DeFi protocol Yearn Finance has detailed how a multi-phase numerical bug and unsafe math enabled an exploiters steal rought $9 million in assets.