Yearn Finance has disclosed a security breach in a legacy stableswap liquidity pool that resulted in the theft of approximately $9 million. The attack, which occurred on November 30, 2025, was facilitated by a numerical error that allowed attackers to mint unlimited LP tokens. In response, Yearn Finance has successfully recovered 857.49 pxETH and intends to return these assets to affected savers. The project assured users that its v2 and v3 vaults were not impacted by the exploit. To prevent future incidents, Yearn Finance plans to implement domain checks as part of its security enhancements.