{"license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/","attribution":"ChainChoice (https://chainchoice.io)","category":"yield_aggregators","evidenceReadAt":"2026-11-03","generatedAt":"2026-11-12","criteria":[{"id":"dependency_surface","label":"Inherited dependency surface","weight":30},{"id":"inherited_exploit_record","label":"Loss record own and inherited","weight":30},{"id":"fee_stack_transparency","label":"Total take-rate and whether it is published","weight":20},{"id":"strategy_change_control","label":"Strategy change control","weight":20}],"providers":{"convex_yieldagg":{"dependency_surface":{"s":9,"q":"As well as Convex Finance specific risks, users are also beholden to any risks that pertain to the Curve.fi platform and Frax Finance platform, as Convex integrates directly with them.","u":"https://docs.convexfinance.com/convexfinance/faq/risks","d":"2026-11-03"},"inherited_exploit_record":{"s":8,"q":"43 . Curve, Vyper - REKT N/A $ 69,300,000 | 07/30/2023","u":"https://rekt.news/leaderboard","d":"2026-11-03"},"fee_stack_transparency":{"s":9,"q":"There is a 17% total fee on all CRV revenue generated by Curve LP's on the platform. | Fees can be adjusted between hard-coded ranges. | There is an absolute fee ceiling of 20%","u":"https://docs.convexfinance.com/convexfinance/faq/fees","d":"2026-11-03"},"strategy_change_control":{"s":6,"q":"Admin controls do not have access to user funds or other dangerous calls and thus time-lock delays are not required. | Multisig Members (3 of 5) | Allows users to withdraw all funds","u":"https://docs.convexfinance.com/convexfinance/faq/multisig-admin-rights","d":"2026-11-03"}},"cian_yield_layer":{"dependency_surface":{"s":3,"q":"This strategy increases the rewards from Pendle PT, multiplying returns by up to 15 times, while protecting users from risks like liquidation. | Supply PT-clisBNB to Venus and then borrow wBNB | StrategyAAVEV3LIDO | StrategyMellowSteakhouse","u":"https://docs.cian.app/llms-full.txt","d":"2026-11-03"},"inherited_exploit_record":{"s":5,"q":"CIAN maintained a flawless security record with no exploits or liquidations for 2 years.","u":"https://docs.cian.app/llms-full.txt","d":"2026-11-03"},"fee_stack_transparency":{"s":7,"q":"CIAN charges a 8% performance fee on profits made. This fee is already calculated in the Net APY shown. | 0.02% of the users’ NAV will be charged when exiting the vault to prevent malicious behavior.","u":"https://docs.cian.app/yieldlayer/for-users-quick-start/fees","d":"2026-11-03"},"strategy_change_control":{"s":2,"q":"CIAN's asset allocation is based on multi-sig to ensure maximized security | Also, withdrawal is going through batched execution with manual review.","u":"https://docs.cian.app/security-and-risk/risk-warning","d":"2026-11-03"}},"yearn_yieldagg":{"dependency_surface":{"s":5,"q":"stcUSD/USDC Pawn Broker Market Allocation % 33.2% Amount $6.05M | Yearn USDC Allocation % 32.5% Amount $5.93M | USDC to USDS Depositor Allocation % 24.2% Amount $4.41M | USDC to sUSDS Lender Allocation % 10.1% Amount $1.85M","u":"https://yearn.fi/v3/1/0xBe53A109B494E5c9f97b9Cd39Fe969BE68BF6204","d":"2026-11-03"},"inherited_exploit_record":{"s":1,"q":"123 . Yearn - REKT 2 Unaudited $ 11,400,000 | 04/13/2023 | 126 . Yearn - REKT Unaudited $ 11,000,000 | 02/05/2021 | 139 . Yearn - Rekt III N/A $ 9,000,000 | 11/30/2025 | 323 . Yearn - Rekt IV N/A $ 293,000 | 12/16/2025","u":"https://rekt.news/leaderboard","d":"2026-11-03"},"fee_stack_transparency":{"s":5,"q":"Fees: 0% Management Fee | 10% Performance Fee | Management fees are claimed from earned yield, pro-rated and up to the stated percentage of principal.","u":"https://yearn.fi/v3/1/0xBe53A109B494E5c9f97b9Cd39Fe969BE68BF6204","d":"2026-11-03"},"strategy_change_control":{"s":6,"q":"This role is currently controlled by a 6 of 9 Gnosis Safe multisig | It is a conscious design decision that this role is not behind a time lock.","u":"https://docs.yearn.fi/developers/security/","d":"2026-11-03"}},"beefy_yieldagg":{"dependency_surface":{"s":2,"q":"\"platformId\":\"convex\" | \"platformId\":\"stakedao\" | \"platformId\":\"morpho\" | \"platformId\":\"pendle\"","u":"https://api.beefy.finance/vaults","d":"2026-11-03"},"inherited_exploit_record":{"s":4,"q":"\"retireReason\":\"exploit\" | \"retireReason\":\"Balancer2025\" | \"retireReason\":\"Stream2025\" | \"retireReason\":\"exploitNoPanic\" | \"retireReason\":\"liquidityPanic\"","u":"https://api.beefy.finance/vaults","d":"2026-11-03"},"fee_stack_transparency":{"s":5,"q":"Here's what a typical vault looks like: | Beefy has introduced a maximum performance fee structure of up to 9.5% | we assign a withdrawal fee of up to 0.1% to each vault","u":"https://docs.beefy.finance/ecosystem/beefy-bulletins/beefy-finance-fees-breakdown","d":"2026-11-03"},"strategy_change_control":{"s":3,"q":"By default, a 6-hour timelock is configured for all strategy changes and upgrades. | It is a 3 of 6 multisig | Signers are anonymous, and details of their precise signing capabilities and setup are kept confidential;","u":"https://docs.beefy.finance/safety/contracts-and-timelocks","d":"2026-11-03"}},"stakedao_yieldagg":{"dependency_surface":{"s":5,"q":"Only Boost strategies optimize LP yield by distributing deposits across multiple boost providers (Stake DAO, Convex) rather than using a single platform.","u":"https://docs.stakedao.org/only-boost","d":"2026-11-03"},"inherited_exploit_record":{"s":4,"q":"A security incident occurred on Votemarket on March 12, 2026, and led to the loss of approximately $176,000 of user rewards.","u":"https://gov.stakedao.org/t/1117.json","d":"2026-11-03"},"fee_stack_transparency":{"s":1,"q":"Current fee rates are displayed on each strategy's page in the app. Fees vary by underlying protocol.","u":"https://docs.stakedao.org/strategyfees","d":"2026-11-03"},"strategy_change_control":{"s":6,"q":"Stake DAO's core contracts are protected by a governance timelock that enforces a 48-hour delay on all protocol changes. | Strategy deployment and configuration | Fee parameter changes | Allocator and sidecar configuration | Withdrawals always remain functional — users can exit their positions at…","u":"https://docs.stakedao.org/timelock","d":"2026-11-03"}},"concentrator_aladdin":{"dependency_surface":{"s":4,"q":"Concentrator is a yield enhancer that boosts yields on Convex vaults by concentrating all rewards into auto-compounding top-tier tokens like aCRV (cvxCRV) and aFXS (cvxFXS). | Funds are automatically staked in Convex vaults and rewards are periodically harvested.","u":"https://docs.aladdin.club/concentrator","d":"2026-11-03"},"inherited_exploit_record":{"s":5,"q":"43 . Curve, Vyper - REKT N/A $ 69,300,000 | 07/30/2023","u":"https://rekt.news/leaderboard","d":"2026-11-03"},"fee_stack_transparency":{"s":6,"q":"Concentrator takes a 10% treasury fee and a 2% harvest fee on yields. | 15% (10% for veSDT holders, 5% for the platform)","u":"https://docs.aladdin.club/concentrator/asdcrv-vaults","d":"2026-11-03"},"strategy_change_control":{"s":2,"q":"eth_call Ethereum block 26334921: Concentrator ProxyAdmin 0x12b1326459d72F2Ab081116bf27ca46cD97762A0 owner() = 0xa0fb1b11cca5871fb0225b64308e249b97804e99; aCRV 0x2b95A1Dcc3D405535f9ed33c219ab38E8d7e0884 owner() = 0xa0fb1b11cca5871fb0225b64308e249b97804e99; Safe…","u":"https://docs.aladdin.club/concentrator/contracts","d":"2026-11-03"}},"origin_defi_yieldagg":{"dependency_surface":{"s":4,"q":"OUSD lends USDC on Morpho markets on Ethereum Mainnet, Base, and HyperLiquid. | The OUSD Morpho Vault is co-curated by Origin and Yearn.","u":"https://docs.originprotocol.com/yield-bearing-tokens/origin-dollar-ousd","d":"2026-11-03"},"inherited_exploit_record":{"s":3,"q":"On November 17, 2020, malicious hackers attacked the OUSD smart contracts and were able to drain over $7M USD of user deposits | providing compensation equal to 100% of the value deposited to OUSD at the time of the exploit | will receive 25% of their compensation in OUSD upfront and 75% of their…","u":"https://www.originprotocol.com/blog/origin-dollar-ousd-detailed-compensation-plan","d":"2026-11-03"},"fee_stack_transparency":{"s":7,"q":"Origin charges a 20% performance fee on the yield its products generate. The fee applies to yield only, never principal, and every APY figure Origin publishes is already net of fees.","u":"https://docs.originprotocol.com/yield-bearing-tokens/core-concepts/performance-fees","d":"2026-11-03"},"strategy_change_control":{"s":4,"q":"All approved proposals execute onchain through a timelock that enforces a mandatory 2-day delay (172,800 seconds) between governance approval and implementation.","u":"https://docs.originprotocol.com/ogn/governance","d":"2026-11-03"}}}}