Yearn Finance confirmed a $9M exploit in its stableswap pool, recovering roughly one quarter of stolen assets and pledging fixes plus restitution to affected yETH depositors.
Yearn Finance disclosed details of a November 30 exploit targeting its stableswap liquidity pool, where attackers exploited a flaw that allowed unlimited LP token minting and drained about $9 million. The protocol recovered 857.49 pxETH, approximately 25% of the stolen funds, which will be redistributed to yETH depositors. Yearn has announced security fixes to address the vulnerability, aiming to prevent future attacks of this nature.