Which Yearn pools were affected?

TLDR

The affected Yearn pools were the yETH stableswap pool and the yETHWETH stableswap pool on Curve, per the projects confirmation in an incident update (official post).

1. Approximate losses: $8 million in the yETH stableswap pool and $0.9 million in the yETHWETH pool (official post).
2. Yearn V2/V3 vaults were not impacted (official note).
3. Liquidity was drained via pools referenced by media as Balancer/Curve routes (market coverage).

Deep Dive

1. Pools Hit

Yearn stated the incident involving the yETH stableswap pool and separately cited the yETHWETH stableswap pool on Curve among impacted venues, with loss estimates for each (official post). Media coverage also notes liquidity removal through Balancer-linked pools during the exploit sequence (market coverage).

2. What Was Not Affected

Yearn reaffirmed that V2/V3 vaults were not affected and that curated Morpho vaults remained safe (official note). This aligns with reports emphasizing the issue was isolated to legacy yETH logic rather than core vault infrastructure (market coverage).

3. Magnitude and Flow

Yearns loss tally was about $9 million total, split roughly $8 million and $0.9 million across the two pools, with around 1,000 ETH routed to Tornado Cash shortly after the attack (official post). Media coverage corroborates the drain and laundering pattern from those pools (market coverage).

Conclusion

Impact was concentrated in two pools: yETH stableswap and the yETHWETH stableswap on Curve, while Yearns V2/V3 vaults were not affected. If you used those pools, review positions and follow the incident thread above for remediation steps and next notices.