BTC 
ETH 
BNB 
XRP 
SOL 
TRX SlowMist reports ~$21.9k Yapeswap loss via WorkersUnion zero quorum exploit
SlowMist reported that Yapeswap lost approximately $21.9k after WorkersUnion's zero quorum allowed a proposal backed by ~0.000055% of voting power to transfer YapeFactory's feeToSetter role to an attacker. According to the post, the attacker installed a Registry returning fake vaults from latestVault() while vaults() still listed real ones, and YapePair counted diverted deposits as farming assets without receiving redeemable shares. The post names YapeFactory, YapePair and YapeWrapper as vulnerable contracts and lists attacker and victim addresses.
Why “Unverified”
- Reported by SlowMist alone, with no second source or primary confirmation yet
1 independent source group across 1 post · evidence score 72/100. How labels work
What the sources claim
-
SlowMist reports Yapeswap lost roughly $21.9k.
“Yapeswap Loss: ~$21.9k”
SlowMist -
WorkersUnion's zero quorum let a proposal backed by ~0.000055% of voting power transfer YapeFactory's feeToSetter role to the attacker.
“WorkersUnion’s zero quorum let a proposal backed by ~0.000055% of voting power transfer YapeFactory’s `feeToSetter` role to the attacker”
SlowMist -
The attacker installed a Registry that returned fake vaults from latestVault() while vaults() still listed real ones.
“The attacker installed a Registry that returned fake vaults from `latestVault()` while `vaults()` still listed real ones”
SlowMist -
YapePair counted diverted deposits as farming assets without receiving redeemable shares.
“YapePair counted the diverted deposits as farming assets without receiving redeemable shares”
SlowMist -
YapeFactory, YapePair and YapeWrapper are identified as vulnerable contracts.
“Vulnerable Contract: YapeFactory / YapePair / YapeWrapper”
SlowMist
Sources
- 🚨SlowMist TI Alert🚨 → slowmist.ai
More in Hacks & Security
Summary and claims extracted by AI with prompt analyze-story@5 on 2026-10-26 00:00 UTC. Labels are computed from the sources, not by the model.