Yearn.Finance Security Review

One of the loudest concerns of YFI involves the multisig contract. The original concern was that the original address could print unlimited YFI and then drain the 2 balancer pools. So the multisig was born. More info: YFI Minting Ownership

That YFI minting ownership post clarifies a lot of what has happened but did not clarify some things and hoping to get some opinions from knowledgable experts like Quantstamp

The multisig seems to enable unlimited YFI printing (as the original concern) but after reading the minting ownership post, it seems that the multisig can only activate if there is a passed proposal.

Question: If the activated proposal requests 1000 YFI, this means the multisig can only create the requested amount by the proposal? The multisig cannot create less or more?

2 Likes