Beefy Finance (BIFI)

Basics

• Based in:
• Started in / Announced on:
• Testnet release:
• Mainnet release: 16-9-2020

Audits & Exploits

• Bug bounty program was announced for early May, but never launched (18-6-2021). Update (28-3-2022): This protocol offers an active bug bounty of $75K.
• Scored 79% on DeFi Safety (28-3-2022):

"Beefy documents no software architecture. While some yield farming diagrams are documented, they relate to fee programs and not specific contracts and how they interact with each other. On a strategy level, there is no clear documentation relating to how they operate. No test report is documented in their GitHub repository. Beefy has not undergone formal verification. Beefy has undergone multiple audits. These were post deployment. Their first "audit" was not an audit - it is a smart contract analysis. Their second and third audit was conducted by CertiK. Beefy uses V6 vaults - the most recent audit had V4 vaults in scope. Nevertheless, given the highly fluid nature of yield aggregator contract deployment, we will award points for this. Still, it is time to update these audits or even enter into a continual audit agreement with a firm."

• Previously scored a 53% (18-6-2021): "Certik did a Beefy.Finance preliminary comments audit on May 11th 2021. Certik did a security assessment on Beefy.Finance contracts on March 5th 2021. DefiYield did a Beefy.Finance audit on December 10th 2021. Beefy.Finance was launched on September 16th 2020. Note: Changes in 2nd audit were implemented before deployment." With the comment: "It should be higher except like so many Binance no sfw docs 0 tests. I am sure these guys have this stuff privately. Share, please. And do your edits in a repo people can see."

Governance

Admin Key

• From DeFi Safety (28-3-2022):

"The relevant contracts are identified as immutable. All vaults / strategies are immutable. Beefy does not use a pause control because it is immutable. This protocol has some timelock documentation which can be found at this location. Each relevant contract is identified. There is a justification as to why 6 hours was chosen."

• From DeFi Safety (18-6-2021):

"All contracts are immutable as described. Pause control not documented or explained."

Technology

• Whitepaper can be found here.
• Code can be viewed here. From DeFi Safety (28-3-2022):

"At 810 commits at 74 branches, this development history has been around since before the cows came home."

Implementations

• Built on: BSC and Fuse (11-1-2022). According to DeFi Safety (28-3-2022): Arbitrum, Avalanche, Celo, Cronos, HECO, Moonriver, Polygon, Aurora, Harmony, Moonbeam and Metis as well.

Oracle Method

• From DeFi Safety (28-3-2022):

"Beefy does not use an oracle, and this is stated and explained in this location. This protocol documents no front running mitigation techniques in their strategies. Beefy is not usceptible to flashloan attack, and this is explained in their documentation."

Roadmap

• Can be found [Insert link here].

Team, Funding, Partners

Team

• Full team can be found [here].

Partners

• Partnered with 1inch for Beefy's vaults (Q1 2023).
• Teamed up with Voltage Finance (8-9-2022).

(:

Knowledge empowers all and will help us get closer to the decentralised world we all want to live in!

Making these free wiki pages is fun but takes a lot of effort and time.

If you have enjoyed reading, tips are appreciated :) This will help us to keep expanding this archive of information.

ETH tip address: 0x83460bE5F218b1520B69D702cE60A1DE37dD8E31