Yearn Finance yETH Pool Targeted by Hackers, Draining $3 Million from Users

A security flaw in Yearn Finance’s yETH pool resulted in a major attack on Sunday. The attacker exploited a vulnerability allowing the creation of an unlimited supply of synthetic tokens, which they then exchanged for real ETH before routing the funds through a privacy-focused mixer platform named Tornado Cash. This action led to the loss of approximately $3 million in value, primarily from users of the affected yETH pool.