Audits & Bug Bounties
YieldBasis has undergone multiple comprehensive security audits, AI-assisted reviews, and competitive security reviews to improve the safety and reliability of the protocol. However, no audit can guarantee absolute security, and smart contract risk remains.
Finding-level remediation status is not summarized here until each report's finding matrix and current remediation evidence are available. Do not infer that every finding is remediated from the presence of a report link.
If you have any security concerns or vulnerabilities to report, please contact us here: [email protected]
Audit Reports
Core Architecture
Security Contest
Hybrid Vaults
Fee Distributor
Audit #9: Firepan AI Audit
Date: 23-04-2026 - 26-04-2026
Scope: FeeDistributor
Bug Bounty
Status as of 2026-05-19: a bug-bounty program is in preparation. Scope is expected to cover production core contracts listed in Contract Addresses. Standard out-of-scope: frontend, third-party integrations, social-engineering, known issues already reported.
For immediate security concerns, email [email protected] directly.