SlowMist(@SlowMist_Team):🚨SlowMist TI Alert🚨 💸 Yapeswap Loss: ~$21.9k 🔍 Root Cause: WorkersUnion’s zero quorum let a proposal backed by ~0.000055% of voting power transfer YapeFactory’s `feeToSetter` role to the attacker. The attacker installed a Registry that returned fake vaults from `latestVault()` while `vaults()` still listed real ones. YapePair counted the diverted deposits as farming assets without receiving redeemable shares. 📌 Attacker: 0x6e523866424220b3cb2cab88ba2195cfa5636b12 (EOA) / 0x327bf6dfc38a79393f78866c705193c39b04be01 (contract) 📌 Victim: YapePair contracts (e.g. 0x23c1653e…, 0x670120d4…, 0x8e5b9d85…, 0xe3b43be5…, 0xec5ed926…, 0x0415af9f…) 📌 Vulnerable Contract: YapeFactory / YapePair / YapeWrapper (0x46adc1c052fafd590f56c42e379d7d16622835a2) Powered by https://t.co/Mz5jOnx997 Tx:

2026.10.25 09:36

🚨SlowMist TI Alert🚨 💸 Yapeswap Loss: ~$21.9k 🔍 Root Cause: WorkersUnion’s zero quorum let a proposal backed by ~0.000055% of voting power transfer YapeFactory’s `feeToSetter` role to the attacker. The attacker installed a Registry that returned fake vaults from `latestVault()` while `vaults()` still listed real ones. YapePair counted the diverted deposits as farming assets without receiving redeemable shares. 📌 Attacker: 0x6e523866424220b3cb2cab88ba2195cfa5636b12 (EOA) / 0x327bf6dfc38a79393f78866c705193c39b04be01 (contract) 📌 Victim: YapePair contracts (e.g. 0x23c1653e…, 0x670120d4…, 0x8e5b9d85…, 0xe3b43be5…, 0xec5ed926…, 0x0415af9f…) 📌 Vulnerable Contract: YapeFactory / YapePair / YapeWrapper (0x46adc1c052fafd590f56c42e379d7d16622835a2) Powered by Tx: