---
id: 1848
title: "Accidentally stepping on a DeFi lego"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2020/08/05/accidentally-stepping-on-a-defi-lego/"
published_at: "2020-08-05T11:00:03Z"
tags: ["web3", "defi", "exploit", "blockchain", "yearn", "yvault", "price-manipulation", "balancer", "yearn-finance"]
phying_url: "https://phying.com/item/1848"
lang: en
---

# Accidentally stepping on a DeFi lego

## Summary

yVault's launch let attackers manipulate the yUSDC price via its Balancer integration to drain funds; quick action by the developer saved about $400,000 but exposed DeFi composition risks.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2020-08-05T11:00:03Z
- **Original:** https://blog.trailofbits.com/2020/08/05/accidentally-stepping-on-a-defi-lego/
- **Phying News:** https://phying.com/item/1848