- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Reported: 2026-04-27
- Last updated: 2026-04-27
DeFi Exploit: Yearn - Rekt III Date: 11/30/2025 Loss: $9,000,000 USD Tags: Yearn, Unchecked Arithmetic Underflow, Legacy Code Summary: A forgotten yETH pool led to Yearn’s 3rd exploit since 2021. Attacker minted to infinity and drained $9 million in one transaction. Legacy code nobody maintained became a legacy problem somebody else took advantage of. Exploit/attacker addresses extracted from on-chain analysis and incident reports. Reference: https://rekt.news/yearn-rekt3 Source: https://de.fi/rekt-database
Other addresses in this report: 0xa80d3f2022f6bfd0b260bf16d72cad025440c822, 0xb8e0a4758df2954063ca4ba3d094f2d6eda9b993, 0x3e8e7533dcf69c698cf806c3db22f7f10b9b0b97, 0xfb63aa935cf0a003335dce9cca03c4f9c0fa4779, 0xbb2789b418fa18f9526ba79fa7038d4e6d753f73