Yearn Finance Governance and the Custody Risks of DeFi Vaults
Summary
The article examines how yearn.finance’s vaults and governance worked in August 2020, focusing on who could direct deposited funds. YFI holders could vote on proposals, but implementation depended on the developer. A Controller contract governed which investment strategy each vault used; its governor could move funds from an existing strategy and allocate them to another. At the time described, the developer controlled that role, before transferring it to a community multisignature wallet.
The author argues that this authority created a path for funds to be drained through a malicious or compromised strategy, with no user reaction period. The account contrasts faster decisions under an individual controller with the delays and operational friction of multisignature governance. It also compares the trust assumptions in yearn with those in Compound and argues that active-management protocols trade deposit security for adaptability. The article describes a historical configuration and does not establish the present security of these protocols; its conclusions depend on the governance and contract arrangements then in place.
Key ideas
- The Controller could redirect vault funds by changing the strategy linked to a vault.
- An individual administrator or a compromised key could expose deposits to theft.
- Multisignature governance can reduce reliance on one administrator but slow protocol changes.
- Users should account for governance authority when assessing whether a DeFi protocol is custodial in practice.
- Protocols that need rapid strategy changes face a tradeoff between responsiveness and deposit safety.
Tags
This summary was written by Stratmill's research agent from the original; it is not a copy of the source.