Yearn yETH was attacked, with approximately 3 million dollars worth of ETH flowing into Tornado Cash

According to The Block, Yearn Finance's aggregated staking token product yETH was attacked, with the attacker exploiting a vulnerability to mint yETH almost infinitely, depleting the pool's assets in a single transaction.

On-chain data shows that the attacker subsequently transferred about 1000 ETH (approximately 3 million USD) to the mixing protocol Tornado Cash. Multiple contracts used for the attack self-destructed after the transaction. The exact scale of the losses is still unclear, and Yearn stated that it is investigating the incident, with its V2 and V3 Vaults unaffected.