Summary
The most critical subjects covered in our audit are functional correctness, incentive compatibility, and access control. Functional correctness is high. Incentive compatibility is good but requires attention incertain scenarios, see Rational user will stake tokens during losses recovery. Access control is satisfactory with appropriate privileged role management.
The general subjects covered are event handling, documentation quality, and testing. Documentation is good. Whitepaper is a great help. Test suite would benefit from stateful testing that might help to uncover odd and undesired rounding issues.
In summary, we find that the codebase provides a good level of security.
It is important to note that security audits are time-boxed and cannot uncover all vulnerabilities. They complement but don't replace other vital measures to secure a project.
About Yield Basis Core
Yield Basis implements an Automated Market Maker (AMM) solution that protects liquidity providers from impermanent loss by maintaining constant leverage against Curve Cryptopool LP shares.