Yearn V3 Vaults

ChainSecurity4 May 2023Files named in the report

ChainSecurity reviewed Yearn (Yearn V3 Vaults) on 4 May 2023: 12 findings, 0 critical; 10 marked fixed, 2 acknowledged.

No open critical findings

Open the report Open Yearn’s security record

Report hosted on chainsecurity.com.

Trustblock does not review code.

Findings12

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	0
Medium	0	0	2
Low	0	2	8

MediumDisproportional Unrealized Loss on RedemptionFixed

The report gives no description here.

MediumInconsistent Debt Accounting on Withdrawal From StrategiesFixed

The report gives no description here.

LowAdd Self as a StrategyFixed

The report gives no description here.

LowIncorrect and Missing SpecificationFixed

The report gives no description here.

LowIncorrect Return Type of DecimalsFixed

The report gives no description here.

LowIncorrect Return ValueFixed

The report gives no description here.

LowMissing Event upon Role ChangeFixed

The report gives no description here.

LowNon ERC-4626 Compliant FunctionsFixed

The report gives no description here.

LowUnchecked Profit Max Unlock TimeFixed

The report gives no description here.

LowUnprotected Sweep FunctionFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (2)

contracts/VaultFactory.vy
contracts/VaultV3.vy

Part of Yearn’s security record

Yearn

Audits12 audits by 1 firmLast audit Jul 2026, by ChainSecurity.

Critical findingsNo open critical findingsAcross the 12 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it.

IncidentIncident 4 Feb 2021Source: De.Fi incident database.

Open Yearn’s security record

Security firm

ChainSecurity

81 projects reviewed · 286 reports · latest Sep 2026

See ChainSecurity’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.