User Loses ~$1M in yvWETH After Authorizing Unverified Contract

Gate News message, April 29 — A user suffered a loss of approximately $1 million in yvWETH, an Alchemix Yearn Vault position, after authorizing an unverified contract earlier, according to PeckShield monitoring.

The unverified contract was created 10 days ago and contains a vulnerability that can be exploited to execute arbitrary calls, enabling attackers to drain authorized token balances.