According to Foresight News , Yu Xian, founder of SlowMist, tweeted that the "white hat negotiation" messages that appeared on the blockchain after Yearn was attacked were fake and were actually a phishing attack, consistent with the previous Balancer incident.
Furthermore, the Yearn attackers used the Railgun protocol to conceal their identities, prepared a low-gas-fee address 28 days in advance, and ultimately transferred 1,000 ETH via Tornado Cash. The attackers' address currently holds approximately $6 million in crypto assets.






