Particle.news
Download on the App Store

Yearn Finance Recovers $2.4 Million After yETH Infinite-Mint Exploit

The move comes after an old yETH stableswap contract let an attacker drain roughly $9 million from Balancer-linked pools.

Overview

  • Yearn said 857.49 pxETH was clawed back in coordination with Plume and Dinero, with funds slated for affected users.
  • The Nov. 30 attack exploited a legacy yETH contract to mint about 235 trillion tokens and swap them for real assets.
  • Roughly 1,000 ETH was funneled through Tornado Cash shortly after the breach, limiting recovery prospects.
  • Investigators report helper contracts deployed for the exploit self-destructed to obscure traces.
  • Yearn confirmed the incident was isolated to the legacy yETH pool and that V2/V3 vaults holding over $600 million were not impacted, with a full post-mortem in progress.