shield Business Logic Flaw · $181K loss

Yield Hack: How $181K Was Lost in a Business Logic Flaw (2024)

On April 2024, Yield was exploited in a business logic flaw, resulting in approximately $181K in losses. That makes the Yield exploit the 171st largest DeFi incident out of 690 documented in our archive.

Attack Mechanics: How the Yield Business Logic Flaw Played Out

Exploit Class Applied to Yield

The Yield incident on April 30, 2024 is classified as a Business Logic Flaw. A business-logic bug in the contract — such as an incorrect formula or missing state update — lets the attacker withdraw more than their share. In the full archive, Yield is 1 of 144 documented business logic flaw incidents.

Yield in Context

At $181K, the Yield exploit is a minor (<$1M) event compared to the largest same-class incident in our archive — – EulerFinance (2023) at $200M.

Prior Business Logic Flaw Before Yield

The nearest business logic flaw incident before Yield was XBridge, 6 days earlier on April 24, 2024. The same exploit class surfaced again within the business logic flaw attack surface.

Impact & Recovery for Yield

Yield Loss Figure

The Yield exploit caused $181,000 in losses — a minor (<$1M) incident and the 48th largest of 188 documented in 2024.

Where Yield Sits Among Business Logic Flaw Attacks

Ranked by loss size, Yield is the 33rd largest of 144 business logic flaw incidents documented. That puts the Yield loss below the class average of $6.08M.

Timeline Since the Yield Incident

The Yield exploit occurred 2 years ago (714 days). The contract, its fork-block, and the attack transaction remain on-chain and forensically reproducible.

Primary Reference for Yield

Public post-mortem / on-chain analysis for the Yield incident: view source.

FAQ

How much did Yield lose?

The Yield exploit in April 2024 resulted in $181,000 in losses — the 48th largest of 188 DeFi incidents that year.

When did the Yield hack happen?

The Yield exploit was recorded on April 30, 2024 — 714 days ago.

What type of exploit hit Yield?

The Yield incident is classified as a Business Logic Flaw. A business-logic bug in the contract — such as an incorrect formula or missing state update — lets the attacker withdraw more than their share.

How common is the Business Logic Flaw pattern seen at Yield?

Our archive contains 144 documented business logic flaw incidents. The Yield incident is one of them.

How does Yield compare to the largest Business Logic Flaw attack?

The largest business logic flaw incident in our archive is – EulerFinance (2023) at $200M. The Yield loss is $181K.

What are the key levels blockchain technology improved in the auditing sector according to a study conducted in Egyptian banks?

Saving time, improving efficiency, setting up continuous audit processes, and developing new advisory services.

How does blockchain technology contribute to data security in remote healthcare monitoring?

By providing a tamper-proof, decentralized ledger for recording and verifying transactions securely.