Yearn — yvUSDC-1

Contract Addresses

Core yvUSDC-1 Contracts

Contract	Address	Type
yvUSDC-1 Vault	0xBe53A109B494E5c9f97b9Cd39Fe969BE68BF6204	Yearn V3 Vault (v3.0.2), Vyper minimal proxy
Accountant	0x5A74Cb32D36f2f517DB6f7b0A0591e09b22cDE69	Yearn Accountant (0% mgmt, 10% perf)
Fee Recipient (Dumper)	0x590Dd9399bB53f1085097399C3265C7137c1C4Cf	Claims fees and routes to auctions/splitters

Governance Contracts

Contract	Address	Configuration
Yearn V3 Role Manager	0xb3bd6B2E61753C311EFbCF0111f75D29706D9a41	Standard Yearn Role Manager, manages 37 vaults
Daddy / ySafe (Governance)	0xFEB4acf3df3cDEA7399794D0869ef76A6EfAff52	6-of-9 Gnosis Safe — ALL 14 vault roles
Brain (Operations)	0x16388463d60FFE0661Cf7F1f31a7D658aC790ff7	3-of-8 Gnosis Safe — QUEUE, REPORTING, DEBT, DEPOSIT_LIMIT, EMERGENCY
Security	0xe5e2Baf96198c56380dDD5E992D7d1ADa0e989c0	4-of-7 Gnosis Safe — manages via Role Manager
Strategy Manager (Timelock)	0x88Ba032be87d5EF1fbE87336b7090767F367BF73	TimelockController — 7-day delay for strategy additions. Self-governed: timelock holds TIMELOCK_ADMIN_ROLE, so config changes must go through 7-day delay
Keeper	0x604e586F17cE106B64185A7a0d2c1Da5bAce711E	yHaaSRelayer — REPORTING only
Debt Allocator	0x1e9eB053228B1156831759401dE0E115356b8671	Minimal proxy — REPORTING + DEBT_MANAGER

Yearn V3 Infrastructure

Contract	Address
Vault Factory (v3.0.2)	0x444045c5c13c246e117ed36437303cac8e250ab0
Tokenized Strategy	0xD377919FA87120584B21279a491F82D5265A139c

Active Strategies (4 in default queue; 3 with debt — 1 not in queue)

#	Strategy	Name	Current Debt (USDC)	Allocation
1	0x39c0aEc5738ED939876245224aFc7E09C8480a52	USDC to USDS Depositor	0	0%
2	0x7130570BCEfCedBe9d15B5b11A33006156460f8f	USDC to sUSDS Lender	19,856,568.16	77.9%
3	0x68Aea7b82Df6CcdF76235D46445Ed83f85F845A3	Yearn USDC (Morpho MetaMorpho)	1,823,387.70	7.2%
4	0x654a7c4Ae5ac3C853a99F8dbEAD2bC85090F753a	Spark USDC Lender (new)	0	0%
5	0xe63a2abc24cd9538398d825a4bfe5778d25687df	stcUSD/USDC Pawn Broker Market	3,806,052.28	14.9% (active, NOT in default withdrawal queue)

Removed from queue since May 11:

• Old Spark USDC Lender (0x25f893276544d86a82b1ce407182836F45cb6673) — removed from queue, residual ~2 USDC dust

Previously revoked (all with activation = 0):

• Morpho Gauntlet USDC Prime Compounder (0x694E47AFD14A64661a04eee674FB331bCDEF3737)
• Morpho Steakhouse USDC Compounder (0x074134A2784F4F66b6ceD6f68849382990Ff3215)
• Morpho OEV-boosted USDC Compounder (0x888239Ffa9a0613F9142C808aA9F7d1948a14f75)
• Morpho Yearn USDC Compounder (0xf1784A1bF0cBDE0F868838Dd093E65215343c4C0)
• USDC Fluid Lender (0x00C8a649C9837523ebb406Ceb17a6378Ab5C74cF)
• Aave V3 Lido USDC Lender (0x522478B54046aB7197880F2626b74a96d45B9B02)
• Aave V3 USDC Lender (0x694cdD19EBee7A974BA8fE3AF8B383bb256F2858)

Note: The queue has expanded from 3 to 4 strategies since May 11. A new Morpho MetaMorpho strategy ("Yearn USDC", 0x68Aea7) has been added and funded with ~$1.82M. A third funded strategy — the Pawn Broker Market (0xe63a2a, 14.9%) — is active with debt but not in the default withdrawal queue. A new Spark USDC Lender (0x654a7c) has been added to the queue at 0 debt. The old Spark USDC Lender (0x25f893) has been removed from the queue with its debt fully migrated. Active portfolio management continues; the vault has used Aave V3, Compound V3, Morpho, Spark, Fluid, Sky, and the self-contained Pawn Broker strategies over its ~16-month lifetime.

Pawn Broker queue note: Strategy 0xe63a2a holds $3.81M in USDC debt (14.9%) but is not in the default withdrawal queue. During withdrawals, the vault iterates through the queue; this strategy will be skipped unless it is added to the queue or targeted via redeem(uint256, address, address, uint256). This means the $3.81M could be less liquid under heavy redemptions until the strategy is added to the queue or its debt is migrated.

Score impact of recent rebalancing: The vault is no longer ~100% Sky-governance-coupled. Funded debt is now split between Sky (~77.9% via sUSDS Lender), Morpho Blue (~7.2% via Yearn USDC MetaMorpho), and Cap (~14.9% via the Pawn Broker's self-contained stcUSD collateral lending). This re-diversification improves the dependency concentration profile and is reflected in the Centralization → Dependencies subscore below.

Strategy Protocol Dependencies (current allocation)

Protocol	Strategy	Allocation	Notes
Sky / sUSDS	USDC to sUSDS Lender	77.9%	Sky Savings Rate via sUSDS — Sky-governed
Morpho Blue	Yearn USDC (MetaMorpho)	7.2%	Non-Sky; MetaMorpho vault managed by Yearn (Security 4/7 owner, ySafe 6/9 guardian)
Cap (stcUSD)	stcUSD/USDC Pawn Broker Market	14.9%	Self-contained Yearn V3 lending strategy (v3.0.4). Borrowers deposit stcUSD (Cap protocol, 0x88887bE419578051FF9F4eb6C858A951921D8888, ERC-4626 vault — 3-of-5 anonymous multisig, upgradeable proxies, 8 audits, $1M bug bounty) as collateral and receive USDC loans directly from the strategy. Does NOT route through Morpho Blue or any external lending protocol. NOT in default withdrawal queue
Sky (yvUSDS via Depositor)	USDC to USDS Depositor	0% (queued)	Previously the dominant strategy; currently unfunded
Spark Lend (Sky sub-DAO)	Spark USDC Lender (new)	0% (queued)	New strategy, unfunded; replaces the old 0x25f893 Spark Lender

Audits and Due Diligence Disclosures

Yearn V3 Core Audits

The underlying vault infrastructure has been audited by 3 reputable firms:

Auditor	Date	Scope	Report
Statemind	May 2, 2024	V3 Vaults (v3.0.0)	PDF
ChainSecurity	May 4, 2024	V3 Vaults + Tokenized Strategy (v3.0.0)	2 PDFs
yAcademy	Jun 2024	V3 Vaults (v3.0.1)	PDF

Sky/MakerDAO Audits (Underlying Protocol)

Sky (formerly MakerDAO) is one of the most extensively audited DeFi protocols:

Auditor	Coverage	Notes
ChainSecurity	9 audits covering USDS, sUSDS, Endgame Toolkit, LockStake, VoteDelegate	Core security partner
Cantina	10 audit reports including sUSDS (Sep 2024) and USDS (Jul 2024)	Comprehensive coverage
Sherlock	Public audit contest (Aug 2024)	Community audit
Trail of Bits	Core DAI system (legacy MCD)	Historical audit
PeckShield	Core DAI system (legacy MCD)	Historical audit
Quantstamp	Liquidations 2.0	Historical audit
ABDK	Vote Delegate security	Governance audit

LitePSM (used for USDC → DAI conversion): Audited by both ChainSecurity and Cantina.

Strategy Review Process

All strategies go through Yearn's formal 12-metric risk scoring framework (RISK_FRAMEWORK.md), covering:

• Strategy scores: Review level (ySec security review), testing coverage (95%+ for score 1), complexity (sLOC), risk exposure, centralization risk, protocol integration count
• External protocol scores: Audit count, centralization, TVL, longevity, protocol type

Bug Bounty

• Yearn (Immunefi): Active bug bounty. Max payout: $200,000 (Critical). Scope includes V3 vaults. 40 smart contracts in scope. Median resolution: 18 hours
  • Link: https://immunefi.com/bounty/yearnfinance/
• Yearn (Sherlock): Also listed: https://audits.sherlock.xyz/bug-bounties/30
• Sky/MakerDAO (Immunefi): Active bug bounty. Max payout: $10,000,000 (Critical). Scope includes DAI, USDS, sUSDS, PSM, and all core contracts
  • Link: https://immunefi.com/bug-bounty/sky/
• Morpho (Cantina): Active bug bounty. Max payout: $2,500,000 (Critical).
  • Link: https://cantina.xyz/bounties/35a5f0a1-2ffd-432c-8f3b-77d169add8c3
• Safe Harbor: Yearn is not listed on the SEAL Safe Harbor registry

On-Chain Complexity

The yvUSDC-1 system is low complexity:

• 3 funded strategies on a single chain (Ethereum): sUSDS Lender (~77.9%, Sky-governed), Yearn USDC / Morpho MetaMorpho (~7.2%, non-Sky), and stcUSD/USDC Pawn Broker Market (~14.9%, self-contained Yearn V3 lending strategy — not on Morpho Blue). Two additional strategies queued at 0 debt
• Simple pipelines: sUSDS Lender: USDC → DAI → USDS → sUSDS (three 1:1 conversions + deposit). Yearn USDC: USDC → Morpho MetaMorpho vault. Pawn Broker: USDC lent directly to borrowers against stcUSD collateral held on the strategy's own balance sheet (v3.0.4). Spark USDC Lender: direct USDC supply to Spark Lend's USDC market
• No leverage, no looping, no cross-chain bridging
• Standard ERC-4626 deposit/withdrawal
• Blue-chip dependencies across three ecosystems (Sky at ~77.9%, Morpho Blue at ~7.2%, Cap at ~14.9%)
• Vault is immutable (non-upgradeable Vyper minimal proxy)

Historical Track Record

• Vault deployed: March 12, 2024 (block 19,419,991) — ~16 months in production
• TVL: 25,486,008.14 USDC (~$25.49M) — well within the $50M deposit limit. Down from $29.84M at May 11 snapshot
• PPS trend: 1.000000 → 1.111482 (~11.1% cumulative return, ~8.3% annualized)
• Security incidents: None known for this vault or Yearn V3 generally
• Strategy changes: active portfolio management continues. The vault has used Aave V3, Compound V3, Morpho, Spark, Fluid, and Sky strategies over its ~16-month lifetime. Between May 11 and July 12: old Spark USDC Lender removed from queue (debt migrated); new Morpho MetaMorpho strategy ("Yearn USDC", 0x68Aea7) added and funded with ~$1.82M; new Spark USDC Lender (0x654a7c) added to queue at 0 debt
• Current allocation: ~77.9% USDC to sUSDS Lender (Sky-governed), ~7.2% Yearn USDC (Morpho Blue MetaMorpho), and ~14.9% stcUSD/USDC Pawn Broker Market (Cap — self-contained Yearn V3 lending strategy, NOT on Morpho Blue). The Pawn Broker strategy is active with debt but not in the default withdrawal queue — an important operational detail for withdrawal liquidity
• Yearn V3 track record: V3 framework has been live since May 2024 (~26 months). No V3 vault exploits

Yearn protocol TVL: ~$147M total across all chains (DeFiLlama, July 2026).

Sky/sUSDS track record:

• sUSDS launched as part of Sky Endgame (2024)
• TVL: ~$5.38B+ in sUSDS (within ~$10B+ total USDS ecosystem)
• No security incidents since launch
• Sky Savings Rate (SSR): currently ~4.0% APY, set by Sky Governance
• Revenue sourced from over-collateralized loans and tokenized Treasury bill (RWA) investments

Funds Management

yvUSDC-1 deploys deposited USDC into yield strategies with 100% capital utilization. At the July 12 snapshot debt is split across three funded strategies: USDC to sUSDS Lender (~77.9%), Yearn USDC / Morpho MetaMorpho (~7.2%), and stcUSD/USDC Pawn Broker Market (~14.9%). The Pawn Broker is a self-contained Yearn V3 lending strategy (v3.0.4) — it holds stcUSD directly as borrower collateral and lends USDC from its own balance sheet; it does NOT route through Morpho Blue. The Pawn Broker strategy is active and funded but not in the default withdrawal queue — it will not participate in withdrawals unless explicitly targeted, representing a potential liquidity consideration. Two further strategies sit in the queue at 0 debt: USDC to USDS Depositor and a new Spark USDC Lender. All current_debt values sum to ~$25.49M, matching totalDebt with negligible rounding. There is no accounting gap.

Strategy 1: USDC to USDS Depositor (0% — queued, unfunded)

Contract: 0x39c0aEc5738ED939876245224aFc7E09C8480a52

Conversion pipeline:

1. USDC → DAI via MakerDAO PSM Lite (0xf6e72Db5454dd049d0788e411b06CfAF16853042) — 1:1 at 0% fee (both tin and tout set to 0)
2. DAI → USDS via Sky DAI-USDS Exchanger (0x3225737a9Bbb6473CB4a45b7244ACa2BeFdB276A) — 1:1, no fee
3. USDS → yvUSDS via a Yearn V3 ERC-4626 vault — earns yield from the underlying yvUSDS vault strategies

Withdrawal pipeline: Reverse path (yvUSDS → USDS → DAI → USDC). If PSM tout fee exceeds 0.05%, the strategy falls back to Uniswap V3 swap with 0.5% slippage tolerance.

Strategy parameters:

• Deposit limit: 100,000,000 USDC
• Max acceptable PSM fee: 0.05% (falls back to Uniswap V3 if exceeded)
• Management: Brain multisig (3-of-8)
• Keeper: yHaaSRelayer (0x604e586F17cE106B64185A7a0d2c1Da5bAce711E)

Strategy 2: USDC to sUSDS Lender (~77.9% allocation)

Contract: 0x7130570BCEfCedBe9d15B5b11A33006156460f8f

Conversion pipeline:

1. USDC → DAI via MakerDAO PSM Lite — 1:1 at 0% fee
2. DAI → USDS via Sky DAI-USDS Exchanger — 1:1, no fee
3. USDS → sUSDS via Sky Savings vault (0xa3931d71877C0E7a3148CB7Eb4463524FEc27fbD) — earns the SSR (~4.0% APY)

Withdrawal pipeline: Reverse path (sUSDS → USDS → DAI → USDC). Same PSM fee fallback to Uniswap V3.

Strategy parameters: Same as USDS Depositor (100M deposit limit, 0.05% max PSM fee, Brain multisig management)

Strategy 3: Yearn USDC / Morpho MetaMorpho (~7.2% allocation)

Contract: 0x68Aea7b82Df6CcdF76235D46445Ed83f85F845A3

Pipeline: USDC is deposited into a Morpho MetaMorpho vault deployed on Morpho Blue (0xBBBBBbbBBb9cC5e90e3b3Af64bdAF62C37EEFFCb). The MetaMorpho vault is managed by Yearn: owner = Security multisig (4-of-7, 0xe5e2Baf96198c56380dDD5E992D7d1ADa0e989c0), guardian = ySafe/Daddy (6-of-9, 0xFEB4acf3df3cDEA7399794D0869ef76A6EfAff52), curator = 0x90D0f26025571295D18a6c041E47450B81886B51. Has a 3-day timelock (259,200 seconds) on ownership transfers. Fee is 0%. This is a non-Sky protocol — re-establishing the Morpho re-diversification leg that was previously revoked in the April–May cleanup.

Strategy parameters:

• Deposit limit: 50,000,000 USDC (max_debt)
• Morpho Blue: 0xBBBBBbbBBb9cC5e90e3b3Af64bdAF62C37EEFFCb
• MetaMorpho owner: Security (4-of-7)
• MetaMorpho guardian: ySafe (6-of-9)
• MetaMorpho timelock: 3 days
• Fee: 0%
• Keeper: yHaaSRelayer

Strategy 4: stcUSD/USDC Pawn Broker Market (~14.9% allocation)

Contract: 0xe63a2abc24cd9538398d825a4bfe5778d25687df

Pipeline: This is a self-contained Yearn V3 TokenizedStrategy (v3.0.4) — a pawn broker that lends USDC directly to borrowers who deposit stcUSD (Cap's staked USD ERC-4626 vault token, 0x88887bE419578051FF9F4eb6C858A951921D8888) as collateral. The strategy holds idle USDC (~$5.7K) and stcUSD collateral (~$4.06M) on its own balance sheet. When a borrower deposits stcUSD, USDC is lent out of the strategy; when a borrower repays USDC, their stcUSD is returned. This strategy does not route funds through Morpho Blue or any external lending protocol — it is entirely self-contained. The strategy's only external dependency is Cap (stcUSD as the collateral asset).

stcUSD / Cap governance: stcUSD is issued by Cap (Covered Agent Protocol) — a stablecoin protocol where cUSD is backed 1:1 by whitelisted reserves (USDC ~95%, wWTGXX ~5%) and operators borrow reserves secured by Symbiotic restaking collateral. stcUSD is the yield-bearing ERC-4626 vault wrapping cUSD (~$81.6M supply, ~$86.7M total assets). Cap governance: 3-of-5 anonymous Gnosis Safe multisig (0xb8FC49402dF3ee4f8587268FB89fda4d621a8793) → 24-hour TimelockController (0xD8236031d8279d82E615aF2BFab5FC0127A329ab) → Access Control (0x7731129a10d51e18cDE607C5C115F26503D2c683). All core contracts (cUSD, stcUSD, Access Control) are upgradeable UUPS proxies. Cap has been audited by 8 firms (9 reports: Trail of Bits, Spearbit, Zellic, Sherlock contest, Certora, Electisec, Recon, Octane), holds a $1M Sherlock bug bounty, and has been in production since August 2025 (~11 months). Cap is a separate governance domain from Yearn and Sky. See the Cap stcUSD risk report for the full assessment. Key governance risks: 3-of-5 threshold with anonymous signers, all core contracts upgradeable through the 24h timelock, and a deployer EOA retaining an EXECUTOR_ROLE on the timelock.

Queue status: This strategy is active with $3.81M debt but NOT in the default withdrawal queue. During normal withdrawals, the vault iterates through the default queue and will skip this strategy. Its debt must be explicitly targeted or the strategy must be added to the queue before it can participate in withdrawals. This creates a potential liquidity bottleneck for ~14.9% of deployed capital under heavy redemptions.

Strategy parameters:

• Deposit limit: 10,000,000 USDC (max_debt)
• Implementation: Yearn V3 TokenizedStrategy v3.0.4 (0xD377919FA87120584B21279a491F82D5265A139c) — self-contained pawn broker, no external lending protocol
• Collateral: stcUSD — held directly on strategy balance sheet (~$4.06M stcUSD, ~$5.7K idle USDC)
• stcUSD token: 0x88887bE419578051FF9F4eb6C858A951921D8888 (Cap, ERC-4626, upgradeable UUPS proxy)
• stcUSD / Cap governance: 3-of-5 anonymous multisig → 24h timelock → Access Control (see Cap stcUSD report)
• Activation: 1782490163 (active)
• Keeper: yHaaSRelayer

Strategy 5: Spark USDC Lender (0% — queued, new)

Contract: 0x654a7c4Ae5ac3C853a99F8dbEAD2bC85090F753a

Pipeline: Direct USDC supply to Spark Lend's USDC market. Spark Lend is a Sky sub-DAO governed by Sky / Spark governance. This is a new strategy added to the queue at 0 debt, replacing the old Spark USDC Lender (0x25f893) which was removed from the queue.

Strategy parameters: Brain multisig management, keeper-driven reporting, ERC-4626 throughout.

Revoked and removed strategies (historical context)

The old Spark USDC Lender (0x25f893276544d86a82b1ce407182836F45cb6673) has been removed from the default queue between May 11 and July 12. Its debt (previously ~$851K) has been fully migrated — residual dust of ~2 USDC remains. All previously revoked Morpho, Fluid, and Aave V3 strategies remain with activation = 0. The broader cleanup pattern across Yearn V3 risk-1 vaults in late April/early May has stabilized, and a new Morpho MetaMorpho leg has been re-established. Independent attribution of the queue changes has not been verified.

Accessibility

• Deposits: Permissionless — anyone can deposit USDC and receive yvUSDC-1 (ERC-4626 standard). Subject to $50M deposit limit
• Withdrawals: ERC-4626 standard. Users redeem yvUSDC-1 for USDC. For the sUSDS Lender: unwinds sUSDS → USDS → DAI → USDC pipeline. For Spark Lender: direct withdrawal from Spark Lend's USDC market. Both paths are highly liquid
• No cooldown or lock period — unlike yvUSD's LockedyvUSD wrapper
• Fees: 0% management fee, 10% performance fee (taken via accountant during process_report)

Token Mint Authority

Mint mechanism: Permissionless ERC-4626 deposit. Anyone can call deposit(uint256, address) or mint(uint256, address) on the yvUSDC-1 vault and receive shares proportional to USDC deposited. Yearn V3 vaults do not implement a privileged MINTER_ROLE on the share token.

Mint requires backing: Yes — atomic. Shares are minted only against USDC transferred into the vault in the same transaction. The vault cannot mint shares without a corresponding USDC inflow.

Per-address mint authority (verified onchain via Yearn V3 source; 0xBe53A109B494E5c9f97b9Cd39Fe969BE68BF6204):

Address	Can Mint	Can Burn	Role / Mechanism	Notes
Any caller of deposit() / mint()	✓	✓	Permissionless ERC-4626	Subject to the $50M depositLimit set by DEPOSIT_LIMIT_MANAGER (Daddy / Brain)

Rate limits / supply caps: depositLimit = 50,000,000 USDC (configurable by DEPOSIT_LIMIT_MANAGER). No per-block mint cap.

Backing check at mint time: Atomic. The Vyper vault's _deposit enforces asset.transferFrom(caller, vault, assets) before _mint(receiver, shares) — minting without an asset inflow is impossible.

Collateralization

• 100% onchain USDC backing — all deposits are USDC, deployed into Sky-governed (sUSDS Lender ~77.9%), Morpho Blue (Yearn USDC MetaMorpho ~7.2%), and self-contained Pawn Broker (stcUSD/USDC ~14.9%) lending
• Collateral quality: sUSDS is backed by over-collateralized loans and RWA (Treasury bills) via MakerDAO. The Morpho MetaMorpho vault supplies USDC into Morpho Blue markets — fully onchain, isolated markets with immutable parameters. The Pawn Broker is a self-contained Yearn V3 strategy (v3.0.4) that holds stcUSD directly as borrower collateral — Cap is a separate protocol with its own governance (3-of-5 anonymous multisig, upgradeable UUPS proxies, 24h timelock, 8 audits). See the Cap stcUSD risk report
• No leverage — unlike yvUSD's looper strategies, these are simple deposits into savings rate and lending products
• All positions are fully redeemable — sUSDS and Spark vaults support standard ERC-4626 / aToken withdrawal. USDS converts 1:1 to DAI via the Exchanger. The Pawn Broker position (~14.9%) is not in the default withdrawal queue and requires targeted withdrawal or queue addition

Provability

• yvUSDC-1 exchange rate: Calculated onchain via ERC-4626 standard (convertToAssets()/convertToShares()). Fully programmatic, no admin input
• Strategy positions: Each strategy's totalAssets() reads the underlying vault share balance (sUSDS or MetaMorpho vault shares) and converts to USDC equivalent onchain
• sUSDS rate: The Sky Savings Rate is set by Sky Governance and applied onchain via the pot/ssr mechanism. The sUSDS exchange rate increases continuously based on the SSR
• Profit/loss reporting: Profits are reported by keepers via process_report() and locked for gradual distribution over 10 days (profitMaxUnlockTime). Losses are immediately reflected in PPS

Liquidity Risk

• Primary exit: Redeem yvUSDC-1 for USDC via ERC-4626 withdraw()/redeem(). Triggers reverse pipeline through sUSDS → USDS → DAI → USDC (~77.9% of debt), Morpho MetaMorpho redemption (~7.2%), or Pawn Broker withdrawal (~14.9% — not in default queue, requires targeted withdrawal or queue addition)
• Highly liquid underlying: sUSDS holds multi-billion-dollar USDS reserves; Morpho MetaMorpho markets have deep USDC liquidity on Morpho Blue. The Pawn Broker is a self-contained lender; its USDC liquidity is limited to the strategy's own idle balance plus borrower repayments. The vault's ~$25.49M is a small fraction of underlying pool capacity
• PSM liquidity: The MakerDAO PSM Lite provides deep DAI ↔ USDC liquidity at 0% fee. PSM capacity is managed by Sky Governance and typically holds billions of USDC. The Morpho MetaMorpho exit is directly to USDC through redemption — no PSM needed. The Pawn Broker path exits by recalling USDC loans from borrowers or through queue-targeted withdrawal
• No DEX liquidity needed in the base case — exit is via the protocol's own pipeline (PSM + Exchanger for Sky; MetaMorpho redemption for Morpho; borrower loan recall for Pawn Broker), not DEX AMMs. Uniswap V3 fallback applies only for the Sky leg if PSM fees rise above 0.05%
• Same-value asset: USDC-denominated vault token — no price divergence risk from the underlying
• No withdrawal queue or cooldown — atomic redemption through the pipeline. Note: the Pawn Broker strategy (~14.9%) is not in the default withdrawal queue; its debt requires targeted withdrawal or queue addition
• Deposit limit: $50M cap — generous relative to current TVL of $25.49M

Centralization & Control Risks

Governance

The yvUSDC-1 vault uses the standard Yearn V3 governance pattern via the Yearn V3 Role Manager contract.

Governance hierarchy:

Position	Address	Threshold	Roles on Vault
Daddy (ySafe)	0xFEB4acf3df3cDEA7399794D0869ef76A6EfAff52	6-of-9	All 14 roles (full admin)
Brain	0x16388463d60FFE0661Cf7F1f31a7D658aC790ff7	3-of-8	QUEUE, REPORTING, DEBT, DEPOSIT_LIMIT, EMERGENCY
Security	0xe5e2Baf96198c56380dDD5E992D7d1ADa0e989c0	4-of-7	Manages via Role Manager
Strategy Manager (Timelock)	0x88Ba032be87d5EF1fbE87336b7090767F367BF73	7-day delay	Strategy additions via Role Manager
Keeper	0x604e586F17cE106B64185A7a0d2c1Da5bAce711E	Bot	REPORTING only
Debt Allocator	0x1e9eB053228B1156831759401dE0E115356b8671	Bot	REPORTING + DEBT_MANAGER

ySafe 6-of-9 multisig signers include publicly known contributors: Mariano Conti (ex-MakerDAO), Leo Cheng (C.R.E.A.M.), 0xngmi (DeFiLlama), Michael Egorov (Curve), and others (source).

Governance assessment:

1. No EOA role concentration — all sensitive roles are held by multisigs
2. Strategy additions go through a 7-day timelock via the TimelockController (delay increased from initial 24h to 7 days on Feb 22, 2025)
3. Standard Yearn governance — same setup used across 37 vaults, battle-tested pattern
4. Immutable vault — no proxy upgrades possible

Programmability

• Exchange rate (PPS): Calculated onchain algorithmically via ERC-4626. Fully programmatic, no admin input
• Vault operations: Deposit/withdraw are permissionless onchain transactions
• Strategy profit/loss: Reported programmatically by keepers via process_report(). Profits unlock linearly over 10 days
• Debt allocation: Managed by both the Debt Allocator (automated) and Brain multisig (manual). Currently split across four strategies
• V3 vaults are immutable — no proxy upgrades, no admin-changeable implementation

External Dependencies

Dependency	Criticality	Notes
Sky / sUSDS	Critical	~77.9% of current allocation via the sUSDS Lender. Multi-billion-dollar sUSDS TVL. Blue-chip, extensively audited, $10M bug bounty
Morpho Blue	Moderate	~7.2% of current allocation via Yearn USDC MetaMorpho. Morpho Blue is a non-Sky, isolated-market lending protocol with $1B+ TVL. Audited by Spearbit, Cantina, and others. The Yearn USDC MetaMorpho wrapper is managed by Yearn (Security 4/7 owner, ySafe 6/9 guardian, 3-day timelock)
Cap (stcUSD)	High	~14.9% via Pawn Broker — stcUSD is the collateral asset held directly by the self-contained Yearn V3 Pawn Broker strategy. Cap is a relatively new protocol (~11 months, August 2025 launch) with a 3-of-5 anonymous multisig governance, upgradeable UUPS proxy contracts (cUSD, stcUSD, Access Control), and a 24-hour timelock. Audited by 8 firms (9 reports) including Trail of Bits, Spearbit, and Zellic. $1M Sherlock bug bounty. Operator model relies on offchain institutional strategies with onchain Symbiotic restaking collateral. The Pawn Broker strategy is not in the default withdrawal queue. See the Cap stcUSD risk report (score: 2.4/5.0, Low Risk)
MakerDAO PSM Lite	High	USDC ↔ DAI conversion at 1:1 for the sUSDS Lender path. 0% fee. Deep liquidity. Audited by ChainSecurity and Cantina
Sky DAI-USDS Exchanger	High	DAI ↔ USDS 1:1 conversion for the sUSDS Lender path. Core Sky infrastructure
Spark Lend (Sky sub-DAO)	Low	New Spark USDC Lender currently queued at 0 debt. No exposure unless funded
Uniswap V3 (fallback)	Low	Only used if PSM fee exceeds 0.05%. Currently not active (PSM fee is 0%)

Dependency quality: Funded dependencies span three distinct governance ecosystems: Sky (~77.9%), Morpho Blue (~7.2%), and Cap (~14.9%). The Yearn USDC MetaMorpho leg (7.2%) is Yearn-managed and sits on Morpho Blue. The Pawn Broker leg (14.9%) is a self-contained Yearn V3 lending strategy whose only external dependency is Cap's stcUSD as the collateral asset, introducing the third governance entity: Cap (3-of-5 anonymous multisig, upgradeable UUPS proxies, 24h timelock, 8 audits, ~11 months in production, score 2.4/5.0 Low Risk — see Cap stcUSD report). Sky is top-tier (8+ years of history, $10M bug bounty, multi-billion-dollar sUSDS TVL). Morpho Blue is a well-audited, isolated-market lending protocol with $1B+ TVL. Cap is younger and has weaker governance (anonymous signers, upgradeable proxies) but carries strong audit coverage and institutional backing. The re-diversification across three ecosystems significantly improves the dependency concentration profile compared to the prior ~100% Sky-governance-coupled snapshot. Note: the Pawn Broker strategy (14.9%) is not in the default withdrawal queue, adding a liquidity nuance. Two additional strategies remain queued at 0 debt (USDS Depositor and new Spark USDC Lender).

Operational Risk

• Team: Yearn Finance — established since 2020, publicly known contributors. The ySafe 6-of-9 multisig has 9 named signers including prominent DeFi figures
• Governance: Standard Yearn V3 Role Manager — the same governance used across 37 vaults, with clear role separation (Daddy, Brain, Security, Keeper, Debt Allocator)
• Documentation: Comprehensive Yearn V3 documentation. Strategy code is verified on Etherscan
• Legal: Yearn Finance has converted its ychad.eth multisig into a BORG (cybernetic organization) via YIP-87, wrapping it in a Cayman Islands foundation company with smart contract governance restrictions
• Incident response: Yearn has demonstrated incident response capability across 4 historical events (all V1/legacy). V3 framework has not been tested under stress. The $200K Immunefi bug bounty provides a responsible disclosure channel
• V3 immutability: Vault contracts cannot be upgraded — this eliminates proxy upgrade risk

Monitoring

Existing Monitoring Infrastructure

Yearn maintains an active monitoring system via the monitoring repository. yvUSDC-1 is actively monitored:

• Large flow alerts (protocols/yearn/alert_large_flows.py): yvUSDC-1 is in the monitored vault list. Alerts on deposits/withdrawals exceeding threshold via Telegram
• Endorsed vault check (protocols/yearn/check_endorsed.py): Runs daily, verifies all Yearn V3 vaults are endorsed onchain via the registry contract
• Timelock monitoring (protocols/timelock/timelock_alerts.py): Monitors the Yearn TimelockController (Strategy Manager) across 6 chains

Key Contracts

Contract	Address	Monitor
yvUSDC-1 Vault	0xBe53A109B494E5c9f97b9Cd39Fe969BE68BF6204	PPS (convertToAssets(1e6)), totalAssets(), totalDebt(), totalIdle(), deposit_limit(), Deposit/Withdraw events
USDC to sUSDS Lender	0x7130570BCEfCedBe9d15B5b11A33006156460f8f	totalAssets(), current_debt, keeper report frequency
Yearn USDC (Morpho MetaMorpho)	0x68Aea7b82Df6CcdF76235D46445Ed83f85F845A3	totalAssets(), current_debt, lastTotalAssets(), Morpho market allocation, curator/guardian changes
stcUSD/USDC Pawn Broker Market	0xe63a2abc24cd9538398d825a4bfe5778d25687df	totalAssets(), current_debt, lastTotalAssets(), stcUSD balance (balanceOf(address)), USDC idle balance, activation status, queue membership — self-contained Yearn V3 lending strategy, NOT on Morpho Blue. NOT in default withdrawal queue, monitor for queue inclusion
Spark USDC Lender (new)	0x654a7c4Ae5ac3C853a99F8dbEAD2bC85090F753a	totalAssets(), current_debt — currently 0 debt, monitor for activation
ySafe (Daddy)	0xFEB4acf3df3cDEA7399794D0869ef76A6EfAff52	Signer/threshold changes, submitted transactions
Accountant	0x5A74Cb32D36f2f517DB6f7b0A0591e09b22cDE69	Fee changes, config updates
Sky Savings Rate	0xa3931d71877C0E7a3148CB7Eb4463524FEc27fbD	SSR rate changes, sUSDS TVL
Morpho MetaMorpho Vault	0x68Aea7b82Df6CcdF76235D46445Ed83f85F845A3	owner(), guardian(), curator(), timelock(), fee() — governance integrity
Morpho Blue	0xBBBBBbbBBb9cC5e90e3b3Af64bdAF62C37EEFFCb	Market parameters, supply/borrow caps — MetaMorpho vault only (7.2%). Pawn Broker is NOT on Morpho Blue
stcUSD (Cap) Vault	0x88887bE419578051FF9F4eb6C858A951921D8888	PPS (convertToAssets(1e18)), totalAssets(), totalSupply(), implementation upgrades (ERC-1967 impl slot) — stcUSD is Cap's ERC-4626 vault, the collateral asset in the Pawn Broker market. Upgradeable UUPS proxy: monitor for implementation changes via the Timelock
Cap Multisig	0xb8FC49402dF3ee4f8587268FB89fda4d621a8793	Signer/threshold changes, submitted transactions — 3-of-5 Gnosis Safe with anonymous signers
Cap Timelock	0xD8236031d8279d82E615aF2BFab5FC0127A329ab	getMinDelay() (currently 24h), scheduled/executed transactions, role changes — governs all Cap contract upgrades
Cap Access Control	0x7731129a10d51e18cDE607C5C115F26503D2c683	RoleGranted / RoleRevoked events, DEFAULT_ADMIN_ROLE holder (Timelock), implementation upgrades

Critical Events to Monitor

• PPS decrease — any decrease in convertToAssets(1e6) indicates a loss event. Should only increase
• Strategy additions/removals — StrategyChanged events indicate portfolio changes (new strategies go through 7-day timelock). Also monitor MetaMorpho vault governance (owner/guardian/curator changes via timelock)
• Debt allocation changes — UpdatedMaxDebtForStrategy and DebtUpdated events
• Emergency actions — Shutdown event on vault
• ySafe signer/threshold changes — governance integrity
• SSR rate changes — Sky Governance may adjust the savings rate, affecting yield
• PSM fee changes — if tin or tout are set above 0, it may trigger the Uniswap V3 fallback path
• Morpho MetaMorpho governance changes — owner (0xe5e2...), guardian (0xFEB4...), or curator (0x90D0...) changes. The vault has a 3-day timelock on ownership transfers
• Pawn Broker queue status — monitor whether the Pawn Broker strategy (0xe63a2a) remains out of or gets added to the default withdrawal queue. While out of queue, its $3.81M debt (~14.9%) requires targeted withdrawal or queue addition to serve redemptions. Also monitor the strategy's USDC idle balance and stcUSD collateral balance — as a self-contained lender, insufficient idle USDC could delay withdrawals
• stcUSD / Cap governance changes — monitor stcUSD implementation upgrades (0x88887bE419578051FF9F4eb6C858A951921D8888) and Cap multisig signer/threshold changes. Cap governance: 3-of-5 anonymous multisig → 24h Timelock → Access Control. Any upgrade or governance change directly affects the collateral asset held by the Pawn Broker strategy — this is the strategy's only external dependency
• totalDebt vs sum of strategy current_debt — monitor that the sum of all active strategy current_debt values stays aligned with totalDebt. Any material gap could indicate an un-tracked strategy with debt or an unreported loss

Monitoring Functions

Function	Contract	Purpose	Frequency
convertToAssets(1e6)	Vault	PPS tracking	Every 6 hours
totalAssets()	Vault	Total TVL	Daily
totalDebt() / totalIdle()	Vault	Capital deployment ratio	Daily
strategies(address)	Vault	Per-strategy debt, last report time	Daily
get_default_queue()	Vault	Withdrawal queue composition	Weekly
getThreshold() / getOwners()	ySafe	Governance integrity	Weekly
getMinDelay()	ySafe	Delay change detection	Weekly
ssr()	Sky Pot	Savings rate	Weekly

Reassessment Triggers

• Time-based: Reassess in 6 months (January 2027) or annually
• TVL-based: Reassess if TVL exceeds $100M or changes by more than ±50% from current ~$25.49M
• Incident-based: Reassess after any exploit, strategy loss, governance change, or Sky / Morpho / Spark Lend incident
• Allocation-based: Reassess if any single protocol ecosystem exceeds 90% concentration, if new strategies are added/removed from the queue, or if the Pawn Broker strategy is added to or removed from the default withdrawal queue. Also reassess if any active strategy with material debt is not in the default queue
• SSR-based: Reassess if Sky Savings Rate drops below 2% (may indicate Sky governance issues) or if PSM fees are introduced
• Governance-based: Reassess if ySafe composition changes (signer additions/removals, threshold changes), if the MetaMorpho vault governance changes (owner, guardian, curator), or if Cap governance (3-of-5 multisig signer changes, threshold changes, contract upgrades via Timelock) materially affects the Pawn Broker market
• Withdrawal-queue gap: Reassess if the Pawn Broker strategy remains out of the default queue with >$5M in debt, creating a liquidity pressure point under potential redemption spikes

---

Appendix: Contract Architecture

┌─────────────────────────────────────────────────────────────────────┐
│                         VAULT LAYER                                  │
│                                                                      │
│  ┌───────────────────────┐                                          │
│  │  yvUSDC-1 (v3.0.2)   │                                          │
│  │  ERC-4626, immutable  │                                          │
│  │  0xBe53...6204        │                                          │
│  │                       │                                          │
│  │  deposit() / redeem() │                                          │
│  │  totalAssets()        │                                          │
│  └──────────┬────────────┘                                          │
│             │ deploys USDC to 5 strategies (3 funded, 1 not in queue)│
│             │                                                        │
│  ┌──────────▼──────────────────────────────────────────────────────┐│
│  │  STRATEGIES (by allocation, July 12 snapshot)                    ││
│  │                                                                  ││
│  │  ┌─────────────────────────────────────────────────────────┐    ││
│  │  │ SKY (~77.9%)                                            │    ││
│  │  │  USDC to sUSDS Lender                       77.9%       │    ││
│  │  │  Pipeline: USDC → DAI (PSM 1:1) → USDS → sUSDS         │    ││
│  │  └─────────────────────────────────────────────────────────┘    ││
│  │  ┌─────────────────────────────────────────────────────────┐    ││
│  │  │ MORPHO BLUE (~7.2%)                                     │    ││
│  │  │  Yearn USDC (MetaMorpho)                    7.2%        │    ││
│  │  │  Pipeline: USDC → Morpho MetaMorpho vault               │    ││
│  │  │  Curator: Yearn (3-day timelock on owner)               │    ││
│  │  └─────────────────────────────────────────────────────────┘    ││
│  │  ┌─────────────────────────────────────────────────────────┐    ││
│  │  │ CAP / stcUSD (~14.9%)                                   │    ││
│  │  │  stcUSD/USDC Pawn Broker Market             14.9%        │    ││
│  │  │  Self-contained Yearn V3 TokenizedStrategy              │    ││
│  │  │  (v3.0.4). Holds stcUSD directly as                    │    ││
│  │  │  borrower collateral, lends USDC from own               │    ││
│  │  │  balance. NOT in default withdrawal queue.              │    ││
│  │  │  Does NOT route through Morpho Blue.                    │    ││
│  │  └─────────────────────────────────────────────────────────┘    ││
│  │                                                                  ││
│  │  Queued (0 debt):                                                ││
│  │  - USDC to USDS Depositor                                        ││
│  │  - Spark USDC Lender (new, 0x654a7c)                             ││
│  │                                                                  ││
│  │  Removed since May 11:                                           ││
│  │  - Old Spark USDC Lender (0x25f893, debt migrated)               ││
│  └─────────────────────────────────────────────────────────────────┘│
└──────────────────────────────────────────────────────────────────────┘
                                │
                  deposits into underlying protocols
                                │
┌───────────────────────────────▼──────────────────────────────────────┐
│                    UNDERLYING PROTOCOLS                                │
│                                                                       │
│  ┌──────────────────────────┐    ┌──────────────────────────┐        │
│  │  Sky / sUSDS             │    │  Morpho Blue             │        │
│  │  Multi-billion TVL       │    │  Isolated markets        │        │
│  │  SSR: ~4.0% APY          │    │  MetaMorpho vault        │        │
│  │  8+ years, $10M bounty   │    │  $1B+ TVL, well-audited  │        │
│  │  ~77.9% of vault         │    │  ~7.2% of vault          │        │
│  └──────────────────────────┘    └──────────────────────────┘        │
│  ┌──────────────────────────┐                                        │
│  │  Cap (stcUSD)            │                                        │
│  │  stcUSD ERC-4626 vault   │                                        │
│  │  8 audits, $1M bounty    │                                        │
│  │  3-of-5 anonymous multi  │                                        │
│  │  ~14.9% of vault         │                                        │
│  └──────────────────────────┘                                        │
│  ┌──────────────────────────┐    ┌──────────────────────────┐        │
│  │  MakerDAO PSM Lite       │    │  Sky DAI-USDS Exchanger  │        │
│  │  USDC ↔ DAI at 1:1      │    │  DAI ↔ USDS at 1:1      │        │
│  │  0% fee (tin=tout=0)     │    │  No fee                  │        │
│  └──────────────────────────┘    └──────────────────────────┘        │
└───────────────────────────────────────────────────────────────────────┘

Data flow: User deposits USDC → yvUSDC-1 vault → sUSDS Lender (~77.9%)
converts USDC → DAI (PSM) → USDS (Exchanger) → sUSDS; Yearn USDC (~7.2%)
deposits USDC into Morpho MetaMorpho vault; Pawn Broker (~14.9%) is a
self-contained Yearn V3 lending strategy that holds stcUSD directly as
borrower collateral and lends USDC from its own balance (NOT in
default withdrawal queue). Profits reported by Keeper, locked for 10 days.
Withdrawals reverse the pipeline (atomic, no cooldown).

Appendix: TimelockController Role Structure

TimelockController 0x88Ba032be87d5EF1fbE87336b7090767F367BF73 — deployed at block 24,242,692 with admin = address(0). Same timelock used by yvUSD and 37+ other Yearn V3 vaults.

Timelock Roles

Role	Holder	Type	Notes
DEFAULT_ADMIN	No holder	—	Never granted (admin = address(0) at construction). No one can grant/revoke roles outside the propose→wait→execute flow
TIMELOCK_ADMIN	Timelock itself (0x88Ba032be87d5EF1fbE87336b7090767F367BF73)	Contract	Only the timelock can admin its own roles. Config changes (delay, role grants) must go through the 7-day delay
PROPOSER	Daddy/ySafe (0xFEB4acf3df3cDEA7399794D0869ef76A6EfAff52)	6-of-9 Safe	Only proposer — no one else can initiate timelocked operations
EXECUTOR	Daddy/ySafe (0xFEB4acf3df3cDEA7399794D0869ef76A6EfAff52)	6-of-9 Safe	Can execute queued proposals directly
EXECUTOR	TimelockExecutor (0xf8f60bf9456a6e0141149db2dd6f02c60da5779b)	Contract	Wrapper contract — delegates execution to its internal executor list (see below)
CANCELLER	Daddy/ySafe (0xFEB4acf3df3cDEA7399794D0869ef76A6EfAff52)	6-of-9 Safe	Can cancel pending proposals
CANCELLER	Brain (0x16388463d60FFE0661Cf7F1f31a7D658aC790ff7)	3-of-8 Safe	Can cancel pending proposals

TimelockExecutor Contract

0xf8f60bf9456a6e0141149db2dd6f02c60da5779b — governance-gated wrapper around the TimelockController. Only addresses on its internal executor list can call execute() through it.

Parameter	Value
Governance	Brain (0x16388463d60FFE0661Cf7F1f31a7D658aC790ff7) — only Brain can add/remove internal executors
Internal executor 1	Brain (0x16388463d60FFE0661Cf7F1f31a7D658aC790ff7)
Internal executor 2	Deployer EOA (0x1b5f15DCb82d25f91c65b53CEe151E8b9fBdD271)

Execution Paths for Queued Proposals

All paths require Daddy (6/9) to first propose the operation and a 7-day wait:

1. Daddy (6/9) executes directly (holds EXECUTOR_ROLE on timelock)
2. Brain (3/8) executes via TimelockExecutor contract
3. Deployer EOA executes via TimelockExecutor contract

Why the Delay Cannot Be Bypassed

To change the timelock delay (e.g., reduce from 7 days), an attacker would need to:

1. Control Daddy (6/9) to propose updateDelay() — the only PROPOSER
2. Wait 7 days — Brain or Daddy can cancel during this window
3. Execute via Daddy, Brain, or the EOA — but the operation is already visible onchain for 7 days

DEFAULT_ADMIN was never granted, so no one can grant themselves PROPOSER or TIMELOCK_ADMIN to skip this flow. The timelock holds TIMELOCK_ADMIN but can only act on it through its own propose→wait→execute cycle.