Funds are SAFU, here is what happens next

The 88mph team has rescued all of the funds deposited into the CRV:RENWBTC, CRV:STETH, and yaLINK pools into the governance treasury multisig.

In the next 48 hours, we will return the funds to the affected users. The funds will be returned via directly transfer, so affected users do not need to take any action.

After the funds have been returned, we will release the details of the vulnerability in a postmortem post.

As the release of 88mph v3 is imminent, we do not plan to reboot the affected pools.

Acknowledgements

Many thanks to the Immunefi team and @AshiqAmien from iosiro, who have offered extremely valuable help in securely pausing the affected pools and recovering the funds.

The 88mph team regards security as our top priority, and we are constantly improving our security practices to prevent similar vulnerabilities in the future.