đ What happened with Yearn / yETH?
On November 30, 2025, Yearn confirmed that its pool/contract "yETH LST stableswap" was exploited.
The vulnerability allowed an attacker to perform an "infinite mint" of yETH â that is: they created an practically unlimited amount of fake yETH tokens.
With those fake tokens, the attacker immediately exchanged them for real assets â mainly ETH and other staking-derived tokens â draining the liquidity of the "legacy" yETH pool in just a few minutes.