Beyond the harsh internal scrutiny to which we subject all of our codes, we retain Certik on a monthly contract for the express purpose of auditing our unique code bases. When deemed necessary, we also reach out to external auditing firms to provide additional reassurance.
In developing Reaper Farm, we implemented changes to Yearn's contracts. We added state for profit/loss tracking, support for tokens and deposits that require tax, and deposit caps. These additions were all audited by Solidity.Finance.
Our multi-strategy vaults have undergone an extensive Certik audit with no critical risks. All identified risks have been resolved or have been acknowledged and are being actively managed by our team. The full report is available below.