TLDR
The Yearn Finance (YFI) yETH liquidity pool was exploited today, with early reports estimating roughly 1,000 ETH stolen (~$3 million) per a market update and Yearns post confirming an incident.
- Yearn clarified V2/V3 Vaults are unaffected, and the issue is limited to the yETH LST stableswap pool as stated here.
- The attack reportedly minted large amounts of yETH and drained the pool, with funds routed through mixers per a market report.
- Follow Yearns updates for remediation and claims; Morpho-curated vaults were noted safe by Yearn.
Deep Dive
1. Yearn yETH Pool
The incident centers on the yETH LST stableswap pool, not Yearns V2/V3 Vaults. Yearn confirmed an ongoing investigation and clarified vaults are unaffected in its status update.
- Reports indicate the attacker minted large amounts of yETH in one transaction, draining the pool of about 1,000 ETH (~$3 million), with funds later mixed per a market report.
- Yearn added that curated Morpho vaults are safe and yETH/st-yETH was not used as collateral on markets, reducing spillover risk in this note.
If you were an LP in yETH, monitor Yearns official updates for remediation steps. If you hold Yearn vault positions, the team states those products are unaffected.
2. Scope and Impact
The affected pool is a stableswap for Ethereum liquid staking tokens (LSTs), a venue that aggregates LST liquidity and typically targets low-slippage swaps. This pool-specific nature and lack of use as collateral on markets suggest the blast radius is contained per the Yearn clarifications.
- Early market reactions can overshoot or misattribute exposure to adjacent LST protocols; stick to confirmed scope from the Yearn posts.
Broader LST venues appear unaffected so far. Focus on pool-level exposure rather than assuming protocol-wide contagion.
3. Practical Risk Checks
Operationally, incidents like this are often followed by pauses, snapshotting, and claims portals. Expect a staged recovery plan and eligibility rules, similar to prior DeFi exploit responses cited in recent coverage, and watch the Yearn feed for concrete steps.
- If you provided liquidity to yETH, prepare wallet proofs and snapshots when the team publishes claims or remediation details.
- If you depend on LST pools elsewhere, review pool configs, admin roles, and recent audits. Stay alert to any cross-references in the market report.
Treat this as a pool-specific event, verify your exact LP exposure, and plan for a formal claims process rather than ad hoc actions.
Conclusion
Todays exploitation appears confined to the Yearn yETH LST stableswap pool. Yearn states vault products are unaffected and Morpho-curated vaults remain safe, reducing systemic spillover. Monitor official updates for remediation and claims while validating your exposure at the pool level.
