As previously pointed out, the root cause of this morning's iEarn exploit was a bug in the legacy iEarn USDT (yUSDT) token contr
13 Apr 2023, 22:42
As previously pointed out, the root cause of this morning's iEarn exploit was a bug in the legacy iEarn USDT (yUSDT) token contract.
This bug persisted in several versions and led to multiple Curve pools (y, busd, pax) being exploited and drained. Liquidity providers who deposited their LP tokens into downstream protocols are still impacted.
This includes users of the Yearn v2 vaults (2) and legacy v1 vaults (2) which wrapped these affected LPs.