Leaderboard
256All-time rank
Yala logo

Yala

Sep 14, 2025

$7.6M
Lost
$7.6M
Recovered
$0
Net loss
$7.6M
Unrecovered0% recovered

During Yala's deployment of its Solana Layer Zero OFT bridge, attackers compromised temporary deployment keys. They used this access to create unauthorized bridge contracts and establish a backdoor for later exploitation.

64M in real value. Thai authorities arrested the attacker approximately 45 days after the exploit, and most funds were clawed back.

Target
DeFi
Classification
Key Compromise
Technique
Deployer Key Compromised
Attribution
Unknown
Chains
SolanaEthereum

Event timeline

  1. Sep 14, 2025
    Exploit executed — $7.6M drained via deployer key compromised
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents