Yearn Finance’s yETH vault was hit by a single-transaction exploit that abused liquid staking token interactions. The attacker was able to mint effectively unlimited yETH, siphon liquidity from Balancer pools and steal roughly $3 million worth of ETH, which was later funneled through Tornado Cash, prompting renewed DeFi security concerns.