yETH Governance

ChainSecurityFiles named in the report

ChainSecurity reviewed Yearn (yETH Governance) on 3 Nov 2023: 10 findings, 0 critical; all marked fixed.

No open critical findings
Open the reportOpen Yearn’s security record

Report hosted on chainsecurity.com.

Trustblock does not review code.

Findings10

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High001
Medium005
Low004

Marked Informational by the firm. Not counted as findings.

InformationalMajority Parameter Can Be Less Than Fifty PercentFixed

The report gives no description here.

InformationalMissing EventsFixed

The report gives no description here.

InformationalSanity ChecksFixed

The report gives no description here.

InformationalShould Governance Be Able to Evict the TreasuryFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (11)

  • contracts/governance/WeightIncentives.vy
  • contracts/governance/GenericGovernor.vy
  • contracts/governance/InclusionIncentives.vy
  • contracts/governance/WeightVote.vy
  • contracts/governance/PoolGovernor.vy
  • contracts/governance/SnapshotToken.vy
  • contracts/governance/Executor.vy
  • contracts/governance/DelegateMeasure.vy
  • contracts/governance/OwnershipProxy.vy
  • contracts/governance/InclusionVote.vy
  • contracts/governance/LaunchMeasure.vy

Part of Yearn’s security record

Yearn
Audits12 audits by 1 firmLast audit Jul 2026, by ChainSecurity.
Critical findingsNo open critical findingsAcross the 12 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it.
IncidentIncident 4 Feb 2021Source: De.Fi incident database.
Open Yearn’s security record

Security firm

ChainSecurity

81 projects reviewed · 286 reports · latest Sep 2026

See ChainSecurity’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us