Yearn yETH was attacked, with approximately 3 million USD worth of ETH flowing into Tornado Cash

According to The Block, Yearn Finance's aggregated staking token product yETH was attacked, allowing the attacker to mint yETH almost infinitely through a vulnerability, depleting the pool's assets in a single transaction.

On-chain data shows that the attacker subsequently transferred about 1000 ETH (approximately 3 million USD) into the mixing protocol Tornado Cash. Several contracts used for the attack self-destructed after the transaction. The exact scale of the losses is still unclear, and Yearn stated that it is investigating the incident, with its V2 and V3 Vaults unaffected.