SlowMist: Yapeswap loses approximately $21,900 in an attack; attacker seizes critical permissions with extremely low voting power
According to SlowMist monitoring, Yapeswap was attacked, resulting in losses of approximately $21,900. The incident stemmed from the WorkersUnion governance mechanism having a quorum requirement of zero. As a result, a proposal supported by only approximately 0.000055% of the voting power transferred the feeToSetter permission of YapeFactory to the attacker. The attacker then deployed a malicious Registry contract that caused latestVault() to return a fake vault address, while vaults() continued to list the real vault. YapePair counted the transferred deposits as farm assets but received no redeemable shares, ultimately resulting in a loss of funds. The incident involved contracts including YapeFactory, YapePair, and YapeWrapper.
According to SlowMist monitoring, Yapeswap was attacked, resulting in losses of approximately $21,900. The incident stemmed from the WorkersUnion governance mechanism having a quorum requirement of zero. As a result, a proposal supported by only approximately 0.000055% of the voting power transferred the feeToSetter permission of YapeFactory to the attacker. The attacker then deployed a malicious Registry contract that caused latestVault() to return a fake vault address, while vaults() continued to list the real vault. YapePair counted the transferred deposits as farm assets but received no redeemable shares, ultimately resulting in a loss of funds. The incident involved contracts including YapeFactory, YapePair, and YapeWrapper.