Findings on v3-v2 strategies yearn

# SEVERITY CLASS * **Critic**: Significant loss of funds, freezing of user actions or the strategy's harvest/tend cycle, vault reporting an undesired loss * **High**: Loss of funds, but the attack is rare and the funds at risk are not significant. Loss of yield in considerable amounts and freezing of yield in the harvest/tend cycle. * **Medium**: Loss of funds, but the attack is very rare or highly complex, or the potential loss of funds is relatively lower. This includes when a function doesn't work as intended, especially if it's used in the system's state (not just a view function for display purposes). * **Low**: Any issue that doesn't result in a loss of funds but causes a function not to work as intended (some view functions, perhaps). * **Informational**: Providing information that we should be aware of, such as new curve pools using WETH instead of ETH or details about the Vyper compiler version, etc. ## LevSonne Update (https://github.com/yearn/yearn-strategies/issues/587) (October) NONE ## Pearl Compounder (https://github.com/yearn/yearn-strategies/issues/577) (October) LOW https://github.com/yearn/yearn-strategies/issues/577#issuecomment-1750690975 MEDIUM https://github.com/yearn/yearn-strategies/issues/577#issuecomment-1750730942 ## Maker DSR V3 Router Strategy (https://github.com/yearn/yearn-strategies/issues/579) (September) LOW https://github.com/yearn/yearn-strategies/issues/579#issuecomment-1716627806 MEDIUM https://github.com/yearn/yearn-strategies/issues/579#issuecomment-1716634859 ## st-ETH Accumulator Upgrade Review (https://github.com/yearn/yearn-strategies/issues/584) (September) NONE ## LST stMATIC/stETH Polygon/Mainnet (https://github.com/yearn/yearn-strategies/issues/570) (September) MEDIUM https://github.com/yearn/yearn-strategies/issues/570#issuecomment-1721279205 MEDIUM https://github.com/yearn/yearn-strategies/issues/570#issuecomment-1721286126 INFORMATIONAL https://github.com/yearn/yearn-strategies/issues/570#issuecomment-1721316903 IMPORTANT REMINDER https://github.com/yearn/yearn-strategies/issues/570#issuecomment-1721326295 ## Morpho AAVE V2, V3 Strategy (https://github.com/yearn/yearn-strategies/issues/542) (September) MEDIUM https://github.com/yearn/yearn-strategies/issues/542#issuecomment-1658377650 ## yBAL Zap Update Review (https://github.com/yearn/yearn-strategies/issues/568) (September) NONE ## Compound Lender v3 (https://github.com/yearn/yearn-strategies/issues/534) (Aug) LOW https://github.com/yearn/yearn-strategies/issues/534#issuecomment-1680448046 LOW https://github.com/yearn/yearn-strategies/issues/534#issuecomment-1677144299 ## AAVE V3 Lender V3 Strategy (https://github.com/yearn/yearn-strategies/issues/533) (Aug) MEDIUM https://github.com/yearn/yearn-strategies/issues/533#issuecomment-1692111055 ## yLQTY vault and strategy (https://github.com/yearn/yearn-strategies/issues/491) (July) LOW https://github.com/yearn/yearn-strategies/issues/491#issuecomment-1620083046 IMPORTANT REMINDER https://github.com/yearn/yearn-strategies/issues/491#issuecomment-1630514579 ## yCRV Zap V3 (https://github.com/yearn/yearn-strategies/issues/468) (July) NONE ## ERC4626 Router Review (https://github.com/yearn/yearn-strategies/issues/545) (July) NONE ## vl-yCRV Rewards Distributor Review (https://github.com/yearn/yearn-strategies/issues/556) (July) NONE ## Maker DSR V3 (https://github.com/yearn/yearn-strategies/issues/541) (July) NONE ## Velodrome V2 Factory (https://github.com/yearn/yearn-strategies/issues/552) (June) LOW https://github.com/yearn/yearn-strategies/issues/552#issuecomment-1611349073 LOW https://github.com/yearn/yearn-strategies/issues/552#issuecomment-1611768899 ## lp-yCRV Recovery (https://github.com/yearn/yearn-strategies/issues/549) (June) HIGH https://github.com/yearn/yearn-strategies/issues/549#issuecomment-1608203226 ## sUSD Curve Pool (https://github.com/yearn/yearn-strategies/issues/458) (March) CRITIC https://github.com/yearn/yearn-strategies/issues/458#issuecomment-1492691773 LOW https://github.com/yearn/yearn-strategies/issues/458#issuecomment-1466503857 ## yETH Internal Security Review (https://github.com/yearn/yearn-strategies/issues/519) (May) INFORMATIONAL https://github.com/yearn/yearn-strategies/issues/519#issuecomment-1528779022 LOW https://github.com/yearn/yearn-strategies/issues/519#issuecomment-1537335426 LOW https://github.com/yearn/yearn-strategies/issues/519#issuecomment-1526423036 LOW https://github.com/yearn/yearn-strategies/issues/519#issuecomment-1526354224 LOW https://github.com/yearn/yearn-strategies/issues/519#issuecomment-1532258616 LOW https://github.com/yearn/yearn-strategies/issues/519#issuecomment-1528755509 ## yETH Bootstrap Review (https://github.com/yearn/yearn-strategies/issues/527) (May) CRITIC https://github.com/yearn/yearn-strategies/issues/527#issuecomment-1540041354 LOW https://github.com/yearn/yearn-strategies/issues/527#issuecomment-1540043512 ## Flux Lender V2 Review (https://github.com/yearn/yearn-strategies/issues/528) (May) NONE ## Balancer Aura Factory Mainteneance (https://github.com/yearn/yearn-strategies/issues/518) (May) NONE ## yBAL Review (https://github.com/yearn/yearn-strategies/issues/467) (May) NONE ## Convex 3crypto Arbitrum Review (https://github.com/yearn/yearn-strategies/issues/460) (May) MEDIUM https://github.com/yearn/yearn-strategies/issues/460#issuecomment-1469822896 ## Curve Factory Mainteneance (https://github.com/yearn/yearn-strategies/issues/517) (May) NONE MEDIUM https://github.com/yearn/yearn-strategies/issues/467#issuecomment-1454711981 ## Gearbox V2 Strategy (https://github.com/yearn/yearn-strategies/issues/413) (April) CRITIC https://github.com/yearn/yearn-strategies/issues/413#issuecomment-1528830149 ## Maker V3 Delta Neutral Strategies (https://github.com/yearn/yearn-strategies/issues/442) (February) CRITIC https://github.com/yearn/yearn-strategies/issues/442#issuecomment-1435060131 CRITIC https://github.com/yearn/yearn-strategies/issues/442#issuecomment-1435072430 CRITIC https://github.com/yearn/yearn-strategies/issues/442#issuecomment-1444589123 CRITIC https://github.com/yearn/yearn-strategies/issues/442#issuecomment-1446404176 ## Stargate Mitigation Review, port to 0.4.5 (https://github.com/yearn/yearn-strategies/issues/415) (February) CRITIC https://github.com/yearn/yearn-strategies/issues/415#issuecomment-1425916734 CRITIC https://github.com/yearn/yearn-strategies/issues/415#issuecomment-1438589980 CRITIC https://github.com/yearn/yearn-strategies/issues/415#issuecomment-1440939752 HIGH https://github.com/yearn/yearn-strategies/issues/415#issuecomment-1442590675 MEDIUM https://github.com/yearn/yearn-strategies/issues/415#issuecomment-1461881920 # TABLE | Project Name | Date (Month) | Findings | | --- | --- | --- | | [LevSonne Update](https://github.com/yearn/yearn-strategies/issues/587) (October) | October | NONE | | [Pearl Compounder](https://github.com/yearn/yearn-strategies/issues/577) (October) | October | [LOW](https://github.com/yearn/yearn-strategies/issues/577#issuecomment-1750690975), [MEDIUM](https://github.com/yearn/yearn-strategies/issues/577#issuecomment-1750730942) | | [Maker DSR V3 Router Strategy](https://github.com/yearn/yearn-strategies/issues/579) (September) | September | [LOW](https://github.com/yearn/yearn-strategies/issues/579#issuecomment-1716627806), [MEDIUM](https://github.com/yearn/yearn-strategies/issues/579#issuecomment-1716634859) | | [st-ETH Accumulator Upgrade Review](https://github.com/yearn/yearn-strategies/issues/584) (September) | September | NONE | | [LST stMATIC/stETH Polygon/Mainnet](https://github.com/yearn/yearn-strategies/issues/570) (September) | September | [MEDIUM](https://github.com/yearn/yearn-strategies/issues/570#issuecomment-1721279205), [MEDIUM](https://github.com/yearn/yearn-strategies/issues/570#issuecomment-1721286126), [INFORMATIONAL](https://github.com/yearn/yearn-strategies/issues/570#issuecomment-1721316903), [IMPORTANT REMINDER](https://github.com/yearn/yearn-strategies/issues/570#issuecomment-1721326295) | | [Morpho AAVE V2, V3 Strategy](https://github.com/yearn/yearn-strategies/issues/542) (September) | September | [MEDIUM](https://github.com/yearn/yearn-strategies/issues/542#issuecomment-1658377650) | | [yBAL Zap Update Review](https://github.com/yearn/yearn-strategies/issues/568) (September) | September | NONE | | [Compound Lender v3](https://github.com/yearn/yearn-strategies/issues/534) (Aug) | August | [LOW](https://github.com/yearn/yearn-strategies/issues/534#issuecomment-1680448046), [LOW](https://github.com/yearn/yearn-strategies/issues/534#issuecomment-1677144299) | | [AAVE V3 Lender V3 Strategy](https://github.com/yearn/yearn-strategies/issues/533) (Aug) | August | [MEDIUM](https://github.com/yearn/yearn-strategies/issues/533#issuecomment-1692111055) | | [yLQTY vault and strategy](https://github.com/yearn/yearn-strategies/issues/491) (July) | July | [LOW](https://github.com/yearn/yearn-strategies/issues/491#issuecomment-1620083046), [IMPORTANT REMINDER](https://github.com/yearn/yearn-strategies/issues/491#issuecomment-1630514579) | | [yCRV Zap V3](https://github.com/yearn/yearn-strategies/issues/468) (July) | July | NONE | | [ERC4626 Router Review](https://github.com/yearn/yearn-strategies/issues/545) (July) | July | NONE | | [vl-yCRV Rewards Distributor Review](https://github.com/yearn/yearn-strategies/issues/556) (July) | July | NONE | | [Maker DSR V3](https://github.com/yearn/yearn-strategies/issues/541) (July) | July | NONE | | [Velodrome V2 Factory](https://github.com/yearn/yearn-strategies/issues/552) (June) | June | [LOW](https://github.com/yearn/yearn-strategies/issues/552#issuecomment-1611349073), [LOW](https://github.com/yearn/yearn-strategies/issues/552#issuecomment-1611768899) | | [lp-yCRV Recovery](https://github.com/yearn/yearn-strategies/issues/549) (June) | June | [HIGH](https://github.com/yearn/yearn-strategies/issues/549#issuecomment-1608203226) | | [sUSD Curve Pool](https://github.com/yearn/yearn-strategies/issues/458) (March) | March | [CRITIC](https://github.com/yearn/yearn-strategies/issues/458#issuecomment-1492691773), [LOW](https://github.com/yearn/yearn-strategies/issues/458#issuecomment-1466503857) | | [yETH Internal Security Review](https://github.com/yearn/yearn-strategies/issues/519) (May) | May | [INFORMATIONAL](https://github.com/yearn/yearn-strategies/issues/519#issuecomment-1528779022), [LOW](https://github.com/yearn/yearn-strategies/issues/519#issuecomment-1537335426), [LOW](https://github.com/yearn/yearn-strategies/issues/519#issuecomment-1526423036), [LOW](https://github.com/yearn/yearn-strategies/issues/519#issuecomment-1526354224), [LOW](https://github.com/yearn/yearn-strategies/issues/519#issuecomment-1532258616), [LOW](https://ithub.com/yearn/yearn-strategies/issues/519#issuecomment-1528755509) | | [yETH Bootstrap Review](https://github.com/yearn/yearn-strategies/issues/527) (May) | May | [CRITIC](https://github.com/yearn/yearn-strategies/issues/527#issuecomment-1540041354), [LOW](https://github.com/yearn/yearn-strategies/issues/527#issuecomment-1540043512) | | [Flux Lender V2 Review](https://github.com/yearn/yearn-strategies/issues/528) (May) | May | NONE | | [Balancer Aura Factory Maintenance](https://github.com/yearn/yearn-strategies/issues/518) (May) | May | NONE | | [yBAL Review](https://github.com/yearn/yearn-strategies/issues/467) (May) | May | NONE | | [Convex 3crypto Arbitrum Review](https://github.com/yearn/yearn-strategies/issues/460) (May) | May | [MEDIUM](https://github.com/yearn/yearn-strategies/issues/460#issuecomment-1469822896) | | [Curve Factory Maintenance](https://github.com/yearn/yearn-strategies/issues/517) (May) | May | NONE | | [Gearbox V2 Strategy](https://github.com/yearn/yearn-strategies/issues/413) (April) | April | [CRITIC](https://github.com/yearn/yearn-strategies/issues/413#issuecomment-1528830149) | | [Maker V3 Delta Neutral Strategies](https://github.com/yearn/yearn-strategies/issues/442) (February) | February | [CRITIC](https://github.com/yearn/yearn-strategies/issues/442#issuecomment-1435060131), [CRITIC](https://github.com/yearn/yearn-strategies/issues/442#issuecomment-1435072430), [CRITIC](https://github.com/yearn/yearn-strategies/issues/442#issuecomment-1444589123), [CRITIC](https://github.com/yearn/yearn-strategies/issues/442#issuecomment-1446404176) | | [Stargate Mitigation Review, port to 0.4.5](https://github.com/yearn/yearn-strategies/issues/415) (February) | February | [CRITIC](https://github.com/yearn/yearn-strategies/issues/415#issuecomment-1425916734), [CRITIC](https://github.com/yearn/yearn-strategies/issues/415#issuecomment-1438589980), [CRITIC](https://github.com/yearn/yearn-strategies/issues/415#issuecomment-1440939752), [HIGH](https://github.com/yearn/yearn-strategies/issues/415#issuecomment-1442590675), [MEDIUM](https://github.com/yearn/yearn-strategies/issues/415#issuecomment-1461881920) |