Yearn Finance suffered its fourth exploit after a flash loan attack drained a legacy v1 vault, exploiting outdated smart contracts. The incident highlights persistent risks from deprecated DeFi code despite audits and ongoing security reviews.