Yearn

A critical security tool for multisig wallet signers has emerged as a potential safeguard against major exploits. **The Tool** - [safe-tx-hashes-util](https://github.com/pcaversaccio/safe-tx-hashes-util) is recommended for all multisig signers - Designed to verify transaction hashes before signing - Could have prevented the $1.4B ByBit hack **Why Multisig Matters** - Splits control across multiple signatures (e.g., 2-of-3 required) - Eliminates single points of failure - Essential for DAOs, teams, and large funds **Popular Solutions** - Gnosis Safe - Argent - Compatible across Ethereum and EVM chains Multisig wallets aren't just for large organizations—they're a fundamental security layer for anyone managing shared crypto assets.

Yearn has structured its yChad multisig with a notably decentralized approach: only 1 of 9 signers is from Yearn itself, while the other 8 are recognized figures from across the space. This configuration positions yChad as potentially the most decentralized multisig in DeFi. The multisig serves as Yearn's primary security mechanism, managing treasury operations and critical protocol actions. **Key characteristics:** - 9-signer setup with minimal internal control - Manages mission-critical treasury and protocol functions - Slower transaction signing provides additional security through extended review periods The deliberate delay in transaction execution allows multiple parties to scrutinize actions before implementation. Full technical details available in [Yearn's documentation](https://docs.yearn.fi/developers/security/multisig).

Yearn Finance has released guidance on proper multisig wallet configuration, emphasizing that simply using a multisig isn't sufficient protection. The protocol outlined three essential steps for effective multisig strategy, though specific details weren't provided in the announcement. The team stressed that proper configuration can mean the difference between security and exploitation. **Key Points:** - Multisig setup requires careful strategic planning - Configuration details matter as much as using a multisig - Three specific steps can prevent common security issues - Additional DeFi security guidance promised Yearn indicated this represents just one aspect of comprehensive DeFi security, with more educational content planned for release.

Yearn Finance has begun distributing revenues to YFI token holders who stake their tokens. Users can stake through three methods: - **Direct veYFI staking** - Lock YFI tokens to receive veYFI and earn rewards - **Liquid locker protocols** - Stake through platforms like 1up, Cove, or StakeDAO - **Boosted vault deposits** - Earn enhanced yields on vault deposits **How rewards work:** Every two weeks, veYFI holders vote to direct dYFI rewards to specific vaults. Your reward rate depends on your veYFI balance: - Base rate: 10% of possible rewards (1x boost) with no veYFI - Maximum: 100% of rewards (10x boost) with sufficient veYFI Liquid lockers allow YFI holders to rent out their voting power to vault depositors. Depositors pay a small fee but receive significantly higher yields through borrowed boost power. Rewards are paid in dYFI, which can be converted to YFI or sold on the market. Vault rewards auto-compound, while dYFI rewards require manual claiming through the liquid locker interface. A [boost calculator](https://docs.yearn.fi/contributing/governance/veyfi-calculator) helps users determine optimal veYFI amounts for their deposits.

**Yearn's OEV-boosted USDC vault on Morpho has received an A rating**, joining highly-rated vaults from Stakehouse and Gauntlet. The vault utilizes **Oracle Extractable Value (OEV) technology** to recapture value that would otherwise be lost to MEV bots, redirecting it back to depositors as enhanced yield. **Key highlights:** - A-grade rating validates vault's risk management and performance - Part of Yearn's expanding curation services on Morpho - OEV-boosting technology provides sustainable yield enhancement - Previously surpassed $10M in deposits milestone Yearn continues to demonstrate its **best-in-class vault curation and monitoring capabilities** across the Morpho ecosystem, offering institutional-grade DeFi products with enhanced risk assessment.

**Yearn Finance successfully recovered 857.49 pxETH worth $2.39 million** through a coordinated effort with Plume and Dinero teams. **Key Details:** - Recovery operation targeted yETH-related assets - Transaction confirmed on Ethereum blockchain - **Recovery efforts continue actively** - All recovered assets will be returned to affected depositors **Important Security Note:** Users should remain vigilant against impersonators claiming to represent Yearn Finance. The recovery represents significant progress in addressing the exploit damage, with ongoing efforts to retrieve additional funds for affected users.

**Yearn Finance suffered a $9 million exploit** on November 30 at 21:11 UTC targeting the yETH stableswap pool. **Damage breakdown:** - $8M lost from the impacted stableswap pool - $0.9M from the yETH-WETH pool on Curve - **Total: $9 million** The attack involved minting large amounts of yETH through a vulnerability in custom stableswap code. **Yearn V2/V3 vaults remain unaffected** and secure. **Response efforts:** - War room activated with SEAL911 and ChainSecurity - Full postmortem investigation underway - Complexity similar to recent Balancer hack Yearn emphasized that **no other products use similar code** to the exploited contract. The team is conducting thorough analysis and will implement lessons learned. Affected users can seek assistance through Yearn's [Discord support](https://discord.gg/yearn/). The protocol maintains detailed [security documentation](https://docs.yearn.fi/developers/security/#third-party-audits) covering audit history and vulnerability disclosure processes.

**Yearn has confirmed that its Curated Morpho vaults remain secure** following an investigation into the yETH LST stableswap pool incident. Key safety confirmations: - **yETH/st-yETH tokens were not used as collateral** on any markets - All Curated Morpho vaults are operating normally - No user funds in these vaults were at risk This follows earlier reports of an incident involving the yETH LST stableswap pool, which prompted the investigation. **Yearn's V2 and V3 vaults were already confirmed as unaffected** by the initial incident. The confirmation provides clarity for users of Yearn's Morpho integration, ensuring that collateral exposure was limited and vault operations continue without disruption.

**Yearn's new USDS vault through Term Labs is gaining traction**, offering depositors an average **6% yield** through a dual-strategy approach. The vault operates by: - Earning **7.5% APY** on ~69% of deposits through fixed-rate lending - Generating **4.8% APY** on remaining funds via Yearn's USDS vault - Providing additional **Cap Money points** on collateral Term Labs uses **sealed-bid auctions** every ~4 days to match lenders with borrowers seeking loans against blue-chip collateral. Currently serving a **$445K USDS loan** for 45 days at 7.5% annualized rate, backed by fixed-duration cUSD collateral. **Idle funds aren't wasted** - they're automatically allocated to Yearn's USDS vault until the next auction, maximizing yield efficiency. Yearn's DAI-2 vault also participates by converting DAI to USDS at 1:1 ratio before depositing into the Term strategy.

**Yearn Finance** is hosting a Twitter Space discussion focused on bringing **transparency, security, and better risk practices** back to DeFi markets. The conversation centers around the question: *How do we make DeFi Cypherpunk again?* **Featured Partners:** - @LiquityProtocol - @asymmetryfin The discussion aims to address current challenges in decentralized finance and explore solutions for returning to DeFi's original principles of transparency and security. [Set a reminder for the Twitter Space](http://x.com/i/spaces/1vAGR)