Preview surface — demo data. Where real data exists today (e.g. RealT, BlackRock BUIDL, Lift Dollar) we render it; everywhere else we render synthetic enrichment generated deterministically from public signal and clearly marked Demo or Inferred. The Phase 3 roadmap replaces every synthetic source with live ingestion — see Methodology → Exposure Graph & Similarity Engine.
← back to incident ledger

reentrancyDemo

Jun 20, 2024 · $25.3M · protocol

Narrative

On 2024-06-20, Yearn Finance suffered a reentrancy incident resulting in approximately $25,280,753 in losses. The exploit targeted the protocol layer. Attribution: internal. This is a demonstration entry — not a real incident.

Classification

Root cause
reentrancy
Secondary causes
Attack layer
protocol
Strategy
tech_vuln
Actor role
target
Attribution
internal
Attacker address
0x9d86e93e705fc721ae8d88c3fa27ab24c4532b70
Flash loan
no
Audited at time
no
Bounty at time
yes

AADAPT mappings

DEMO:AADAPT.TA0004DEMO:AADAPT.TA0040DEMO:AADAPT.T1190

Evidence

Disclosure date
Jun 22, 2024
Funds recovered
Audit firms at time
Post-mortem URLs (synthetic)
  • https://medium.com/yearn-finance/post-mortem-yearn-finance-2024-06-20
  • https://rekt.news/yearn-finance-rekt
tx hashes (2)
  • 0x296a8c62030ddb1a281ee39473ae31945a84a75397490e6b8ca13e97d0d9b79d
  • 0x578d5c93eec8c55af5163a8c0bd59d0b27b3be1eedf17d59d2ddca90496ae9c9