Ranked & Reviewed · 9 services
Best Yield Aggregators
Nine yield aggregators and vaults, ranked on fee disclosure, licence, audits, custody and strategy transparency. Displayed APY is not scored. The marks come from desk research checked in November 2026.
At a glance
| # | Service | Score | Best for |
|---|---|---|---|
| 1 | Origin (OUSD) | 8.8 | Open code and component-level audits for a yield-bearing dollar |
| 2 | Convex Finance | 8.6 | Fees itemized to the component, under an MIT licence |
| 3 | Beefy | 8.4 | Named auditors and a plain no-custody statement |
| 4 | Yearn Finance | 8.2 | AGPL code with audits tied to each vault version |
| 5 | Pendle | 7.4 | Audit reports filed by component and a single published YT fee |
| 6 | Harvest Finance | 7.0 | Linked audits and net-of-fee APY with a 12-hour timelock |
| 7 | Idle Finance | 6.8 | Exact per-product fees and a dated, linked audit table |
| 8 | Sommelier | 6.6 | Apache-licensed code and a written user-only withdrawal rule |
| 9 | Yield Yak | 5.8 | Open code and no deposit or withdrawal fees |
Best Yield Aggregators, ranked by score
Origin (OUSD) scores 8.8 out of 10 in yield aggregators: MIT-licensed code, audits mapped to each component, and a 20% performance fee with every APY published net of it. Redemption can take up to 24 hours, and the docs never state zero mint or redemption fees. Desk research, checked November 1, 2026.
Pros
- Licence 10: origin-dollar repository carries an MIT LICENSE file and is actively maintained
- Audit disclosure 10: reports mapped to each OUSD component, through a February 2026 Sigma Prime review
- Strategy transparency 8: every published APY stated net of the 20% fee; yield sources documented
- Custody 8: OUSD stays in the wallet; terms disclaim custody; 1:1 USDC redemption in the app
Cons
- Fee disclosure 8: docs do not state that minting, management or redemption are fee-free
- Direct redemption takes 10 minutes to 24 hours, longer if Morpho markets are fully borrowed
- Yearn can reweight Morpho markets within Origin's limits; rebalancing is manual
- Most contracts are upgradeable by xOGN vote after a 48-hour timelock
Convex Finance scores 8.6 out of 10 in yield aggregators: it itemizes every fee component with adjustable ranges, licenses all its code under MIT and states that its multisig cannot reach deposits. Admin powers are not time-locked and core audits date from 2021. Desk research, checked November 1, 2026.
Pros
- Fee disclosure 10: 17% CRV fee itemized, with adjustable ranges, a 20% ceiling and zero LP deposit or withdrawal fees
- Licence 10: MIT LICENSE file in platform; every public convex-eth repository checked reports MIT
- Strategy transparency 8: both current and projected APR stated to have all fees subtracted
- Custody 7: docs state the 3-of-5 multisig does not have direct access to user deposits
Cons
- Admin actions (pause, fee changes, treasury, votes) are not time-locked
- Core platform audit is a single MixBytes report from April 2021; the June 2026 voting auditor is unnamed
- No 'never locked' statement for LP deposits; a known attack path on deposits is documented
- Serves only Curve, Frax and f(x) Protocol LPs, with a one-way CRV-to-cvxCRV conversion
Beefy scores 8.4 out of 10 in yield aggregators, on the strength of eight named audit firms, published fee ceilings and an explicit statement that it never locks or owns deposits. Its contracts are MIT only through per-file SPDX tags, with no repository licence file. Desk research of primary sources, checked November 1, 2026.
Pros
- Audit disclosure 10: eight firms named per product, with reports in a public beefy-audits repository
- Custody 9: docs state funds are never locked and Beefy does not own vault deposits
- Fee disclosure 8: 9.5% maximum performance fee, up to 0.1% withdrawal fee and 0.05% zap fee published
- Strategy transparency 7: vaults page states displayed APYs already include all vault fees
Cons
- Licence 8: beefy-contracts has no LICENSE file or package.json licence, only per-file MIT SPDX tags
- A 3-of-6 developer multisig can replace a vault's strategy after a 6-hour timelock
- Published fees are ceilings; the exact rate for a vault is shown only in its deposit panel
- No per-vault strategy document or historical, non-projected performance in the docs
Yearn Finance scores 8.2 out of 10 in yield aggregators, led by AGPL-3.0 vault code, audits mapped to each contract version and net-of-fee APYs with published strategy risk scores. Per-vault fees without a full schedule and an untimelocked governance multisig hold it back. Desk research of primary sources, checked November 6, 2026.
Pros
- Licence 10: yearn-vaults-v3 and tokenized-strategy are AGPL-3.0, updated October 2026
- Audit disclosure 9: auditors mapped to versions with linked reports, newest v3.1.0 (June 2026)
- Custody 7: docs state only the depositor can access vault funds; the multisig cannot remove them
- Strategy transparency 8: APY shown net of fees, plus a published per-strategy risk score framework
Cons
- Fee disclosure 7: fees set per vault, shown on yearn.fi; no full schedule or maximum in the docs
- Deposit and withdrawal fees are not addressed in the yVaults overview
- The 6-of-9 governance multisig is deliberately not timelocked, per the security page
- ChainSecurity's audit of v2 version 0.3.5 has no public report
Pendle scores 7.4 out of 10 in yield aggregators, led by audit reports mapped to each component, a flat 5% yield fee and a core licence whose GPL conversion date has passed. Upgradeable SY wrappers with no documented timelock hold back custody. Desk research of primary sources, checked November 6, 2026.
Pros
- Audit disclosure 9: reports from nine auditors filed by component in the public core repository
- Fee disclosure 8: flat 5% fee on YT yield and points, plus a published swap-fee formula and split
- Licence 8: the BUSL-1.1 change date (July 1, 2023) has passed, granting GPL-2.0-or-later
- Custody 6: terms state a non-custodial basis and market contracts are immutable once deployed
Cons
- Custody 6: newer SY wrappers are upgradeable and go to Pendle's pause controller; no timelock documented
- Strategy transparency 6: docs do not say whether the displayed underlying APY is net of the 5% YT fee
- Each market's swap fee tier appears only in its specs panel, not in the docs
- The docs security page names four audit sources, gives no dates and omits later reports
Harvest Finance scores 7.0 out of 10 in yield aggregators: five audit firms with linked reports, an APY stated net of its 8% to 15% performance fee, and no deposit or withdrawal charge. Custody is stated only for the website, and the main contracts repository lacks a licence file. Desk research, checked November 1, 2026.
Pros
- Audit disclosure 8: five named firms (Haechi, PeckShield, CertiK, Least Authority, Halborn), all reports linked
- Fee disclosure 7: 8% to 15% performance fee published; FAQ states no charge to deposit or withdraw
- Strategy transparency 7: FAQ states the fee is included in the displayed APY; per-farm APY history
- Strategy changes wait 12 hours after announcement, giving depositors time to withdraw
Cons
- Licence 8: Ethereum strategy repo has no LICENSE file (ISC in package.json only); Base files tagged Unlicense
- Custody 5: non-custodial definition covers the website, not the vault contracts
- Fee given only as an 8% to 15% range, with no per-vault figure or split in the docs
- Four of five audits are undated; later deployments are stated to be out of scope
Idle Finance scores 6.8 out of 10 in yield aggregators: it names an exact performance fee for each vault and links ten dated audits, but its headline APY is gross of fees and its actively maintained tranches code has no licence file. Desk research, checked November 1, 2026.
Pros
- Audit disclosure 9: ten dated audits with linked reports from five named reviewers, 2020 to 2024
- Fee disclosure 8: exact fee per product, 10% Best Yield and 10% or 15% per named tranche
- Custody 6: tranches docs state no locking periods or epochs; terms say the LLC does not hold assets
- Best Yield upgrades are owned by a governance Timelock controlled by IDLE holders
Cons
- Strategy transparency 6: the headline APY is a spot gross return; only 'realized APY' is net of fees
- Licence 5: idle-tranches has no LICENSE file and IdleCDO.sol is tagged UNLICENSED
- Docs list performance fees only and do not state that management or withdrawal fees are zero
- Development focus has moved to Pareto; the vaults' future maintenance is not stated
Sommelier scores 6.6 out of 10 in yield aggregators, led by Apache 2.0 code across every core repository and a plain statement that only users can withdraw. No published fee rates, thin audit dating and one-line strategy descriptions hold it back. Desk research of primary sources, checked November 6, 2026.
Pros
- Licence 10: Apache 2.0 files in cellar-contracts, steward, gravity-bridge and the sommelier chain
- Custody 7: homepage states users are the only ones who can withdraw assets
- Audit disclosure 6: a linked report for each of 32 listed strategies, plus a Gravity Bridge audit
- Performance fees apply only above a high-water mark, paid from a reserve, per the fee docs
Cons
- Fee disclosure 6: no per-cellar rate, cap or strategist share published; strategists can change fees
- Strategy transparency 4: one-line vault descriptions, no allocation or performance history
- Audits page names no firm in text and dates only one report (July 2022)
- No terms of service on somm.finance, only a privacy policy
Yield Yak scores 5.8 out of 10 in yield aggregators, led by MIT-licensed farm contracts, no deposit or withdrawal fees and vault APYs stated net of fees. Audit disclosure is the weak point: one auditor is named, but no reports or audited-farm list are published. Desk research of primary sources, checked November 6, 2026.
Pros
- Licence 8: MIT LICENSE on smart-contracts and GPL-3.0 on Yak Swap; the vault fork is MIT only via SPDX
- Fee disclosure 7: no deposit or withdrawal fees; farm fee of usually 5-10% of rewards, with an example
- Strategy transparency 7: vault APYs are stated as always net of fees, with worked examples
- A manual-withdrawal guide shows how to exit a farm through the block explorer
Cons
- Audit disclosure 3: CoinFabrik named for high-TVL strategies, but no reports, dates or farm list
- Custody 4: no documented admin powers, timelock or custody statement; no terms of service
- The farm fee is a variable range, and each vault's fee is set per vault
- Bug bounty of 100 YAK via Telegram or X, with no platform or published scope
Best yield aggregators by use case
- You want every fee itemized before you deposit: Convex Finance is the only entry with a full 10 for fee disclosure. On Curve rewards it takes 17% of CRV and publishes the split to cvxCRV stakers, CVX stakers, the treasury and the harvest caller, with an absolute ceiling of 20%. Deposit and withdrawal fees are zero. It serves only Curve, Frax and f(x) Protocol liquidity providers.
- You want a yield-bearing dollar under open code: Origin (OUSD) scores 10 for licence (MIT) and 10 for audits, with reports mapped to each component. It takes a 20% performance fee on yield and says every APY it publishes is net of that fee. OUSD is backed by USDC, and direct redemption can take up to 24 hours.
- You want a plain statement that the vault never holds your funds: Beefy has the category's highest custody mark, 9. It states it never locks or owns deposits, and strategy changes by its 3-of-6 developer multisig wait behind a 6-hour timelock. Eight audit firms are named.
- You want audits tied to each vault version: Yearn Finance scores 10 for its AGPL licence (version 3) and 9 for audits, which are mapped to contract versions, the latest a yAudit review of V3.1.0 in June 2026. Factory-deployed vaults charge a 10% performance fee, and displayed APYs are net of fees.
- You trade or lock in yield rather than auto-compound it: Pendle charges a flat 5% on the yield and points accrued by YT and files audit reports from nine auditors by component (audits 9). Custody scores 6, because its newer SY wrappers can be upgraded with no documented timelock.
How the ranking works
Each aggregator gets a 0 to 10 mark on five criteria from the published rubric. The APY a vault displays is not scored. On 6 November 2026 the marks were checked against one scale per criterion, so the same evidence earns the same mark across the nine entries.
- Fee disclosure: performance, management and withdrawal fees as figures. Every component published with a cap, plus a stated zero for deposits and withdrawals, earns 10 (Convex). Published rates or ceilings that leave some fee unaddressed or the exact vault rate to the interface score 8 (Origin, Beefy, Pendle, Idle). A fee range, or rates set per vault with no full schedule, scores 7 (Yearn, Harvest, Yield Yak). A fee structure with no rates scores 6 (Sommelier).
- Licence & code openness: read from the contracts repository. A recognized open-source licence in a LICENSE file scores 10 (MIT for Origin and Convex, AGPL-3.0 for Yearn, Apache 2.0 for Sommelier). Open-source terms declared only in per-file SPDX tags or package.json, with no LICENSE file in the live repository, score 8 (Beefy, Harvest, Yield Yak), as does a BUSL licence whose change date has passed (Pendle). A maintained repository with no LICENSE file and a core contract tagged UNLICENSED scores 5 (Idle).
- Audit disclosure: named firms with reports. Reports mapped to components, or a long list of named firms, earn 10 (Origin, Beefy). Linked, attributed reports with one stated gap score 9: a report marked unavailable (Yearn), an undated summary page (Pendle), or recent work concentrated in one reviewer (Idle). Older or partly undated reports score 8 (Convex, Harvest). Firms named only in link addresses score 6 (Sommelier). One named auditor with no reports scores 3 (Yield Yak).
- Custody & control: whether the protocol says your funds stay yours and how admin power is limited. A never-locked statement plus timelocked admin changes earns 9 (Beefy). An untimelocked admin multisig with a written statement that it cannot take deposits scores 7 (Convex, Yearn), as does Sommelier's user-only withdrawal rule. Upgradeable contracts with no documented timelock, or no-control wording at the interface level only, score 6 (Pendle, Idle). Wording that covers the website but not the vault contracts scores 5 (Harvest). No documented admin powers, timelock or custody statement scores 4 (Yield Yak).
- Strategy transparency: whether the displayed return is stated net of fees and the strategy is documented. A net-of-fee APY with documented yield sources earns 8 (Origin, Convex, Yearn). A net APY with generic strategy docs scores 7 (Beefy, Harvest, Yield Yak). A gross headline APY, or no statement on the basis, scores 6 (Idle, Pendle). One-line vault descriptions score 4 (Sommelier).
The overall score is the plain, equal-weight average of the five marks, rounded to one decimal: Origin's (8 + 10 + 10 + 8 + 8) / 5 gives 8.8. Ties are listed alphabetically. The marks come from desk research of documentation, repositories, terms and audit pages, checked between 1 and 6 November 2026. We made no deposits. Marks are re-checked, and each review logs every change with its reason and source.
What changed in this update
The previous edition, checked on 24 July 2026, ranked ten aggregators. In this November 2026 update the biggest moves were:
- Beefy, up to 8.4 from 6.2: its fees breakdown publishes a 9.5% maximum performance fee, a withdrawal fee of up to 0.1% and a 0.05% zap fee (fees 4 to 8). Licence rose from 1 to 8 under the single licence scale, because its contracts carry MIT tags with no LICENSE file. Custody slipped from 10 to 9 for the multisig's power to swap strategies.
- Sommelier, up to 6.6 from 4.6: an official audits page now links reports (audits 2 to 6), its homepage states that only users can withdraw (custody 3 to 7), and Apache 2.0 was confirmed across its core repositories (licence 8 to 10).
- Harvest Finance, up to 7.0 from 5.2: licence rose from 2 to 8 on the single scale, custody from 3 to 5 for its terms and 12-hour timelock, and fees from 6 to 7.
- Convex Finance, up to 8.6 from 7.6, and Pendle, up to 7.4 from 6.0: Convex gained on licence, custody and strategy transparency. Pendle's BUSL change date passed (licence 5 to 8), and its revised terms state a non-custodial basis (custody 3 to 6).
- Idle Finance, down to 6.8 from 7.4: Idle's FAQ says its headline APY is a gross figure (strategy 7 to 6), and the tranches repository it now maintains has no licence file (licence 8 to 5).
- Smaller moves: Yield Yak rose to 5.8 from 5.6. Yearn held at 8.2, with strategy transparency up a point and custody down a point, matching Convex for an untimelocked multisig. Origin was unchanged at 8.8.
Aura Finance was withdrawn after it wound down under AIP-78 in April 2026.
Is the APY a yield aggregator shows net of fees?
Not always. Origin, Convex, Yearn, Beefy, Harvest and Yield Yak state that the returns they display already have their fees taken out. Idle's FAQ says its headline APY is a spot gross return and only its realized APY counts the performance fee. Pendle's docs do not say whether the underlying APY shown is net of its 5% YT fee. Check the vault's own wording before comparing two numbers.
What the scores do not cover
- Return levels: APY and TVL move daily and are set by the strategies underneath. Origin's published APYs are trailing averages, not promised rates.
- The protocols underneath: a vault inherits the risk of every pool, lending market or token it uses. Yearn's docs state that no one will compensate losses and there is no insurance. Convex's risks page warns that users can lose some or all of their funds.
- Incident history: not scored. Origin records that more than $7 million was drained from the original OUSD contracts in November 2020, and that holders were compensated. Harvest's docs record that $24 million was taken from two of its stablecoin vaults on 26 October 2020 through price manipulation of a Curve pool.
- Who runs it: Beefy's team is pseudonymous, Convex names no legal entity, and Idle's development has moved to Pareto.
- Eligibility: Harvest's and Idle's terms bar US persons and several other jurisdictions. Sommelier's site lists no terms of service.
- Impermanent loss and liquidation on LP and leveraged strategies. Our guide to how yield farming works explains both.
How to choose
- Identify what the vault actually deploys into and whether you would accept the risk of each underlying protocol on its own.
- Find the exact fee for that vault, not only the protocol's ceiling, and check whether the APY shown is net of it.
- Read who can change the strategy and whether a timelock gives you time to exit first.
- Check the withdrawal path: how long redemption takes and what happens if the underlying market is fully borrowed.
- For a dollar product, assess the stablecoin behind it. Our guide on how to assess a stablecoin sets out the questions.
- Confirm that the terms allow users in your country.
How we score this category
An aggregator inherits the risk of everything it deploys into, so this rubric scores what it charges, how openly it licenses its code, whether it names its auditors and whether it says plainly that your funds stay yours. Advertised APY is not scored — it moves daily and is set by the strategies underneath — but the fee taken off the top, and who checked the vault holding your deposit, are matters of record.
Every service in this ranking is scored 0–10 against the same 5 criteria, each carrying equal weight (20% apiece). The overall score is their plain average, rounded to one decimal place, and each review prints the individual numbers and the arithmetic so you can reproduce the result yourself.
What each criterion covers
- Fee disclosure20% of the score
- Whether performance, management and withdrawal fees are published as figures rather than described as a structure. Stating there is no withdrawal fee counts as disclosure; leaving the number to the interface does not.
- Licence & code openness20% of the score
- The licence on the protocol's own contracts repository, read from the file. A recognised open-source licence scores highest; a delayed-open licence mid-table; a missing licence file lowest, since a vault holding your deposit under unlicensed code reserves every right by default.
- Audit disclosure20% of the score
- Whether audit reports are published with the firms named. A vault that routes into other protocols carries stacked risk, so a long list of named auditors matters more here than almost anywhere.
- Custody & control20% of the score
- Whether the protocol states plainly that funds are never locked and that it does not own or control user deposits. A vault is only non-custodial if it says so and the code bears it out.
- Strategy transparency20% of the score
- Whether the displayed return is stated to be net of fees, and whether what the vault actually does with deposited funds is documented rather than left as a black box.
What does not affect a score
Only the criteria above count. No provider can buy a score, a rank, or an entry in this list. Where two services finish level, they are listed alphabetically rather than ordered silently.
The process across all categories, including how often we re-check, is set out in our ratings methodology.
Frequently asked questions
How were the yield aggregators in this ranking selected?
The ranking covers the vaults and yield aggregators reviewed on Coin Currents Daily that were operating, with public documentation, at the check. All nine are scored on the same five criteria. Aura Finance was withdrawn after it wound down under AIP-78 in April 2026.
How is the overall score for each aggregator calculated?
Fee disclosure, licence, audit disclosure, custody and strategy transparency each get a 0 to 10 mark. The overall is the plain average of the five, rounded to one decimal, with no extra weight on any criterion. Ties are listed alphabetically.
Which aggregator fits someone who wants yield on dollars?
Origin (OUSD) is the dollar product in this ranking. It scores 10 for licence and 10 for audits, and its published APYs are net of a 20% performance fee. It is backed by USDC and lent on Morpho, so it carries the risks of both, and direct redemption can take up to 24 hours.
Which risk does the score not capture?
The biggest one is the risk of the protocols a vault deploys into. A well-documented vault can still lose funds if an underlying pool or lending market fails. The score also leaves out return levels and past incidents.
What fees or country restrictions should I check before depositing?
Check the performance fee for the specific vault, any management, withdrawal or zap fee, and whether the displayed APY already counts them. Then read the terms: Harvest and Idle, for example, bar US persons.
How old are the measurements on this page?
Each review was checked between 1 and 6 November 2026, and the marks were aligned to one scale per criterion on 6 November. Fees and admin settings can change by governance vote, so each review records its own check date and a log of score changes.
Rankings are editorial. Nothing here is financial advice. Editorial policy · How we score · How we're funded.








