Yearn Finance: Wrong multi-signature script caused the treasury to lose $1.4 million, but user funds were not affected

On December 14th, Yearn Finance disclosed that during the regular fee token exchange process in the Yearn treasury, an incorrect multi-signature script caused 63% of its position to disappear (3,794,894 lp-yCRVv2 tokens were exchanged for 779,958 yvDAI tokens), but user funds were not affected. Yearn requests that users who profited from this vulnerability return a "reasonable" amount to the protocol's multi-signature.

Yearn Finance stated that before the funds are returned, the total loss is $1.4 million, which accounts for about 2% of the entire fund.