Yearn Finance Suffers $9 Million Loss from Infinite Mint Vulnerability

Yearn Finance suffered a devastating security breach on November 30th, resulting in the loss of approximately $9 million. The exploit exploited an infinite token minting vulnerability in one of its yETH liquid staking pools. 8 million was stolen from the stableswap pool, and 0.9 million from the yETH-WETH pool on Curve. The attack involved a single transaction that generated an astronomical number of tokens, draining the entire pool.