-1-150x200.jpg 150w\" data-lazy-sizes=\"(max-width: 640px) 100vw, 640px\" data-lazy-src=\"https:\/\/coingape.com\/wp-content\/uploads\/2023\/12\/cropped-download-1-1-1.jpg\" \/><noscript><img loading=\"lazy\" width=\"640\" height=\"853\" src=\"https:\/\/coingape.com\/wp-content\/uploads\/2023\/12\/cropped-download-1-1-1.jpg\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"download (1)\" decoding=\"async\" srcset=\"https:\/\/coingape.com\/wp-content\/uploads\/2023\/12\/cropped-download-1-1-1.jpg 640w, https:\/\/coingape.com\/wp-content\/uploads\/2023\/12\/cropped-download-1-1-1-225x300.jpg 225w, https:\/\/coingape.com\/wp-content\/uploads\/2023\/12\/cropped-download-1-1-1-150x200.jpg 150w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><\/noscript><\/div>\n\n\n                \n\n<div class=\"Educontent\">Altcoins on Binance Which Could 1000X Anytime in Future <\/div>\n\n\n            <\/a>\n            <\/div>\n\n\n        <\/div>\n\n\n        <\/div>\n\n\n          \n          \n  \n     \n                              \n          <\/div>\n\n\n    \n          \n \n    \n            \n    <\/div>\n\n        --><\/p><\/div>\n<p><script async src=\"\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In a significant setback for Yearn Finance, a leading player in the decentralized finance (DeFi) sector, a script malfunction in its multisig (multi-signature) system led to a substantial loss of its treasury assets. The incident on December 11 resulted in the unintended swap of Yearn\u2019s treasury balance, amounting to a loss of approximately 63%. The [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":212177,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[188,183,185,186,187,184,189,150,182,190],"class_list":["post-212176","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology","tag-blockchain-tech","tag-blockchain-technology","tag-crypto-technology","tag-cryptocurrency-technology","tag-metaverse-technology","tag-nft-technology","tag-soul-bound-token","tag-tech","tag-technology","tag-token-technology"],"_links":{"self":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/212176","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/comments?post=212176"}],"version-history":[{"count":1,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/212176\/revisions"}],"predecessor-version":[{"id":212178,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/212176\/revisions\/212178"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media\/212177"}],"wp:attachment":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media?parent=212176"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/categories?post=212176"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/tags?post=212176"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}