- YO-70Negative
GoPlus Security 🚦 (@GoPlusSecurity)
🚨 Major Incident Alert: YO Protocol @yield executed a large swap of ~$3.84M $stkGHO for $USDC. Due to a misconfiguration or operational error in an @Uniswap V4 liquidity pool, the swap experienced massive slippage, receiving only ~$112k USDC — a loss of ~$3.7M, captured by LPs of that pool. Loss tx: https://etherscan.io/tx/0x6aff59e800dc219ff0d1614b3dc512e7a07159197b2a6a26969a9ca25c3e33b4 Following the incident, the project's multi-sig repurchased ~$3.71M worth of $GHO via CoWSwap and redeemed/deposited an equivalent amount of $stkGHO back to the treasury. Recovery tx: https://etherscan.io/tx/0x50f62ffaea191b1355d5812be6007f0d673e6a473fefe38bd48b02128d267969 The team posted an on-chain message proposing that LPs keep 10% of the captured value as a bug bounty and return the rest collaboratively. On-chain msg tx: https://etherscan.io/tx/0x816cc2d41c3e85c0951d4f2f940a95f820d69cdbcf800262b8991d4ea159e105 🔒 Security Recommendations: For traders: Use slippage protection, price limits, MEV protection, and pool whitelisting when swapping large amounts. For Uniswap v4 participants: Assess Hook and liquidity risks to prevent "slippage bombs."