yETH Governance

ChainSecurityFiles named in the report

Audit

ChainSecurity reviewed Yearn (yETH Governance) on 3 Nov 2023: 10 findings, 0 critical; all marked fixed.

No open critical findings
Open the reportOpen Yearn’s security record

Report hosted on chainsecurity.com.

Trustblock does not review code.

Findings10

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High001
Medium005
Low004
HighBlank Votes Not CountedFixed

The report gives no description here.

MediumBalance Used Instead of Voting Weight in DelegateMeasureFixed

The report gives no description here.

MediumGriefing by Flooding Malicious ProposalsFixed

The report gives no description here.

MediumInclusionVote Operator TrustFixed

The report gives no description here.

MediumProposals Can Be Enacted After More Than One EpochFixed

The report gives no description here.

MediumVoters Trust Proposal Author Not to RetractFixed

The report gives no description here.

LowAccess Control Can Have Invalid ValueFixed

The report gives no description here.

LowDelegation Could Allow Double VotingFixed

The report gives no description here.

LowNumber of Assets Could Change During VoteFixed

The report gives no description here.

LowRace Condition in GenericGovernorFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (11)

  • contracts/governance/WeightIncentives.vy
  • contracts/governance/GenericGovernor.vy
  • contracts/governance/InclusionIncentives.vy
  • contracts/governance/WeightVote.vy
  • contracts/governance/PoolGovernor.vy
  • contracts/governance/SnapshotToken.vy
  • contracts/governance/Executor.vy
  • contracts/governance/DelegateMeasure.vy
  • contracts/governance/OwnershipProxy.vy
  • contracts/governance/InclusionVote.vy
  • contracts/governance/LaunchMeasure.vy

Part of Yearn’s security record

Yearn
Audits12 audits by 1 firmLast audit Jul 2026, by ChainSecurity.
Critical findingsNo open critical findingsAcross the 12 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it.
IncidentIncident 4 Feb 2021Source: De.Fi incident database.
Open Yearn’s security record

Security firm

ChainSecurity

81 projects reviewed · 286 reports · latest Sep 2026

See ChainSecurity’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us