$3 million in ETH sent to Tornado Cash following apparent attack on Yearn’s yETH

Yield-farming protocol Yearn Finance experienced an apparent attack targeting its Yearn Ether (yETH) product, which aggregates liquid staking tokens (LSTs). Blockchain data indicates the yETH pool was drained in a single transaction after an exploit minted a near-infinite number of yETH tokens. This action resulted in approximately 1,000 ETH, valued at about $3 million, being transferred to the mixing protocol Tornado Cash. The attack involved freshly-deployed smart contracts, some of which self-destructed afterward, and the total financial loss remains unclear. Yearn confirmed they are investigating the incident involving the yETH LST stableswap pool but stated that Yearn Vaults (V2 and V3) were unaffected. This follows previous security incidents for Yearn, including a 2021 exploit on its yDAI vault.

(Source：The Block)