Grim Finance Review 2026: Yield Vaults After a $30M Hack

Grim Finance is a yield optimizer that lets users stake LP tokens from automated market makers in vaults. The vaults harvest rewards and re-stake them as LP tokens, so returns compound without manual steps. It is listed on Fantom, Avalanche, Arbitrum, Polygon, Telos and Kava, and has its own token, GRIM.

The project is best known for a security incident. Reports dated December 2021 say an attacker drained Grim's Fantom yield vaults on December 18, 2021, through the vault share-minting path, with losses reported around $30 million.

Today the project's total value locked is about $6,900, down 13.1% over seven days. The official homepage could not be fetched. The team, current fee schedule and audit reports are not published in the information available, although two audits are listed.

Many AMMs pay rewards to people who provide liquidity and receive LP tokens. Claiming those rewards, selling them, and re-adding liquidity takes several transactions, each with gas costs.

Grim's vaults automate this loop. Users stake LP tokens in a vault, and the vault periodically harvests rewards and re-stakes them as more LP tokens. The compounding is meant to raise returns without manual work.

The vault share-minting logic is central to this design, since it tracks each depositor's claim on the pooled funds. Reports say the December 2021 attacker drained the vaults through that path, which shows how vault code can become a single point of failure.

Grim Finance's fee schedule is not published in the information available. The GRIM token description mentions a harvest fee, half of which is distributed to GRIM holders, but the fee percentage is not stated.

Users would normally see vault fees on the vault pages inside the app, in addition to network gas costs on each chain.

Grim Finance was exploited in December 2021, with reports putting the loss at about $30 million from its Fantom vaults. Two audits are listed, but the audit reports and the exploit's root cause analysis were not available, so readers should not treat the audits as a guarantee of safety.

Users deposit into vault contracts, so they carry smart-contract risk as well as the risk of the underlying AMMs and reward tokens. With TVL near $6,900 and an unreachable homepage, the project's current maintenance level is uncertain. Treat any deposit as high risk. Regulatory status is not stated.

Grim Finance is mainly relevant to people researching past DeFi exploits or holders of GRIM who want to understand the project's history. It is not a good fit for newcomers or anyone seeking a dependable place to earn yield, given the hack and the low remaining TVL.