Overview
- Yearn said 857.49 pxETH was clawed back in coordination with Plume and Dinero, with funds slated for affected users.
- The Nov. 30 attack exploited a legacy yETH contract to mint about 235 trillion tokens and swap them for real assets.
- Roughly 1,000 ETH was funneled through Tornado Cash shortly after the breach, limiting recovery prospects.
- Investigators report helper contracts deployed for the exploit self-destructed to obscure traces.
- Yearn confirmed the incident was isolated to the legacy yETH pool and that V2/V3 vaults holding over $600 million were not impacted, with a full post-mortem in progress.