Yearn Finance just got hit hard. An attacker exploited a vulnerability that allowed near-infinite minting of yETH tokens, draining roughly $9 million from the protocol.
The damage breakdown? Around 1,000
$ETH (approximately $3M) was already funneled through TornadoCash for laundering. Meanwhile, the exploiter's wallet is still sitting on about $6 million worth of crypto assets.
This attack highlights ongoing smart contract risks in DeFi protocols. Infinite minting exploits remain one of the most devastating attack vectors when code audits miss critical logic flaws.