Yearn yETH attacked, approximately $3 million worth of ETH flows into Tornado Cash

ChainCatcher news, according to The Block, Yearn Finance's aggregated staking token product yETH was attacked. The attacker exploited a vulnerability to mint yETH almost infinitely, draining the assets in the pool in a single transaction.

On-chain data shows that the attacker subsequently transferred about 1,000 ETH (approximately $3 million) into the mixing protocol Tornado Cash. Multiple contracts used for the attack self-destructed after the transactions. The exact scale of the loss is still unknown. Yearn stated that it is investigating the incident, and its V2 and V3 Vaults were not affected.