2020/08/13 Yam Finance Smart Contract Bug Analysis & Future Prevention
ID: ee44222d-c04a-5736-b063-3241f0cb3ef7
STIX ID: report--ee44222d-c04a-5736-b063-3241f0cb3ef7
Feed Name: CertiK Blog
Threat Score
YAM Finance discovered a critical bug in its YAM.sol rebase function that incorrectly calculated totalSupply, causing unintended over-minting of tokens, loss of governance control, and liquidation/removal of a large portion of the YAM/yCRV liquidity pool; the community attempted a governance fix which failed, rendering the project ungovernable and prompting plans for YAM 2.0 and stronger audit/reimbursement measures (CertiK advocates third-party audits, a decentralized security oracle, and CertiKShield).
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.