In April 2024, an attacker drained $181,000 from Yield Protocol on Arbitrum by exploiting a logic error in pool token accounting. Using flash-loaned assets, the attacker created a discrepancy between actual token balance and recorded total supply, then withdrew excess tokens.

A hacker stole approximately $181,000 worth of crypto assets from Yield’s strategic contracts present on the Arbitrum blockchain. The hacker exploited a discrepancy between the pool token balance and total supply with flash-loaned assets and then withdrew extra pool tokens.