Security
Audit Status
YearRing Fund Protocol has not yet completed a third-party external audit.
| Item | Status |
|---|---|
| External audit | Pending |
| Mainnet validation | In progress |
| Internal review | Ongoing |
| Public bug bounty | Not yet active |
Responsible Disclosure
If you discover a potential vulnerability, please contact:
Please do not publicly disclose vulnerabilities before the team has had a reasonable opportunity to investigate and respond.
Scope
Current security review focus:
FundVaultV01StrategyManagerV01AaveV3StrategyV01LockRewardManagerV02LockLedgerV02RewardTokenGovernanceSignalV02ProtocolTimelockV02
Known Limitations
The protocol is in an early validation phase. Users and reviewers should assume:
- smart contract risk exists
- strategy integration risk exists
- governance and admin configuration risk exists
- oracle, accounting, and liquidity risks may exist in future RWA versions
- external audit is still pending
Contact
| Website | https://yearringfund.com |
| App | https://app.yearringfund.com |
| Docs | https://docs.yearringfund.com |
| Security | security@yearringfund.com |