---
# System prepended metadata

title: Security Team November Updates

---

# Security Team November Updates

- DDs & Security reviews
    -   Compound V3 Lender Borrower (V3 strategy): https://github.com/yearn/yearn-strategies/issues/572
    -   yPrisma: https://github.com/yearn/yearn-strategies/issues/602
    -   Stargate Staker (V3 strategy, ongoing): https://github.com/yearn/yearn-strategies/issues/535
    -   yETH Governance (ongoing): https://github.com/yearn/yearn-strategies/issues/596
    - yPrisma Reviews:
        - Issue: https://github.com/yearn/yearn-strategies/issues/602
        - yPrisma Cleanup: https://github.com/wavey0x/yearn-prisma/pull/4
        - yPrisma Proxy and Minter: https://github.com/wavey0x/yearn-prisma/commit/849fa35cbfa4a03b9905e323841f5437c70443b6
    - veYFI redemption oracle updates
        https://github.com/yearn/veYFI/pull/232#event-11125437515
- Bounty Reports
    - Triage bounties from immunefi.
    - veYFI gauges APR manipulation issued triaged and closed.
    - Coordinate preventive actions on curve pool oracle report issue and help update Redemption contract for veYFI.
- Risk Framework
    - On-chain
        - Implemented `copyScores` function: https://github.com/yearn/risk-framework/pull/8
        - Supported active/inactive targets: https://github.com/yearn/risk-framework/pull/9
        - Updated docs and scripts: https://github.com/yearn/risk-framework/pull/10
        - Deployed new ORF version with the new improvements. More info [here](https://github.com/yearn/risk-framework/blob/develop/DEPLOYMENTS.md#riskframework).
        - Migrated ~250 scores from yDaemon to the new contract.
        - Supported new changes in the subgraph: https://github.com/yearn/risk-framework-subgraph/pull/2
        - Deployed new Subgraph version [here](https://thegraph.com/hosted-service/subgraph/yearn/yearn-risk-framework).
- Others
    - Collaborating with strategist (Val) for the Stargate Staker strategy. Writing comprehensive tests for edge cases: https://github.com/0xValJohn/tokenized-strategy-foundry-mix/pull/1
    - Giza Call: PoC is used for analyzing risk datasets in a model.
