Gate News message, April 6, on-chain investigator @tayvano_ posted and disclosed that North Korean IT workers had participated in building multiple well-known crypto protocols, with projects that can be traced back to the DeFi Summer era, including SushiSwap, THORChain, Harmony, Ankr, Shib, and Yearn. @tayvano_ also added that the “7 years of blockchain development experience” marked on these North Korean IT workers’ resumes is not false.

Curve DAO has rejected the proposal to allocate 17.4 million CRV tokens to Swiss Stake AG due to community concerns over centralization and governance over-reliance on a small group. Voting data shows that the opposition mainly comes from addresses associated with Yearn Finance and Convex Finance.

According to Gate News Bot on December 9, citing CoinMarketCap data, as of press time, PLUME (Plume) is currently trading at $0.02, up 8.07% in the past 24 hours, reaching a high of $0.02 and a low of $0.02. Its current market capitalization is approximately $68.8 million, an increase of $5.14 million compared to yesterday. Plume is a public blockchain focused on the expansion of real-world assets (RWA), dedicated to transforming real assets into crypto-native global financial instruments. The platform has more than 200 ecosystem partners and an asset pipeline of $5 billion, covering diverse assets such as solar farms, Medicaid receivables, and mining rights. Plume has built a complete RWA ecosystem, including the Plume Chain mainnet, Arc cross-chain bridge, pUSD ecosystem stablecoin, p

Odaily Planet Daily news: Yearn Finance has released a detailed post-mortem report on last week's yETH vulnerability attack, revealing that a three-stage numerical error existed in its legacy stableswap liquidity pool. This error allowed attackers to "mint unlimited" LP tokens and steal approximately $9 million worth of assets from the pool. Yearn confirmed that, with the assistance of the Plume and Dinero teams, it successfully recovered 857.49 pxETH, accounting for about a quarter of the stolen assets. The team plans to distribute the recovered funds proportionally to yETH depositors. The decentralized finance protocol stated that the vulnerability attack occurred at block 23,914,086 on November 30, 2025, during which the attacker used a complex sequence of operations to force the internal parser of the liquidity pool...

PANews, December 8—According to discussions on platform X, several developers believe that although the yETH attack was attributed to fuzzing, the actual attack path was complex and may have involved gradually amplifying the exploit after discovering the initial vulnerability. Curve founder Michael

According to Jinse Finance, monitored by SlowMist, on December 1, the decentralized finance protocol Yearn suffered a hacker attack, resulting in a loss of approximately $9 million. The SlowMist security team analyzed the incident and confirmed the root cause as follows: The vulnerability originated from the calcsupply function logic used to calculate supply in the Yearn yETH Weighted Stableswap Pool contract. Due to unsafe mathematical operations, the function allowed overflow and rounding errors during computation, resulting in a significant deviation in the product calculation between the new supply and the virtual balance. Attackers exploited this flaw to manipulate liquidity to specific values and excessively mint liquidity pool (LP) tokens, thereby profiting illegally. It is recommended to enhance boundary scenario testing and adopt securely verified arithmetic mechanisms to prevent similar protocol vulnerabilities.

Golden Finance reported that PeckShield posted on the X platform, stating that yearn recovered $2.4 million by destroying the hacker's pxETH and minted the same amount of tokens on the RedactedCartel multisignature.

PANews, December 1st news, Yearn tweeted that the recent yETH-related attack did not affect the yCRV product.

PANews, December 1st news, according to PeckShieldAlert disclosed on X platform, Yearn Finance was attacked, and the hacker exhausted the fund pool through infinite minting of yETH, resulting in a loss of about 9 million USD. About 1,000 ETH (approximately 3 million USD) were transferred to Tornado Cash, and the attacker's Address still holds encryption assets worth approximately 6 million USD.