yearn.finance
YFI
Evaluation Score
Overall rating on a scale of 0-10
Dimension Breakdown
AI Analysis
Comprehensive evaluation of the token
Yearn.finance (YFI) is a pioneer in DeFi yield aggregation, featuring strong governance (8.0/10) with multi-DAO structures and active proposals, solid tokenomics (7.5/10) with a capped supply and buyback-and-burn mechanics, and continued active development (7.0/10). However, the protocol faces notable market headwinds, competitive yield pressures, and severe historical security challenges (3.5/10). The overall score is capped at 5.0 due to a qualifying red-flag exploit within the last 24 months, as documented in the security review: "November 30, 2025 — yETH StableSwap infinite mint: an attacker abused a math bug in the legacy yETH contract to mint trillions of yETH tokens and drain the pool; reports place the loss at ~$9M initially reported [1][8], with BlockSec tallying Yearn's December losses at 'nearly $10 million' across the yETH pool and legacy contracts [3]." Despite quick governance reimbursement of ~$3.2M and clean audits on V3 contracts, legacy contract vulnerabilities and protocol-level exploits remain a material risk.
Development Activity
Code updates and developer engagement
Community Support
Social media presence and community engagement
Tokenomics
Supply, distribution, and utility
Market & Use Case
Value proposition and competitive landscape
Team & Governance
Team background and project governance
Security & Audits
Security history and audit status
About yearn.finance (YFI)
yearn.finance (YFI) is a decentralized finance (DeFi) yield-aggregation protocol operating on the Ethereum blockchain. Launched in July 2020 by Andre Cronje, the protocol automates yield-generation strategies across various DeFi platforms through products such as Vaults, Earn, Zap, and Cover. YFI serves as the native governance token, originally distributed through a fair liquidity mining launch with no pre-mine or initial team allocation. In February 2021, governance proposal YIP-57 increased the capped total supply from 30,000 to 36,666 tokens to fund contributor incentives and the treasury. The protocol utilizes a buyback-and-burn mechanism funded by protocol performance fees to reduce circulating supply.
Protocol governance operates through a decentralized multi-DAO framework governed by token holders using mechanisms such as veYFI and stYFI. Development activity remains ongoing, including documentation updates, maintenance of the yearn-sdk, the deployment of ERC-4626-compliant V3 Vaults audited by ChainSecurity, and contributor proposals aimed at routing revenue to token stakers. However, the protocol faces significant market competition and has experienced an ecosystem contraction, with total value locked (TVL) declining by approximately 92% from its historical highs alongside an unrecovered price drawdown of nearly 70% over a one-year period reported in late 2025.
yearn.finance has suffered multiple security incidents across its legacy contracts, totaling approximately $20.3 million in cumulative losses. In February 2021, a misconfigured mint contract allowed an attacker to drain roughly $11.5 million in stablecoins from the yUSDT vault. On November 30, 2025, an infinite mint vulnerability in the legacy yETH StableSwap pool resulted in losses reported between $9 million and $10 million, leading protocol governance to approve a $3.2 million USDC reimbursement plan for affected users while modern V3 vaults remained unaffected. Shortly after, on December 16, 2025, another legacy iEarn vault was exploited for approximately $300,000 in ether.