- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Project or site name: Yapeswap
- Incident date: 2026-10-25
- Reported: 2026-10-25
- Last updated: 2026-10-25
SlowMist reported on X on 2026-10-25 (4:36 AM CT) that Yapeswap lost about $21.9k in a governance attack on Ethereum. Per SlowMist, WorkersUnion's zero quorum let a proposal backed by about 0.000055% of voting power transfer YapeFactory's feeToSetter role to the attacker. The attacker then installed a Registry that returned fake vaults from latestVault() while vaults() still listed the real ones, so YapePair contracts counted diverted deposits as farming assets without receiving redeemable shares. SlowMist lists YapeFactory / YapePair / YapeWrapper (0x46adc1…35a2) as the vulnerable contracts.…
Other addresses in this report: 0x6e523866424220b3cb2cab88ba2195cfa5636b12, 0x327bf6dfc38a79393f78866c705193c39b04be01