搜索
全部
文章
快讯
专题
活动
专栏作者
文章
查看更多
快讯
Planet Morning News
1. Strategy purchased another 10,624 bitcoins between December 1st and December 7th; 2. BMNR announced total assets of $13.2 billion, and purchased 138,452 ETH last week, bringing its ETH holdings to over 3.86 million. 3. US Senator Moreno: Crypto legislation negotiations were "quite frustrating," and disagreements remain regarding the division of regulatory responsibilities across agencies; 4. Trump announced that Nvidia will be allowed to sell H200 chips to China, with a 25% cut of the export revenue. 5. CZ responds to Binance employee misconduct incident: Someone has reported it to the police, and he urges the community to report it through official channels; 6. MicroStrategy CEO: The company will hold Bitcoin until at least 2065, maintaining a long-term accumulation strategy; 7. The U.S. CFTC launched a pilot program for digital asset collateral, allowing Bitcoin, Ethereum, and USDC to be used as margin in the derivatives market; 8. The UK's FCA is seeking input from the crypto industry, proposing reforms to investment rules and strengthening risk management; 9. Paradigm founder: Polymarket had a data bug where transaction volumes were counted repeatedly in most publicly available data. 10. MetaMask launched mobile perpetual contract trading, supporting multiple assets including US stocks, and powered by Hyperliquid. 11. Robinhood expands its crypto product line with the launch of futures, staking, and tokenized stocks, and announces its Layer-2 scaling network; 12. Tether USDT is recognized as an accepted fiat reference token on ADGM and can be used on multiple major blockchains; 13. The SEC concludes its two-year investigation into Ondo Finance, paving the way for its expansion in the U.S. tokenized asset space; 14. The Canada Revenue Agency says 40% of crypto users are at risk of tax evasion and has asked platforms to disclose user data; 15. The Central Bank of Argentina is considering allowing traditional banks to trade cryptocurrencies; 16. Michael Saylor calls on countries to build Bitcoin-backed digital banking systems: which could attract trillions of dollars in inflows. 17. Trump: A "single rule" executive order on AI will be issued this week; 18. A US judge requested clarification on Do Kwon's potential sentence in South Korea and considered legal risks in multiple countries before sentencing. 19. Yearn Finance details $9 million yETH vulnerability attack, confirms partial asset recovery and announces remediation plan; 20. Ripple executive: XRP needs to learn from Solana's execution speed and strategy in order to maintain its lead in the L1 competition; 21. Hyperliquid Strategies Inc. announced a $30 million stock buyback program; 22. CBB: XPL may be the industry's last "easy money" opportunity; the market is currently over-leveraged. 23. Opinion: There are significant risks associated with ordinary employees having access to official social media accounts; appropriate oversight methods should be used. 24. Viewpoint: Predicts the market will experience "extreme information asymmetry and obvious arbitrage opportunities"; 25. Jupiter Founder: Jupiter will focus on simplifying, streamlining, and synergizing all its operations; 26. Robotics project Generative Bionics completes $80 million funding round, with Tether and others participating.
Yearn Finance details $9 million yETH vulnerability attack, confirms partial asset recovery, and announces remediation plan.
Odaily Planet Daily reports that Yearn Finance has released a detailed post-incident report on last week's yETH vulnerability attack, pointing out a three-phase numerical error in its legacy stableswap liquidity pool. This error allowed attackers to "mint" LP tokens indefinitely and steal approximately $9 million in assets from the liquidity pool. Yearn has confirmed that, with the assistance of the Plume and Dinero teams, they have successfully recovered 857.49 pxETH, approximately one-quarter of the stolen assets. The team plans to distribute the recovered funds proportionally to yETH depositors. The decentralized finance protocol stated that the vulnerability occurred in block 23,914,086 on November 30, 2025. The attacker, through a complex sequence of operations, forced the internal resolver of the liquidity pool into a divergent state, ultimately triggering an arithmetic underflow. The attack targeted a custom stableswap pool aggregating multiple liquidity staking tokens (LSTs), as well as a yETH/WETH Curve pool. Yearn emphasized that its v2 and v3 vaults and other products were unaffected. To address these issues, Yearn released a fix plan that includes implementing explicit domain checks on the resolver, replacing unsafe arithmetic in critical sections with checked arithmetic, and disabling bootstrapping logic after the pool comes online.
SlowMist: The root cause of the attack on Yearn was the insecure mathematical operations in the Yearn yETH pool contract.
According to SlowMist, the decentralized finance protocol yearn suffered a hacker attack on December 1st, resulting in a loss of approximately $9 million. The SlowMist security team analyzed the incident and confirmed the root cause as follows: The vulnerability originates from the `_calc_supply` function logic used to calculate the supply in the Yearn yETH Weighted Stableswap Pool contract. Due to insecure mathematical operations, this function allows for overflow and rounding errors during calculation, leading to a significant deviation in the calculation of the product of the new supply and the virtual balance. Attackers can exploit this flaw to manipulate liquidity to a specific value and over-mint liquidity pool (LP) tokens, thereby illegally profiting. It is recommended to strengthen boundary scenario testing and adopt a securely verified arithmetic operation mechanism to prevent high-risk vulnerabilities such as overflows in similar protocols. Previously, Yearn issued a statement saying that its yETH stable pool was attacked at 21:11 UTC on November 30. The attacker minted a large amount of yETH through a custom contract, resulting in the loss of approximately $8 million in assets in the pool. Another $900,000 in losses came from the yETH-WETH pool on Curve.
Planet Morning News
1. Strategy establishes a $1.44 billion dividend reserve fund for payouts; 2. Peter Schiff comments on Strategy's launch of a dividend reserve fund: Today marks the beginning of MSTR's doom; 3. Solana announced a partnership with Kalshi to fully tokenize all Kalshi prediction markets; 4. Vanguard will open trading in funds related to crypto assets such as Bitcoin, Solana, and XRP; 5. Strategy: If the price of BTC is between $85,000 and $110,000 by the end of the year, the company's revenue will range from -$7 billion to $9.5 billion. 6. BitMine: Increased its holdings by 96,798 ETH last week, bringing its total holdings to 3,726,499 ETH; 7. The Federal Reserve and the FDIC will push forward with the implementation of the GENIUS Act, and the first batch of regulatory rules for stablecoin issuers is expected to be released in December; 8. Kalshi is seeking to block state regulatory enforcement after Nevada lost its injunction protection, and will appeal during this process; 9. GiggleFund: Binance has completed the first batch of GIGGLE transaction fee donations and burning; 10. EU law enforcement agencies shut down Cryptomixer, a cryptocurrency mixing service platform; 11. The ASTER team has initiated Phase 4 of the buyback program ahead of schedule, with the start date adjusted to December 2nd; 12. Beijing Business Today: Industry insiders believe that clearly defining stablecoins will provide a logical premise for their inclusion in regulatory systems such as anti-money laundering. 13. Arthur Hayes: If Tether holds illiquid assets, it could raise concerns about over-collateralization should an unexpected event occur. 14. On-chain yield platform Altura completes $4 million funding round, led by Ascension; 15. In November, Kalshi and Polymarket's combined transaction volume approached $10 billion; 16. PeckShield: yearn recovers $2.4 million by destroying hackers' pxETH; 17. Polymarket CEO: Cryptocurrency-based prediction markets are currently the most accurate predictors that humans possess; 18. Gleec acquired Komodo's cross-chain DeFi business for $23.5 million; 19. Europol: Germany and Switzerland cooperate across borders to seize Cryptomixer encryption device; 20. Japanese listed company Remixpoint announced the cancellation of its 1.2 billion yen investment in Web3-related businesses; 21. Analysis: Internal strife within the Federal Reserve could erode asset pricing, and interest rate cuts may become a possible path to compromise; 22. Bernstein: Despite the weak market performance, the fundamentals of cryptocurrency companies remain strong; 23. Sources say Trump trusts Hassett and the two are aligned in their desire to push for aggressive interest rate cuts.
PeckShield: yearn recovers $2.4 million by destroying hacker's pxETH
According to Odaily Planet Daily, PeckShield published an article on the X platform stating that yearn recovered $2.4 million by destroying the hacker's pxETH and minted the same amount of tokens on Redacted Cartel multisignature.
Planet Midday News
1. The “10.11” liquidation event and macroeconomic headwinds are putting pressure on the crypto market, which is in a phase of “initial stabilization but no reversal”; 2. Brother Machi's long positions have been liquidated multiple times, resulting in a loss of nearly $2 million today, leaving his account with a net value of only $228,000. 3. Multicoin co-founder: The only way to achieve effective price discovery is to unlock 100% of the tokens on the first day of listing; 4. Wintermute founder denies shorting MON: In fact, we are long; 5. Crypto market trading volume fell to its lowest level in six months in November, with both CEX and DEX volumes declining sharply; 6. Yearn: The yETH pool suffered a sophisticated attack, resulting in a loss of approximately $8.9 million; 7. The most common attack method used by the North Korean hacking group Lazarus over the past year has been targeted phishing. 8. Bitcoin spot ETFs saw a net inflow of $70.05 million last week, reversing four consecutive weeks of net outflows; 9. The Ethereum spot ETF saw a net inflow of $313 million last week, turning into a net inflow after three consecutive weeks of net outflows.
Yearn: yETH pool suffers sophisticated attack, losing approximately $8.9 million.
Odaily Planet Daily reports that Yearn issued a statement saying its yETH stablecoin pool was attacked at 21:11 UTC on November 30th. The attacker minted a large amount of yETH through a custom contract, resulting in a loss of approximately $8 million in assets within the pool. An additional $900,000 in losses came from the yETH-WETH pool on Curve. Yearn stated that the affected code is unrelated to other products, and V2/V3 Vaults were unaffected. The company also noted that the complexity of the incident is similar to the previous attack on Balancer. The team has joined forces with SEAL911 and the auditing firm ChainSecurity to conduct an investigation.
Planet Morning News
1. Michael Saylor has released another Bitcoin Tracker update, and may disclose his increased BTC holdings next week; 2. Trump: The nominee for Federal Reserve Chair has been decided; 3. Justin Sun: He has retrieved his WeChat account; 4. In the past hour, approximately $330 million in positions were liquidated across the entire network, with the largest single liquidation order amounting to $14.48 million; 5. "Brother Machi's" ETH long positions were liquidated, turning from profit to loss within the week; 6. Bitcoin fell back after encountering resistance at 92,000 USDT, with market trading volume at its lowest level since July; 7. Tether CEO: S&P's attack on Tether may be intentional; currently, holding US Treasury bonds generates approximately $500 million in monthly income. 8. Yearn's yETH appears to have been attacked, with $3 million worth of ETH flowing into Tornado Cash; 9. Beijing Business Today: The People's Bank of China defines stablecoins for the first time; industry analysts believe this will not affect Hong Kong's stablecoin strategy. 10. Crypto KOL: Sahara's plunge last night was due to the liquidation of a market maker; 11. Goldman Sachs: A rate cut by the Federal Reserve at its upcoming December meeting is virtually a done deal.
Yearn's yETH appears to have been attacked, with $3 million worth of ETH flowing into Tornado Cash.
Odaily Planet Daily reports that Yearn Finance's yETH product appears to have been attacked today. Attackers exploited a vulnerability that allowed for the "unlimited minting" of yETH, rapidly draining the entire yETH pool in a single transaction. According to on-chain data, approximately 1,000 ETH (about $3 million) were subsequently transferred to Tornado Cash. The attack appears to have been carried out through multiple newly deployed contracts, some of which self-destructed immediately after the transaction. The extent to which the approximately $11 million in the original yETH pool was affected remains uncertain. The incident was initially discovered by X user Togbe while monitoring large transactions. Yearn officials stated they are investigating the matter and emphasized that their V2 and V3 Vaults were not affected. The situation is still developing.
Aave founder: Immutable oracles and interest rate mechanisms may trigger systemic risks; conflicts of interest among asset managers exacerbate industry risks.
According to Odaily Planet Daily, Schlag, a member of the yearn community, posted on the X platform that Stream's losses were due to high leverage, directional trading, and a lack of transparency in fund usage. He emphasized that DeFi projects should focus on standardization and information disclosure, and that vault operations should not only pursue returns but also strengthen risk management. In response, Aave founder Stani.eth retweeted and commented that the immutable oracle price feed and interest rate curve mechanisms mentioned in the article are "highly alarming," and that this combination of designs could potentially be disastrous for lending protocols. He pointed out that some asset managers, in pursuit of competitive advantage, have taken on excessive risk, further amplifying the industry's hidden dangers. Stani stated that building a secure and robust DeFi system is inherently challenging, currently not only because investors lack sufficient due diligence, but also because of insufficient risk awareness at the protocol integration level. He called on the industry to work together to improve transparency and prudent management, and jointly build a safer and more sustainable decentralized finance ecosystem.
查看更多






