Dead DeFi Protocol Yield Leaks Crypto Funds in Hacked Pool

Hackers reportedly stole around $181,000 in cryptocurrency from DeFi lending platform Yield Protocol via an exploit targeting its smart contracts on the Arbitrum blockchain. Despite the platform's shutdown in December 2023 due to challenges and regulatory pressure, the attack occurred, revealing a discrepancy between pool token balance and total supply that the attacker exploited.

Hackers Exploit Yield Protocol Smart Contracts for Cryptocurrency Theft

Washington, D.C. - Hackers have successfully exploited smart contracts from the now-defunct decentralized finance (DeFi) lending platform Yield Protocol, resulting in the theft of approximately $181,000 worth of cryptocurrency assets.

The incident, which was initially reported by blockchain investigation firm PeckShield and later confirmed by cybersecurity company CertiK, occurred on the Arbitrum blockchain. PeckShield noticed suspicious activity and alerted Yield Protocol, which had closed down its operations in December 2023 due to market demand challenges and regulatory pressures.

CertiK's investigation revealed that the attacker took advantage of a discrepancy between the pool token balance and total supply using flash-loaned assets, thereby enabling the withdrawal of additional pool tokens. The exact mechanism of the exploit and the identity of the attacker remain under investigation.

According to experts, the hack occurred despite Yield Protocol's repeated warnings to investors to close their positions, withdraw funds, and settle outstanding loans before its closure. However, the lack of official support for the protocol since February 2, 2024, has diminished the likelihood of recovering the stolen funds.

In March 2023, Yield Protocol was one of several DeFi protocols that suffered losses due to an attack on the Euler Finance lending platform. The protocol subsequently collaborated with Euler to restore funds and recover from the incident by deploying new contracts and executing permissioned calls.

As the DeFi ecosystem continues to evolve, the importance of robust security measures to prevent unauthorized access and protect user assets cannot be overstated. Industry experts recommend that users exercise caution when interacting with DeFi protocols and closely monitor their accounts for any suspicious activity.

About Yield Protocol

Yield Protocol was a decentralized lending platform that allowed users to borrow and lend crypto assets without the need for intermediaries. It was launched in 2021 and gained popularity among DeFi users due to its innovative yield farming strategies. However, the platform encountered challenges related to business demand and regulatory compliance, leading to its closure in December 2023.

About PeckShield

PeckShield is a leading blockchain investigation firm that provides security audits, real-time monitoring, and incident response services to the DeFi community. The company has a proven track record of identifying and reporting vulnerabilities in DeFi protocols, helping to enhance the security of the ecosystem.

About CertiK

CertiK is a global leader in blockchain security, providing formal verification and security audits for blockchain protocols and smart contracts. The company's mission is to secure the Web3 ecosystem and protect digital assets by ensuring the reliability and integrity of blockchain-based applications.