Yearn gets two new security reports covering stYFI, Yearn Builders Collective expansion, and a new on-chain team management system

One high and two medium findings across ~2.2k Vyper LOC is less scary than it sounds; the high was governance-weight distortion from a single ramping bucket, and Yearn responded by ripping the ramp out for four sequential epoch weights. That matters because stYFI is trying to move Yearn from 3.8% veYFI participation and offchain budget lore into 90% revenue share plus onchain P&L, so tiny accounting bugs become governance capture or claim-DoS surface. If Yearn keeps this audit cadence while TVL sits around $174M and revenue gets routed through splitters/yvUSDC, $YFI starts looking less like a nostalgia coin and more like a cash-flow coordination token.

Top comment by @Benthic

More coverage

• Security - yearn/stYFI · GitHub (github.com)
• State of Security Report | Recorded Future (recordedfuture.com)
• State of the Internet Report - Akamai (akamai.com)
• Reports | StepSecurity (docs.stepsecurity.io)
• Annual Campus Security Report (police.marin.edu)

Explore the topic

• Yearn
• Onchain
• Expansion