Yearn Finance yETH Pool Drained for $3 Million Through Infinite-Mint Exploit

Yearn Finance confirmed an exploit targeting its yETH liquid staking token pool on November 30, 2025. An attacker exploited an infinite-mint vulnerability to drain millions in liquid staking tokens, routing approximately 1,000 ETH (around $3 million) to Tornado Cash. The protocol stated that Yearn Vaults V2 and V3 remain unaffected.