Risk Management Approach to Security
summary
Yearn runs B2 vaults with 153 vaults and ~325 strategies, launching up to six strategies per week at peaks and $6B TVL, so an operational risk scoring system quantifies likelihood (audits, code reviews, complexity, team knowledge, protocol safety) and impact to produce a risk heat map, cap per-strategy capital, and prioritize external audits. Workflows include staged live tests with small funds, two-stage internal peer reviews, recurrent reviews and checklists; outcome: no user funds lost to these strategies and fewer firefights though overhead remains.
AI-written summary · about
chapters (10)
- 0:00Intro
- 0:44Yield Aggregation
- 3:48Current Smart Contract Development life cycle
- 4:52Strategy Lifecycle
- 8:54Risk dimensions for Likelihood Score
- 16:26Code Review Process [cont]
- 17:49Due Diligence Document Content
- 18:34Protocol Safety Dimension
- 19:17Audit Dimension
- 21:10CAPA Implementing Corrective/ Preventative Actions
related talks
33mIterative Security...
53mEnterprise Application Risk Profiling
43mDeveloper Driven Security In High-Growth Environments
30mEffective security on a tight budget
43mThe Art of Vulnerability Management - Practical Application of Cyber Triage
51mFAIR STRIDE - Building Business Relevant Threat Models
40mLearning to build an effective security design review program
26mThe Risky Business of Risk Illiteracy (Sean Juroviesky)