🚨MistTrack Fund Flow Analysis — @yearnfi Exploit🕵️ 1️⃣The exploiter made roughly $9M from this incident. The initial seed funds came from a small amount of ETH sent via #Railgun. 🔗Tx: https://etherscan.io/tx/0x68f88d2ffcef1ceafde26fc290cf1d31ff9a461b4ee2aeb68da8aa9cf70e600c 2️⃣After launching the attack, the exploiter funneled 1,100 ETH into Tornado Cash, later withdrawing 100 ETH to continue the operation. 🔗Tx: https://etherscan.io/tx/0x53fe7ef190c34d810c50fb66f0fc65a1ceedc10309cf4b4013d64042a0331156 3️⃣The remaining profit — around $6M, consisting of 128 ETH, 48.96 cbETH, 203.55 rETH, 742.63 frxETH, 857.48 pxETH, and 167.67 stETH — was then consolidated into: 0xa80d3f2022f6bfd0b260bf16d72cad025440c822 🔗Tx: https://etherscan.io/address/0xa80d3f2022f6bfd0b260bf16d72cad025440c822 4️⃣To prep for batch operations, the exploiter first executed a 7702 delegate call to 0x1A1Efc... 🔗Tx: https://etherscan.io/tx/0x91054b9f0bf8e94ef2ebf27141872662776636b68ab3122eeb0afec421ba71bb 5️⃣Then came a major consolidation step: All cbETH, rETH, frxETH, and stETH were swapped in a single transaction into 1,184.9 WETH. 🔗Tx: https://etherscan.io/tx/0x9bdf92698cbd53adc42568cf205748da96d348f576be18d21e7c5180571ee825 6️⃣The exploiter then attempted to convert the 1,184.9 WETH → ETH and batch-deposit it into Tornado Cash — but the transaction failed ❌ 🔗Tx: https://etherscan.io/tx/0x18582f9cf70349f0f86105a79f2bab20cb2a5305f17911ee23a092fc9ea86785 7️⃣A key twist: Yearn successfully recovered ~$2.4M by burning the exploiter’s 857.48 pxETH, later re-minting it and returning it to the Redacted Cartel multisig. 🛠️ 🔗Tx: https://etherscan.io/tx/0x0e83bb95bb9d05fb81213b2fad11c01ea671796752e8770b09935f7052691c35 As of now, the exploiter’s address still holds 1,184.9 WETH and 128 ETH. We’ll continue to monitor the movements 👀(MistTrack🕵️)