Yieldoor Gauges audit

A private security review of Yieldoor (leveraged yield farming), conducted solo and completed on 12th May 2025 over 2 days. 0xSimao disclosed 8 findings: 1 medium, 5 low and 2 informational.

What Yieldoor is

Yieldoor is a leveraged yield farming protocol: vaults run concentrated liquidity positions on CLMM DEXes, a lending pool funds the leverage traders draw, and gauge contracts vest strategy rewards to depositors over time rather than at once.

Scope

This first solo round centred on the reward path for Shadow and Ramses-style gauges: ShadowStrategyGauge holds the strategy's staked position, collects emissions, and vests them to vault depositors, with fees taken on the way through.

Medium severity findings

• Fees or vested position withdrawal in ShadowStrategyGauge::addVestingPosition() when collecting fees will be revested

Low severity findings

• DoS risk in IRamsesGauge(gauge).getReward() when enough periods have passed
• Newly added rewards will not be immediately collected
• ShadowStrategyGauge::addVestingPosition() may revert if there is 0 liquidity to add
• If any of the reward tokens doesn't have a liquid pool, it may be impossible to collect rewards
• Swap amount can be 0 as it divides the balance by 2, DoSing ShadowStrategyGauge::collectGaugeRewards()

Informational findings

• If enough rebalances are performed, ShadowStrategyGauge::collectGaugeRewards() could be DoSed
• If xShadow is token0 or token1, ShadowStrategyGauge::collectGaugeRewards() will take protocol fee on user funds

The report

Download report (PDF)