The yield farming app was exploited through a possible private key compromise, according to a CertiK report.