How Does YieldFi Work?
YieldFi is a yield aggregation platform that simplifies DeFi investing by automatically allocating your deposits across trusted protocols like Aave, Pendle, Morpho, and Ethena. Instead of manually managing positions across multiple protocols, you deposit stablecoins or other assets and receive yield-bearing tokens that grow in value block by block. YieldFi has been audited by Halborn, Spearbit/Cantina, and Cyfrin. The V2 architecture includes timelock-controlled upgrades for additional security, and the V3 is now live with improved vault strategies.
TVL
$17M
Sector
Yield
Risk Grade
C
Value Grade
C-
Core Mechanisms
2.3.3
Automated yield aggregation across Pendle, Aave, Morpho, and Ethena
Standard yield aggregator pattern routing deposits to blue-chip DeFi protocols. Similar to Yearn Finance model but with a focus on institutional-grade simplicity.
3.4.2
Yield-bearing tokens representing deposited positions
Users receive yield-bearing tokens upon deposit that increase in value as yields accrue. Standard receipt token model.
5.4.1
Timelock-controlled proxy upgrades with governance oversight
V2 architecture implemented timelock-controlled upgrades. ProxyAdmin governed by timelock contract, preventing instant bundled upgrades.
2.2.4
Management and performance fee split between protocol and depositors
Standard yield aggregator fee model with management and performance fees taken from generated yield.
6.4.1
Oracle dependency inherited from downstream protocols
YieldFi inherits oracle dependencies from each integrated protocol (Chainlink via Aave, Pyth via other integrations).
2.1.2
NovelIndexed yield products with block-by-block yield accrual
Yield indexed products that accrue yield block by block. Novel abstraction layer that simplifies complex multi-protocol yield strategies into single deposit interfaces.
How the Pieces Interact
YieldFi routes funds across Pendle, Aave, Morpho, and Ethena. An exploit in any single downstream protocol would cause losses for YieldFi depositors. The combinatorial attack surface is the union of all integrated protocols' vulnerabilities.
Ethena's delta-neutral strategy relies on centralized exchanges for hedging. A CEX failure (insolvency, withdrawal freeze) would impair Ethena's backing, cascading losses to YieldFi depositors with Ethena exposure.
Users depositing into YieldFi may not understand they have exposure to multiple protocols with different risk profiles. The abstraction that makes the product user-friendly also masks the underlying complexity and compounding risks.
The timelock mechanism that prevents instant upgrades also constrains the team's ability to respond quickly to a downstream protocol exploit. The delay between detecting an issue and being able to modify contracts could extend the exposure window.
What Could Go Wrong
- YieldFi aggregates deposits across multiple DeFi protocols (Pendle, Aave, Morpho, Ethena). Users inherit the combined smart contract risk of every downstream protocol. A single exploit in any integrated protocol can result in losses for YieldFi depositors.
- The protocol abstracts complex multi-protocol strategies behind simple deposit interfaces. Users may not fully understand the risk profile of the underlying strategies, creating an information asymmetry between the protocol and its depositors.
- YieldFi relies on Ethena as one of its yield sources. Ethena's synthetic dollar (USDe) uses a delta-neutral strategy with centralized exchange counterparty risk. Ethena-related losses would cascade to YieldFi depositors.
Downstream Protocol Exploit Cascading to YieldFi Depositors
ModerateTrigger: A major exploit in one of YieldFi's downstream protocol integrations (Pendle, Aave, Morpho, or Ethena) results in loss of funds allocated to that protocol.
- 1.A downstream protocol integrated with YieldFi is exploited, resulting in partial or total loss of deposited funds — YieldFi vault balances drop as the affected allocation is impaired
- 2.YieldFi cannot immediately withdraw remaining funds due to timelock constraints on contract modifications — Additional exposure window during which more funds may be at risk
- 3.Depositors attempt mass withdrawals from all YieldFi vaults — Withdrawal pressure may exceed available liquidity, especially if underlying protocols also face withdrawal queues
- 4.Yield-bearing token trades at a discount on secondary markets — Holders who cannot wait for orderly withdrawal face haircuts on secondary market sales
Risk Profile at a Glance
Overall: C (46/100)
Lower score = safer