PANews|9月 02, 2026 06:07
[Yam Finance Faces Malicious Governance Takeover Attack, Approximately $337,000 in Assets at Risk]
According to monitoring by Defimon Alerts, the Yam Finance protocol has suffered a malicious governance takeover attack. The attacker self-delegated approximately 504,000 YAM tokens (accounting for about 3.3% of the total supply, slightly exceeding the quorum) and submitted Proposal #45 to YamGovernorAlpha. The proposal is described as empty ("0x") with a single operation to call the YAM Timelock's setPendingAdmin(attacker). If the proposal is passed and executed, the attacker will become the pendingAdmin and can accept administrative privileges, thereby gaining full control over the Timelock — which serves as the administrator for all YAM protocol contracts and the DAO treasury. Currently, approximately $337,000 in assets are at risk.
Share To
Timeline
HotFlash
APP
X
Telegram
CopyLink