During Yala's deployment of its Solana Layer Zero OFT bridge, attackers compromised temporary deployment keys. They used this access to create unauthorized bridge contracts and establish a backdoor for later exploitation. Over a month later, the attacker deployed this infrastructure to mint 120M unauthorized $YU tokens and extract $7.64M in real value. Thai authorities arrested the attacker approximately 45 days after the exploit, and most funds were clawed back.

On September 14, the stablecoin protocol Yala disclosed that a recent security incident occurred when a hacker abused a temporary deployment key during the setup of an authorized cross-chain bridge. The attacker deployed an unauthorized bridge and extracted 7.64 million USDC (approximately 1,636 ETH). On October 29, the suspect involved in the case was arrested by law enforcement in Bangkok, Thailand, and most of the affected funds have been successfully recovered.