Yearn Finance V1 TUSD legacy vault exploited; ~$300K lost, 103 ETH on Dec 17, 2025
On December 17, 2025, security firm PeckShield reported an exploit against Yearn Finance V1's legacy TUSD vault, with losses of about $300,000. The attacker swapped the proceeds for 103 ETH held at address 0x0F21…4066 and allegedly used flash loans and price distortions on a misconfigured vault. A researcher linked the method to a similar 2023 Yearn vulnerability.