[Chain News] The Yearn protocol had an incident last night. On November 30th at 9:11 PM UTC (, their yETH stable pool was hacked.
The attacker executed a tricky operation—using a custom contract to mint yETH tokens frantically. This wave directly caused about 8 million dollars to go down the drain in the pool, and the yETH-WETH liquidity pool on Curve also suffered, incurring a loss of about 900,000 dollars. In total, it's nearly a 9 million dollar hole.
However, Yearn's official team quickly came out to reassure everyone: the compromised code is independent, and the vaults of V2 and V3 versions )Vaults( are safe, as are other products. They mentioned that the complexity of this attack is similar to the previous one involving Balancer—apparently, the hackers really put in some effort.
The team has now contacted SEAL911 and their old partner audit company Ch.