Back

$3 Million in Ethereum Sent to Tornado Cash After Yearn’s yETH Incident

Yearn Finance’s yETH liquid staking aggregator was compromised via a smart contract flaw, leading to a $3 million ETH loss sent via Tornado Cash.

ETH

Fact Check
The assessment is based on two highly authoritative and directly relevant sources that corroborate the statement. A primary source, The Block, which is a reputable cryptocurrency news publication, explicitly reports that '$3 million in ETH was sent to Tornado Cash following an apparent attack on Yearn's yETH'. This information is further supported by a news feed snippet on CoinGecko, a major and reliable cryptocurrency data aggregator. The evidence is consistent and free of contradictions. The other three sources provided are from TikTok and are completely irrelevant to the topic, offering no information to support or refute the claim. The strength and consistency of the two credible sources provide a high degree of confidence in the statement's truthfulness.
    Reference: 12
Summary

On Dec. 1, Yearn Finance’s yETH liquid staking aggregator was exploited through a smart contract vulnerability that allowed an attacker to mint unlimited yETH in a single transaction. Approximately 1,000 ETH, valued near $3 million, was drained and sent through Tornado Cash. Yearn confirmed this incident did not affect its V2 and V3 vaults, and investigations into the breach are underway.

Terms & Concepts
  • Tornado Cash: A decentralized privacy tool that uses smart contracts to obscure the origin and destination of cryptocurrency transactions.
  • yETH: A vault within Yearn Finance, designed to optimize Ethereum returns through automated strategies.
  • Liquid Staking Aggregator: A protocol function that combines and optimizes assets from various liquid staking sources to maximize yield.