Hack history / 2023 / Hack or exploit
Yearn Finance
Hack or exploit on Apr 13, 2023 · Oracle Misconfiguration
ATTACK TX CONFIRMED ON CHAININ REVIEWSOURCES AGREE ON DATE AND LOSS · 5 SOURCES
Lost
$11.6M
sources: $10M to $11.6M
Returned
none listed
as the sources state it
Rank
#275
among thefts by dollars lost
What happened
On April 13, 2023, Yearn Finance's yUSDT vault was exploited through a misconfigured oracle reference pointing to Fulcrum's USDC contract instead of USDT. Attacker exploited the incorrect contract pointer to manipulate share prices, minting 1.2 quadrillion yUSDT by depositing only 10,000 USDT, then selling for $11.54 million.
In review: possible duplicate within one source.
Details
- Date
- Apr 13, 2023
- Kind
- Hack or exploit
- Method
- Oracle Misconfiguration
- How in
- Price, oracle and governance
- Target
- DeFi protocol
- Chains
- Ethereum
- Audit (rekt.news)
- unaudited
Related incidents
Yearn Finance 2025 · Hack or exploit · $300K
Yearn Ether 2025 · Hack or exploit · $9M
Yearn Finance accidentally swaps its entire Ip-yCRVv2 treasury, asks nicely for the money back 2023 · Hack or exploit · $1.5M
Yearn Finance 2023 · Hack or exploit · $1.4M
Yearn Finance 2021 · Hack or exploit · $11M
Yearn Ether 2025 · Hack or exploit · $9M
Yearn Finance accidentally swaps its entire Ip-yCRVv2 treasury, asks nicely for the money back 2023 · Hack or exploit · $1.5M
Yearn Finance 2023 · Hack or exploit · $1.4M
Yearn Finance 2021 · Hack or exploit · $11M
Cite this page
SwanBluechip, "Yearn Finance hack, Apr 13, 2023: $11.6M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htcfb3d79489/ (data as of 2026-10-31).