Audits
YieldBasis smart contracts had several audits, an AI-assisted review, and a public security contest. Each audit card links its full report, grouped by contract area. No audit removes all risk.
The status of each finding is in its report, not on this page. A report link does not mean that the team fixed every finding.
To report a vulnerability or a security concern, email [email protected].
Audit reports
Core architecture
DAO contracts
Security contest
Sherlock Security Contest
Date: 1 August 2025 to 30 September 2025
Scope: Full protocol
Hybrid Vaults
Fee distributor
Audit #9: Firepan AI Audit
Date: 23 April 2026 to 26 April 2026
Scope: FeeDistributor
AMM and LT hardening, YBLendingOracle
Audit #10: ChainSecurity
Date: 24 July 2026
Scope: AMM and LT hardening, YBLendingOracle, YBPriceProxy (delta review)
Related
- Contract addresses: the deployed address of each audited contract.
- Risk disclaimer: the risks that remain after audits.