Yearn Finance yETH Glitch Triggers $3 Million Drain to Tornado Cash

• Yearn Finance’s yETH pool was exploited through an infinite-mint flaw.
• The attacker drained real assets, pulling nearly $3 million in ETH.
• Roughly 1,000 ETH was funneled through Tornado Cash in batches.

An infinite-mint vulnerability in Yearn Finance’s yETH contract triggered a multi-million dollar liquidity drain Sunday, forcing the protocol to isolate the affected legacy pool. An attacker exploited the flaw to mint 235 trillion synthetic tokens, immediately swapping the worthless supply for real assets before routing funds to mixer Tornado Cash.

The ‘Infinite Mint’ Mechanics 

The breach originated in the yETH contract, a liquid staking index designed to bundle assets like stETH and rETH. The attacker identified a dormant logic flaw allowing the uncollateralized minting of yETH.

Read The Full Article Yearn Finance yETH Glitch Triggers $3 Million Drain to Tornado Cash On Coin Edition.