yETH

ChainSecurityFiles named in the report

ChainSecurity reviewed Yearn (yETH) on 26 Jun 2023: 25 findings, 0 critical; 15 marked fixed, 7 acknowledged, 3 open.

No open critical findings
Open the reportOpen Yearn’s security record

Report hosted on chainsecurity.com.

Trustblock does not review code.

Findings25

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium105
Low2710
MediumIncorrect Computation of Product TermFixed

The report gives no description here.

MediumMissing Transfer of Tokens When Adding New AssetsFixed

The report gives no description here.

MediumPool Might End up With Less Shares Than MINIMUM_INITIAL_DEPOSITFixed

The report gives no description here.

MediumShare Distribution Depends on First DepositFixed

The report gives no description here.

MediumWrong Calculation of Voting Weight for Withdrawn SharesFixed

The report gives no description here.

LowApprove Can Be FrontrunFixed

The report gives no description here.

LowDefault Target WeightFixed

The report gives no description here.

LowIncomplete Specifications for Paused PoolFixed

The report gives no description here.

LowInconsistent Behavior of Conversion FunctionFixed

The report gives no description here.

LowMismatch of Code With the Specification for Pending RewardsFixed

The report gives no description here.

Show 5 more
LowMissing Slippage Protection When Adding New AssetFixed

The report gives no description here.

LowNo Meaningful Revert MessagesFixed

The report gives no description here.

LowPossible to Lock Management RoleFixed

The report gives no description here.

LowTypes of Variables in WeightFixed

The report gives no description here.

LowUnused Event in StakingFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (2)

  • Staking.vy
  • Pool.vy

Part of Yearn’s security record

Yearn
Audits12 audits by 1 firmLast audit Jul 2026, by ChainSecurity.
Critical findingsNo open critical findingsAcross the 12 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it.
IncidentIncident 4 Feb 2021Source: De.Fi incident database.
Open Yearn’s security record

Security firm

ChainSecurity

81 projects reviewed · 286 reports · latest Sep 2026

See ChainSecurity’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us