Yearn's yETH appears to have been attacked, with $3 million worth of ETH flowing into Tornado Cash.

Odaily Odaily that Yearn Finance's yETH product appears to have been attacked today. Attackers exploited a vulnerability that allowed for the "unlimited minting" of yETH, rapidly draining the entire yETH pool in a single transaction. According to on-chain data, approximately 1,000 ETH (about $3 million) were subsequently transferred to Tornado Cash. The attack appears to have been carried out through multiple newly deployed contracts, some of which self-destructed immediately after the transaction. The extent to which the approximately $11 million in the yETH pool was affected remains uncertain. The incident was initially discovered by X user Togbe while monitoring large transactions. Yearn officials stated they are investigating the matter and emphasized that their V2 and V3 Vaults were not affected. The situation is still developing.