🔍 What happened with Yearn / yETH?
On November 30, 2025, Yearn confirmed that its pool/contract "yETH LST stableswap" was exploited.
The vulnerability allowed an attacker to perform an "infinite mint" of yETH — that is: they created an practically unlimited amount of fake yETH tokens.
With those fake tokens, the attacker immediately exchanged them for real assets — mainly ETH and other staking-derived tokens — draining the liquidity of the "legacy" yETH pool in just a few minutes.