Audit contest
Sherlock contest: Yieldoor
TL;DR Yieldoor is a DeFi protocol for leveraged yield positions. In its Sherlock audit contest I submitted 6 findings, which I rated 1 High and 5 Medium, each reproduced on a local chain.
The findings
| My rating | Finding |
|---|---|
| High | Price-feed manipulation on leveraged positions |
| Medium | Reentrancy in Strategy.collectFees |
| Medium | Misdirected swap funds in Leverager |
| Medium | yToken overflow |
| Medium | Interest-rate approximation overcharges borrowers |
| Medium | Wrong borrowing rate at full utilization |
What I took from it
- Leverage multiplies every pricing mistake. Start with where the price comes from.
- Approximation bugs are easy to dismiss and expensive at scale. Write the test with real numbers.
- Edge states like 100% utilization deserve their own test cases.