News section

An infinite-mint vulnerability in Yearn Finance’s yETH contract triggered a multi-million dollar liquidity drain Sunday, forcing the protocol to isolate the affected legacy pool. An attacker exploited the flaw to mint 235 trillion synthetic tokens, immediately swapping the worthless supply for real assets before routing funds to mixer Tornado Cash.

Lookonchain tracked a fresh sequence of Tornado Cash withdrawals involving three newly active wallets that together pulled out 4,920 ETH, valued at roughly $16.25 million. The ETH was moved at about $3,302 per coin. The size and timing attracted attention because the addresses were not long-lived and were funded entirely via the privacy mixer.

The Ethereum Foundation (EF) has offered to match up $500k in donations from the public in a bid to further support Roman Storm, a convicted co-founder of Tornado Cash. The EF has urged the members of the public to donate towards the legal aid of Storm to fight for privacy and Web3 coding.