Yearn Finance is a DeFi yield aggregator that automates capital allocation across lending and liquidity protocols via smart contract Vaults, with its V3 architecture, stYFI revenue sharing, and cross-chain yvUSD marking its current evolution.
+2 sources across the wider coverage universe
Birch Hill and Groma launch first institutional onchain REIT lending market, enabling $150M tokenized real estate to back USDC loans via Morpho-Yearn stack2026-03
Yearn developer Wavey launches bot to investigate exploits based on Takopi2026-05
Yearn gets two new security reports covering stYFI, Yearn Builders Collective expansion, and a new on-chain team management system2026-05
Inverse founder Nour Haridy chronicles DeFi's builder DNA — from Cronje's weekly protocol drops to Solidly's rebirth as Aerodrome2026-04
This is a final call to exit the Flex unaudited markets2026-03
A yETH exploit post-mortem was published by banteg2025-12
Arrr, now let me chart this course and write the pillar page!
A decentralized yield aggregator built on Ethereum, Yearn Finance automates the process of moving deposited assets across DeFi lending and liquidity protocols to capture the best available returns — removing the need for users to actively manage their own strategies.
What Yearn Does
Most DeFi yield opportunities require constant attention: rates shift, incentives expire, and manually rebalancing across protocols is both time-consuming and gas-expensive. Yearn addresses this by pooling user deposits into Vaults — smart contracts that execute curated yield strategies on behalf of depositors. A user deposits an asset (say, USDC or ETH), receives a yield-bearing receipt token, and the vault handles the rest: allocating capital, harvesting rewards, compounding gains, and rebalancing as conditions change.
The protocol launched in July 2020, created by developer Andre Cronje with an unusual ethos: no venture capital, no pre-mine, no founder allocation. Its governance token, YFI, was distributed entirely to early liquidity providers over roughly ten days — a launch structure that made it a landmark event in DeFi history and influenced how subsequent protocols thought about fair launches.
Birch Hill and Groma launch first institutional onchain REIT lending market, enabling $150M tokenized real estate to back USDC loans via Morpho-Yearn stack
$150M in tokenized multi-family housing as Morpho collateral, but the liquidation engine assumes atomic seize-and-sell — try that with a 3-unit in Dorchester. LTVs have to be so conservative that liquidation never triggers, which caps the capital efficiency that makes DeFi lending attractive vs. trad RE debt in the first place. Groma's fungible REIT structure at least gives you a thicker orderbook than individual property tokens, but whoever's running the oracle feed pricing illiquid RE in real-time is doing a LOT of heavy lifting.
Yearn readers click tokenomics overhauls and new yield wrappers far more than exploits, revealing that the audience treats YFI as an active yield-optimization platform to use — not a cautionary tale to observe.
How Vaults Work
A Yearn Vault is a smart contract that accepts a single asset, delegates capital to one or more strategies, and issues depositors a proportional share token representing their claim on the pooled assets plus accrued yield. Strategies are modular pieces of code that interact with external protocols — lending markets, liquidity pools, staking contracts — to generate returns.
V1 and V2 vaults tied each strategy to a single vault in a one-to-one relationship. This worked, but made it difficult to diversify risk across multiple yield sources simultaneously and created tight coupling between vault logic and strategy code.
V3 vaults, the current architecture, introduced a significant redesign. Every V3 vault and strategy is fully compliant with ERC-4626, the tokenized vault standard that Yearn developers helped draft. Strategies are now Tokenized Strategies: standalone ERC-4626 vaults that can plug into multiple parent vaults at once. The system uses an immutable proxy pattern, outsourcing standardized vault logic to a single implementation contract. This makes deploying a new strategy a relatively lightweight operation.
The design is intentionally permissionless. Anyone can write, deploy, and maintain a Yearn-compatible strategy without requiring endorsement from the core team. This shifts Yearn from a curated product into infrastructure — closer in spirit to Uniswap's open pool factory than to a managed fund.
The YFI Token and Governance
YFI is Yearn's governance token, with a capped supply of 36,666 tokens. Holders vote on protocol parameters, strategy endorsements, treasury allocations, and structural changes to the DAO through on-chain proposals hosted on Snapshot.
For most of its history, Yearn experimented with various value-accrual models for YFI, including a vote-escrow system (modeled loosely on Curve's veToken design) that saw limited adoption. In late 2025, governance passed YIP-88, a three-part overhaul that scrapped the veToken model and introduced stYFI — a staked version of YFI that entitles holders to 90% of all protocol revenue. At the time the proposal passed, Yearn was generating just under $200,000 per month in protocol earnings. The remaining 10% is directed to the DAO treasury for operations and contributor incentives, including a formalized pool of 1,700 YFI earmarked for long-term contributor retention.
stYFI launched in early 2026 and represents a meaningful shift in how Yearn aligns token holder incentives with protocol performance: rather than governance influence accruing to long-term lockers, revenue flows to anyone willing to stake.
Yearn developer Wavey launches bot to investigate exploits based on Takopi
17 minutes from tx hash to MAP/Butter root cause is close to useful IR latency: the bot identified the OmniService retry-hash issue, the 1e15 forged MAPO mint, the 1B MAPO dump for 52.21 ETH, and the 52.2 ETH Tornado leg. If Telegram-wired Codex agents can reliably turn arbitrary exploit txs into traces, fork tests, and follow-up queries, bug bounty desks and multisigs start competing on time-to-patch instead of postmortem polish. The hard part is trust: every AI-generated root cause needs calldata, state diffs, and replayable PoCs attached, or teams will ship confident nonsense under pressure.
- 01veYFI and vote-lock governance
The two-year wait for veYFI and the subsequent tokenomics overhaul debate drew readers tracking whether Yearn's governance model could evolve beyond Andre-era vote-escrow.
- 02New yield wrapper launches
yBOLD, yCRV Boosted Staker, yETH, yvUSD, and yBERA launches collectively dominate click volume, showing readers actively hunt deployable yield products.
- 03Berachain sub-DAO expansion
The Bearn Finance launch and yBERA/yHONEY products on Berachain signaled Yearn's multichain ambitions, attracting readers curious about new chain incentive farming.
- 04Stake DAO and sdYFI fee switch
The activation of fee distribution to sdYFI holders was the single most-clicked story, showing readers care most about who actually receives protocol revenue.
- 05Exploit response and bad debt
The yETH hack and Resupply bad-debt loan proposal drew readers focused on how Yearn absorbs losses and makes creditors whole.
- 06Andre Cronje's departure and legacy
Cronje's reflective post on his 2022 exit — citing regulatory caution and no financial gain — drew readers reassessing Yearn's founder narrative.
Key Products and Integrations
yvUSD: Cross-Chain Stablecoin Yield
Launched in January 2026, yvUSD is Yearn's most ambitious product deployment to date. It is a cross-chain V3 vault for USD-pegged assets — primarily USDC — that deploys capital across chains via bridge protocols like Circle's CCTP to access yield sources unavailable on Ethereum mainnet alone.
The vault charges zero management fees and zero performance fees. It runs nine active strategies simultaneously, including leveraged looping approaches that automate compounding of external incentives. Depositors can choose between a standard redemption mode or a Locked yvUSD mode, which enforces a 14-day cooldown and a 7-day withdrawal window in exchange for an additional yield boost sourced from vault fee revenue. The locked mode is analogous to a CD in traditional finance — slightly less liquid, meaningfully higher yield.
yvUSD's cross-chain routing is architecturally notable: it means Yearn's TVL figures no longer map neatly to a single chain's on-chain data, and users are exposed to bridge risk in addition to smart contract and strategy risk.
ySplitter
More recently, Yearn launched ySplitter, a product that allows depositors to earn vault yield denominated in a token different from what they deposited. Integrated with the Katana protocol, ySplitter routes yield payments through a swap layer so that, for example, a USDC depositor can receive their returns in ETH or another asset of their choice. This reduces friction for users who want yield exposure in a specific currency without managing additional swaps manually.
Curve and crvUSD
Yearn's relationship with Curve Finance is one of DeFi's more durable partnerships. Curve's Savings crvUSD (scrvUSD) — a yield-bearing version of Curve's native stablecoin — was built using Yearn's custom V3 Vaults. The yield on scrvUSD is funded by a portion of the interest paid by crvUSD minters, with Curve DAO acting as a policy-setting body over the rate. Yearn provides the vault infrastructure; Curve provides the yield source and the stablecoin. This integration made Yearn infrastructure rather than a standalone product from Curve's perspective — a model that has since extended to other partners.
Convex Finance, which launched in 2021 specifically to accumulate Curve's veCRV voting power, emerged as a competitive pressure on Yearn's own Curve-focused strategies. Both protocols compete for the same Curve liquidity provider tokens that confer voting weight and fee revenue. Over time the two protocols moved from zero-sum competition toward selective coordination: the Resupply Protocol, a joint subDAO between Convex and Yearn, allows users to deposit yield-bearing stablecoin positions from Curve Lend and Fraxlend to source additional liquidity, with both protocols sharing in the resulting TVL.
yETH and the Institutional Stack
yETH was an earlier Yearn product that pooled multiple liquid staking tokens into a single ETH-denominated yield position. In November 2025, the legacy yETH system was hit by a $9 million infinite-mint exploit targeting older contract code — a significant incident that underscored the persistent risk of maintaining long-lived, complex smart contract systems. The V3 codebase that replaced it has undergone audits by firms including ChainSecurity and MixBytes.
On the institutional side, Birch Hill and Groma launched what they described as the first institutional on-chain REIT lending market, using a Morpho-Yearn stack to enable $150 million in tokenized real estate to back USDC loans. This represents a meaningful expansion of Yearn's vault infrastructure into real-world asset collateral — a category that was largely theoretical two years ago.
Security Model and Trust Assumptions
Depositing into a Yearn Vault involves a layered set of trust assumptions that users should understand clearly:
1. Smart contract risk: Yearn's vault contracts, the individual strategy contracts, and any external protocols they interact with can contain bugs. V3's permissionless design means third-party strategies may have had less rigorous review than core Yearn code. Past exploits at Yearn — including a 2021 DAI vault exploit and the 2025 yETH incident — demonstrate this risk is non-theoretical.
2. Strategy risk: Each strategy interacts with external protocols. A failure in an underlying lending market or AMM pool affects Yearn depositors proportionally to their allocation.
3. Governance risk: Protocol parameters are changed through YFI holder votes. A governance attack or a low-participation vote could alter withdrawal conditions, fee structures, or strategy whitelists in ways unfavorable to depositors.
4. Bridge and cross-chain risk: Products like yvUSD that route capital across chains introduce bridge failure and censorship vectors that purely single-chain vaults do not carry.
Yearn publishes a public security repository with disclosure history and audit reports. The team has recently received new security reports covering stYFI specifically, and developer Wavey launched an automated bot to accelerate exploit investigation — a response to the broader trend of attackers leveraging AI to uncover novel vulnerabilities in DeFi protocols that traditional audits missed.
Yearn gets two new security reports covering stYFI, Yearn Builders Collective expansion, and a new on-chain team management system
One high and two medium findings across ~2.2k Vyper LOC is less scary than it sounds; the high was governance-weight distortion from a single ramping bucket, and Yearn responded by ripping the ramp out for four sequential epoch weights. That matters because stYFI is trying to move Yearn from 3.8% veYFI participation and offchain budget lore into 90% revenue share plus onchain P&L, so tiny accounting bugs become governance capture or claim-DoS surface. If Yearn keeps this audit cadence while TVL sits around $174M and revenue gets routed through splitters/yvUSDC, $YFI starts looking less like a nostalgia coin and more like a cash-flow coordination token.
- 2022-03milestone
Andre Cronje exits DeFi citing regulatory caution
- 2023-10launch
veYFI goes live after two years of anticipation
- 2023-11exploit
yETH infinite-mint exploit; liquidity sent to Tornado Cash
- 2023-11milestone
banteg publishes yETH exploit post-mortem
- 2023-11exploit
dYdX loses $9M in insurance fund via YFI market manipulation
- 2024-06launch
yCRV Boosted Staker launched; yield paid in ycrvUSD stablecoin
- 2024-09launch
YearnFi launches protocol-specific hubs
- 2025-02launch
Bearn Finance sub-DAO launches on Berachain
The Builders Collective and DAO Structure
Yearn operates through a distributed contributor model rather than a traditional corporate structure. The Yearn Builders Collective is an expansion of this model, aiming to onboard a wider pool of developers and protocol contributors under a structured incentive framework tied to the stYFI revenue stream. On-chain team management tooling has been rolled out to make contributor coordination more transparent and governance-linked.
The DAO's treasury holds a mix of YFI, stablecoins, and protocol-owned liquidity. Post-YIP-88, treasury management is more explicitly separated from protocol revenue distribution: stakers get revenue, the treasury gets a smaller allocation earmarked for operations, and contributor YFI allocations are structured as long-term retention rather than immediate issuance.
Risks and Considerations
Beyond the technical risks above, Yearn operates in a competitive market for yield. Protocols like Morpho, Aave, Fluid, and Pendle each capture portions of the yield aggregation and structured-yield market with different technical approaches. Yearn's comparative advantage lies in its vault infrastructure quality, its integrations (Curve, Convex, emerging RWA stacks), and its brand as one of the oldest yield protocols in DeFi. Whether that advantage translates into sustainable TVL growth depends partly on continued product innovation and partly on maintaining a clean security track record — which the 2025 yETH exploit complicated.
The permissionless V3 design is a double-edged sword: it enables rapid ecosystem expansion and allows external developers to build on Yearn's rails without permission, but it also means the Yearn brand can be associated with third-party strategies over which the core team has limited control.
- Smart-contractHigh
The yETH infinite-mint exploit and subsequent Tornado Cash liquidity movement demonstrated that Yearn's complex vault architecture remains a high-value attack surface.
- GovernanceMedium
Ongoing tokenomics debates — shifting from vote-escrow to vote-lock, oYFI buybacks, and yLockers — indicate governance is active but unsettled, creating execution risk.
- LiquidityMedium
yCRV's prolonged depeg and eventual recovery illustrate that Yearn wrappers can suffer sustained illiquidity when underlying peg mechanisms face stress.
- MarketHigh
The $9M dYdX insurance fund loss from alleged YFI market manipulation shows that thin YFI liquidity makes the token susceptible to coordinated price attacks.
- CentralizationMedium
Yearn's reliance on a small core developer team (banteg, Wavey, Wavesahn) and sub-DAO expansion without clear on-chain enforcement creates key-person concentration risk.
- RegulatoryMedium
Andre Cronje's stated reason for his 2022 exit was regulatory caution, and Yearn's yield products spanning multiple chains attract ongoing scrutiny as potential unregistered securities.
Outlook
Yearn enters mid-2026 in a period of deliberate structural consolidation. The stYFI revenue-sharing model provides a clearer incentive alignment than any previous tokenomics iteration. The yvUSD cross-chain vault and ySplitter represent genuine product differentiation rather than incremental iteration. And the crvUSD savings integration positions Yearn vault infrastructure as a building block for other protocols rather than solely a consumer-facing product.
The near-term questions center on security — whether the AI-driven auditing paradigm the team is experimenting with can keep pace with increasingly sophisticated attacker tooling — and on whether the permissionless V3 ecosystem generates enough organic strategy development to grow TVL without centralized coordination. If both hold, Yearn's vault standard could become as foundational to yield infrastructure as Curve's AMM math became to stablecoin liquidity.
Latest Yearn news
Birch Hill and Groma launch first institutional onchain REIT lending market, enabling $150M tokenized real estate to back USDC loans via Morpho-Yearn stackYearn developer Wavey launches bot to investigate exploits based on TakopiYearn gets two new security reports covering stYFI, Yearn Builders Collective expansion, and a new on-chain team management systemInverse founder Nour Haridy chronicles DeFi's builder DNA — from Cronje's weekly protocol drops to Solidly's rebirth as AerodromeThis is a final call to exit the Flex unaudited marketsA yETH exploit post-mortem was published by bantegCommunity notes
Spot something off or out of date? Drop a note. Editors review topic notes daily and roll accepted fixes into the explainer — contributors are recognized in the monthly $SQUID drop.
Loading notes…