PyShield: One victim lost approximately $1 million due to a previously authorized unverified contract (yvWETH).

CoinFeed reported on April 29 that, according to CoinFeed monitoring, a victim lost approximately $1 million in Alchemix Yearn yvVault positions (yvWETH) due to an unverified contract (address starting with 0x143a) that they had previously approved. The contract, created 10 days prior, was found to contain a vulnerability that could be exploited to execute arbitrary calls.