Yearn's security policy is available at https://github.com/iearn-finance/yearn-protocol/blob/develop/SECURITY.md
This git repository is a central place for all other security-related information about the Yearn project. It includes the following:
- Security contact PGP keys (
keys/) - Public disclosures (
disclosures/) - Security adits (
audits/)
The files contained in this repository can be verified in two ways:
- By verifying the git commit tags (
git tag -v) - By verifying the detached PGP signatures provided for most files included here