Yala’s Bitcoin-collateralized stablecoin, YU, has failed to return to its intended $1 peg after what the protocol described as an “attempted attack” on Sunday. The disruption caused the token to plummet to $0.2046, sparking concern among investors and raising fresh questions about the resilience of emerging stablecoin projects.
In a statement posted on X, the Yala team confirmed the incident but stressed that user funds remain safe. According to the project, Bitcoin deposits within the system are still self-custodial or held securely in vaults, with no reported losses of collateral. Yala added that it has partnered with blockchain security firm SlowMist and other investigators to determine the root cause of the exploit.
As a precautionary measure, Yala temporarily disabled its Convert and Bridge functions to contain volatility, though other parts of the protocol continue to operate normally. The team advised users not to engage with these paused features until further notice, noting that an official update will be provided once investigations are complete.
Blockchain analytics platform Lookonchain suggested the attacker may have successfully exploited the protocol to mint 120 million YU tokens on Polygon. Reports indicate that 7.71 million of those tokens were bridged and sold for 7.7 million USDC across Ethereum and Solana. The attacker allegedly converted the proceeds into 1,501 ETH and spread the funds across multiple wallets. Large amounts of YU—22.29 million on Ethereum and Solana, plus 90 million still on Polygon—remain in the exploiter’s possession.
YU is designed to be backed by overcollateralized Bitcoin reserves and maintain stability at $1. However, the token’s relatively thin liquidity has compounded volatility risks. With a reported market capitalization of $119 million, YU’s Ethereum pool holds only about $340,000 in USDC liquidity, according to DEX Screener. This imbalance left the stablecoin vulnerable to heavy selling pressure during the exploit.
Following its sharp drop, YU rebounded to $0.917 before slipping again. At the time of writing, the stablecoin is trading near $0.78, well below its targeted peg. Despite outreach, Yala has not provided further comment on whether users or the protocol itself sustained financial losses in the incident.
The episode comes at a time when the broader stablecoin market is pushing toward a $300 billion milestone. CoinMarketCap recently reported the sector crossing the mark, while CoinGecko and DefiLlama recorded slightly lower estimates around $291 billion and $289 billion, respectively. Stablecoins such as Tether’s USDT, Circle’s USDC, and Ethena Labs’ yield-bearing USDe remain the dominant players fueling that growth.
While the sector’s expansion highlights growing demand for blockchain-based dollar alternatives, the Yala incident underscores the fragility of newer stablecoin projects. As Axelar’s head of growth Chris Robins noted, $300 billion may be an early milestone for adoption, but mainstream trust in stablecoins will depend on their ability to weather attacks and maintain stability.