News linked to both this project and an event.
According to CryptoSlate, Microsoft and the cybersecurity organization Health-ISAC have obtained a U.S. court order to seize and redirect the domains supporting three services: YAM Store, CoGUI, and Iron Man. These three services sell stolen accounts and phishing tools to fraudsters. Since January this year, they have assisted in sending over 1 billion phishing messages, targeting more than 75,000 institutions across over 150 countries, generating tens of millions of dollars in revenue for operators. Microsoft has disabled more than 20,000 accounts associated with YAM Store and continues to block over 100,000 spoofing and fraudulent domains. According to Microsoft's investigation, these services accept payments in USDT (Tron network) and ETH, with Cloudflare noting that buyers can also pay using USDC. Blockchain analytics firm TRM Labs assisted investigators in locating and freezing related assets, though the frozen amount was not disclosed.
Odaily News: According to Defimon monitoring, YAM Finance has suffered a governance takeover attack. The attacker self-delegated approximately 504,000 YAM tokens, accounting for about 3.3% of the total supply, slightly above the legal voting threshold, and subsequently submitted proposal #45 to YamGovernorAlpha. The proposal description is empty and only contains an operation to call the setPendingAdmin method of the YAM Timelock contract, redirecting permissions to the attacker's address. If the proposal passes and is executed, the attacker will become pendingAdmin and can then fully control the Timelock through acceptAdmin, thereby gaining administrative access to all YAM protocol contracts and the DAO treasury, involving a risk amount of approximately $337,000. As the YAM protocol is currently in a dormant state, Defimon Alerts reminds YAM holders to vote against this proposal before block height 25897343, with approximately 34 hours remaining until that block.