Yearn: yETH pool suffers complex attack, resulting in a loss of approximately 8.9 million dollars

Yearn released a statement saying that its yETH stable pool was attacked on November 30 at 21:11 UTC. The attacker minted a large amount of yETH through a custom contract, resulting in approximately $8 million in assets being compromised in the pool, with an additional loss of about $900,000 from the yETH-WETH pool on Curve. Yearn stated that the affected code is unrelated to other products, and both V2/V3 Vaults were not impacted. They mentioned that the complexity of the incident is similar to the previous attack on Balancer. The team is currently conducting an investigation in conjunction with SEAL911 and the auditing firm ChainSecurity.