---
# System prepended metadata

title: Security Team January Updates

---

# Security Team January Updates

- DDs & Security reviews
    - YearnBoostedStaker: https://github.com/yearn/yearn-strategies/issues/614
    - veYFI Recurring Review (finished): https://github.com/yearn/yearn-strategies/issues/610
    - Spark lender v3
    https://github.com/yearn/yearn-strategies/issues/627

- Bug bounty report
    - Triaged veYFI bounty report. 
- Risk Framework On-chain
    - Updated the scores for v3 strategies and updated the issues with the score transaction links.
    - Added tags for some v3 strategies.
- Lead Retros and action plans
    - LP incident
    - Lender Borrower incident
- Other
    - Started a Github repository (template) with multiple features to guide yTeams in using Foundry, invariant tests, fuzzing, fork, and static analyzers in the Github actions.
    - Added docs on testing for security considerations
    https://docs.yearn.fi/security/testing
    - Working on a new V3 strategy security checklists: https://hackmd.io/btMxqcktREOIMjVwcgjRtg 
    - Read veYFI code to add invariant tests and fuzzing using the Github template.
    - Attended discussion about the ChainSec retainer deal.
    - Prepared budget request v4 for the new period.