What happened
On January 13, 2026, YO’s vault operation exchanged roughly $3.84 million of stkGHO for only about $122,000 of USDC, producing an estimated $3.7 million loss. Contemporary reporting characterized this as an unintended high-slippage swap rather than a smart-contract exploit.
Case & protocol details
Classification
Yield Aggregator
Protocol Type
Exploit/Other
Official Website
www.yo.xyz/
Protocol Twitter/X
@yield
Attack Timeline
The vault executed a large stkGHO-to-USDC swap through a route that delivered drastically less USDC than the input value. YO described the event as an unintended swap and said its treasury would cover the shortfall.
Evidence & learning
Sources and on-chain records
- report Report x.com
- report Report phemex.com
- analysis The Defiant: YO unintended stablecoin swap thedefiant.io
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.