Yala Reports $7.64 Million USDC Theft via Unauthorized Cross-Chain Bridge

Yala’s official statement outlines $5.5M liquidity injection and near-complete recovery of the YU stablecoin peg, with full recovery strategy to be disclosed by December 15, 2025.

USDC

Summary

Yala issued an official statement on November 18 detailing recovery efforts after a September 14 hack that caused a $7.64 million USDC loss and depeg of the YU stablecoin. The attack, via an unauthorized cross-chain bridge, prompted Yala to inject $5.5 million to restore the peg. Most stolen funds have since been recovered, aided by the October 29 arrest of the suspected hacker in Bangkok. Yala plans to share a full recovery and operations strategy by December 15, 2025.

Terms & Concepts
  • USDC: A U.S. dollar-pegged stablecoin issued by Circle, used widely in crypto transactions.
  • Cross-chain bridge: A blockchain protocol that enables transfer of assets or data between different blockchain networks.
  • Depeg: A situation in which a stablecoin's value temporarily deviates from its intended fixed exchange rate.