Hack history / 2026 / Hack or exploit
YO Protocol
Hack or exploit on Jan 13, 2026 · Missing Slippage Check
ONE SOURCE · 1 SOURCE
Lost
$3.6M
dollars at the time
Returned
none listed
as the sources state it
Rank
#538
among thefts by dollars lost
What happened
YO Protocol's Automated Harvesting System executed a rebalance with a misconfigured slippage tolerance of 17,872,058 (disabling protection). The order routed through high-fee Uniswap v4 pools (85-88%), returning only 112,036 USDC for 3,840,651 stkGHO, costing ~97% of vault stkGHO. YO's multisig bought the position back the same day.
Details
- Date
- Jan 13, 2026
- Kind
- Hack or exploit
- Method
- Missing Slippage Check
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
Reported by
Cite this page
SwanBluechip, "YO Protocol hack, Jan 13, 2026: $3.6M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht06399ba748/ (data as of 2026-11-01).