Yearn Finance just got hit hard. An attacker exploited a vulnerability that allowed near-infinite minting of yETH tokens, draining roughly $9 million from the protocol.

The damage breakdown? Around 1,000 $ETH (approximately $3M) was already funneled through TornadoCash for laundering. Meanwhile, the exploiter's wallet is still sitting on about $6 million worth of crypto assets.

This attack highlights ongoing smart contract risks in DeFi protocols. Infinite minting exploits remain one of the most devastating attack vectors when code audits miss critical logic flaws.

ETH-0.36%

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.

11 Likes