YU Bitcoin-Backed Stablecoin Depegs After Cross-Chain Exploit, $7.7 Million Drained
Yala paused core functions after the breach, claiming Bitcoin collateral remains intact.
Overview
- YU fell as low as $0.2046 during the attack and later traded well below its $1 target, with recent quotes around $0.78–$0.79.
- The attacker minted about 120 million unauthorized YU on Polygon, bridged a portion, and sold 7.71 million for roughly $7.7 million in USDC.
- Proceeds were converted to 1,501 ETH and dispersed across wallets, while the attacker still holds large YU balances across Polygon, Ethereum, and Solana.
- Yala disabled its Convert and Bridge features and engaged security firms SlowMist and Fuzzland to investigate the incident.
- Liquidity remains thin and some exchanges, including Bybit and OKX, temporarily halted YU deposits and withdrawals, complicating efforts to restore the peg.