---
# System prepended metadata

title: Security Team October Updates

---

# Security Team October Updates

- DDs & Security reviews
    - Tangible: https://github.com/yearn/yearn-strategies/issues/573
    - DYFI PR: https://github.com/yearn/veYFI/pull/230
    - v3 Router https://github.com/yearn/yearn-strategies/issues/579
    - Aave V3 Lender: small changes due to new dependency `tokenized-strategy` release (v3.0.1)
    - Convex Frax Strategy Fix: https://github.com/yearn/yearn-strategies/issues/561
    - Pearl Compounder: https://github.com/yearn/yearn-strategies/issues/577
- V3 Security & Template
    - Add Experts & Test Coverage Sections: https://github.com/yearn/yearn-strategies/pull/597
- Immunefi Bounty Reports
    - Triage bounties from immunefi.
- Risk Framework
    - On-chain
        - Improved smart contracts design to support multi networks.
        - Tested with v2 and v3 strategies.
        - Deployed Risk Framework on-chain contracts on Polygon.
        - Developed subgraph for the risk framework contracts.
        - Created a script to get the differences between the RF off-chain (yDaemon) vs on-chain.
        - Add copyScores function: https://github.com/yearn/risk-framework/pull/8
        - Made both Github repositories public and transferred to the Yearn organization.
            - Risk Framework: https://github.com/yearn/risk-framework
            - Risk Framework Subgraph: https://github.com/yearn/risk-framework-subgraph
            - Subgraph: https://thegraph.com/hosted-service/subgraph/yearn/yearn-risk-framework
    - CLI 
        - Support heatmap graph
        - Support risk group data commands
- Others
    - Multi-chain Factories: Created subgraph to query new vaults created dynamically (wip).
    - Prepared Security Team Budget Request v3.
    - Prepared Security Team Updates Presentation.
