Yearn Finance recovers $2.4 million: Old yETH pool suffers from arithmetic vulnerability attack

[Coin World] Yearn Finance can finally breathe a sigh of relief this time - last week's attack on the old version of the yETH pool resulted in them successfully recovering nearly 2.4 million dollars.

Here's the situation: A hacker targeted an old pool that is rarely used, exploiting arithmetic-level vulnerabilities to mint coins frantically, almost printing as many as desired. As a result, the liquidity in the pool was completely drained, with total losses estimated to be nearly 9 million dollars.

The good news is that Yearn officials emphasize that this incident is limited to that old antique pool, and the vaults of V2 and V3 were completely unaffected. The recovered funds will be returned to the affected users through the original channel, and the entire tracking process has the assistance and cooperation of a security company.

This matter reminds everyone again: In the DeFi world, old code and abandoned contracts can also become ticking time bombs. Even for leading protocols, the security maintenance of historically inherited products should not be taken lightly.