Accidentally stepping on a DeFi lego
blog.trailofbits.com | blog | #web3 | #defi | #exploit | #blockchain | #yearn | #yvault | #price-manipulation | #balancer | #yearn-finance
Summary
yVault's launch let attackers manipulate the yUSDC price via its Balancer integration to drain funds; quick action by the developer saved about $400,000 but exposed DeFi composition risks.
- Published
- Collected
--- id: 1848 title: "Accidentally stepping on a DeFi lego" source_domain: blog.trailofbits.com source_url: "https://blog.trailofbits.com/2020/08/05/accidentally-stepping-on-a-defi-lego/" published_at: "2020-08-05T11:00:03Z" tags: ["web3", "defi", "exploit", "blockchain", "yearn", "yvault", "price-manipulation", "balancer", "yearn-finance"] phying_url: "https://phying.com/item/1848" lang: en --- # Accidentally stepping on a DeFi lego ## Summary yVault's launch let attackers manipulate the yUSDC price via its Balancer integration to drain funds; quick action by the developer saved about $400,000 but exposed DeFi composition risks. ## Intelligence Metadata - **Sources:** blog.trailofbits.com - **Published:** 2020-08-05T11:00:03Z - **Original:** https://blog.trailofbits.com/2020/08/05/accidentally-stepping-on-a-defi-lego/ - **Phying News:** https://phying.com/item/1848