
Yield Yak Review
Open code and no deposit or withdrawal fees
of 10
Yield Yak scores 5.8 out of 10 in yield aggregators, led by MIT-licensed farm contracts, no deposit or withdrawal fees and vault APYs stated net of fees. Audit disclosure is the weak point: one auditor is named, but no reports or audited-farm list are published. Desk research of primary sources, checked November 6, 2026.
Farm fee
Usually 5-10% of reward tokens per reinvest, variable
Deposit/withdrawal fee
None from Yield Yak on farms or vaults
Vault APY
Stated as always net of fees
Licence
MIT (smart-contracts); GPL-3.0 (yak-aggregator)
Audits
CoinFabrik audits high-TVL strategies periodically; no reports listed
Bug bounty
100 YAK budget, reports via Telegram or X
Scores
Each criterion carries equal weight. The overall score is the average of these 5 scores — (7.0 + 8.0 + 3.0 + 4.0 + 7.0) ÷ 5 = 5.8.
Pros
- Licence 8: MIT LICENSE on smart-contracts and GPL-3.0 on Yak Swap; the vault fork is MIT only via SPDX
- Fee disclosure 7: no deposit or withdrawal fees; farm fee of usually 5-10% of rewards, with an example
- Strategy transparency 7: vault APYs are stated as always net of fees, with worked examples
- A manual-withdrawal guide shows how to exit a farm through the block explorer
Cons
- Audit disclosure 3: CoinFabrik named for high-TVL strategies, but no reports, dates or farm list
- Custody 4: no documented admin powers, timelock or custody statement; no terms of service
- The farm fee is a variable range, and each vault's fee is set per vault
- Bug bounty of 100 YAK via Telegram or X, with no platform or published scope
How Yield Yak scores in yield aggregators
Yield Yak runs auto-compounding farms, mainly on Avalanche, and a newer set of ecosystem vaults (aiAVAX, aiUSD, aiBTC) that spread deposits across Avalanche protocols. This entry rates both in our yield aggregator ranking. Yak Swap and the YAK token are not scored. The basis is desk research of the Yield Yak documentation and its GitHub repositories, checked on November 6, 2026. No deposit was made. The category uses five criteria, each marked 0 to 10 and weighted equally, as set out in our ratings methodology.
| Criterion | What the sources show | Mark |
|---|---|---|
| Fee disclosure | Farm fees are taken from reward tokens at each reinvest, "usually between 5-10%" and variable with network conditions, split between a reinvest reward and an admin fee. A worked example is given. Yield Yak charges no deposit or withdrawal fee on farms or vaults. Vault fees are set per vault: none, a management fee or a performance fee. | 7 |
| Licence & code openness | The smart-contracts repository carries an MIT LICENSE file, and the Yak Swap aggregator is GPL-3.0. The boring-vault fork behind the ecosystem vaults has no repository licence file, though its contracts carry MIT SPDX headers. | 8 |
| Audit disclosure | The docs say Yield Yak works with CoinFabrik to audit high-TVL strategies periodically, but "not all farms are audited". No report, date or list of audited farms is published. The ecosystem vault page links the audit of the upstream Boring Vault code it builds on. The bug bounty budget is 100 YAK, reported through Telegram or X. | 3 |
| Custody & control | A manual-withdrawal guide shows how to exit a farm directly through the block explorer. The docs carry no statement on who controls strategy contracts, and no terms of service. The strategy manager contract defines emergency rescue and sweep roles; the docs do not describe them. | 4 |
| Strategy transparency | The vault fee page says displayed APYs are "always net of fees", with worked examples. Farm returns are calculated from actual recent performance in terms of the deposit asset, not projections. Vault positions are shown in the vault interface; allocations are set daily by AI agents under human oversight. | 7 |
The overall score is the plain average: (7 + 8 + 3 + 4 + 7) / 5 = 29 / 5 = 5.8. The previous overall was 5.6.
Three marks changed at this check. Audit disclosure rose from 2 to 3 because the docs now name CoinFabrik as the auditor of high-TVL strategies, where the earlier review found no firm named. Strategy transparency rose from 6 to 7 on the vault fee page's net-of-fees APY statement and the farms' actual-performance return basis. Licence & code openness moved from 9 to 8 when the category's licence scale was applied consistently on November 6, 2026: a live repository whose MIT terms appear only in SPDX headers, with no LICENSE file, is marked 8. The other two marks were re-checked and held.
Strongest criteria: licence and fee clarity
Licence & code openness scores 8. The farm contracts sit under an MIT LICENSE file and the aggregator under GPL-3.0, both recognised open-source licences. The mark is two points short of the top because the ecosystem vault code, a fork of Veda's Boring Vault, has no licence file of its own; the docs describe it as the MIT version and the contract files say MIT, but the repository does not grant it. The category scale marks MIT terms carried only in SPDX headers, with no LICENSE file in a live repository, at 8.
Fee disclosure at 7 rests on what is absent as much as what is charged. Neither farms nor vaults charge deposit or withdrawal fees, and the reinvest page breaks the farm fee into its two parts with a 100 AVAX example: 0.05 AVAX to the caller, 9.95 AVAX to the fee collector, 90 AVAX reinvested. The mark is not higher because the farm fee is a range that "change[s] with network conditions", and each vault's actual fee is left to the vault itself.
Strategy transparency at 7 credits the clearest APY statement in the docs: vault figures are net of fees, and the fee page shows how a 20% performance fee turns a 12.5% gross return into a 10% displayed one. Farm returns are reported from actual recent performance. What is missing is a written per-farm strategy or a statement that farm APYs are net of the reinvest fee.
Weakest criteria: audits and admin control
Audit disclosure at 3 is a measured deficiency. Naming an auditor is a step up from the earlier check, but a depositor still cannot tell whether a given farm was audited, when or with what findings. The docs are candid that new farms often are not, and that the platforms underneath may be unaudited too, with any losses passing through to Yield Yak users. The 100 YAK bug bounty has no platform, fixed tiers or scope document.
Custody & control at 4 reflects what the docs leave unsaid. The manual-withdrawal guide is useful and shows that a farm position can be exited without the website. But the docs never state who holds admin rights over strategies, what an emergency action can do with funds, or whether changes pass a timelock. Timelock contracts exist in the repository, and the strategy manager sets a 14-day delay on ownership transfers, but none of this is documented for users. No company or terms of service are named. Peers that publish a custody statement or a documented timelock score higher.
What the score does not cover
- APY, TVL and returns, which vary by farm and vault.
- The safety of the farms and lending markets underneath, impermanent loss on LP farms and liquidation on leveraged single-asset farms.
- Suzaku restaking vaults, Yak Swap and the YAK token.
- Who operates Yield Yak. The rubric has no entity criterion, and the contributors are not named.
Our guide to how yield farming works covers the risks an auto-compounder inherits.
Yield Yak vs Beefy and Harvest Finance
| Criterion | Yield Yak | Beefy | Harvest Finance |
|---|---|---|---|
| Fee disclosure | 7 | 8 | 7 |
| Licence & code openness | 8 | 8 | 8 |
| Audit disclosure | 3 | 10 | 8 |
| Custody & control | 4 | 9 | 5 |
| Strategy transparency | 7 | 7 | 7 |
| Overall | 5.8 | 8.4 | 7.0 |
Beefy, another multichain auto-compounder, scores 8.4, and Harvest Finance 7.0. All three score 8 on licence, and Yield Yak trails both on audits and custody, where they name auditors with linked reports and document admin controls. Peer marks are as currently published and may change when those entries are rechecked.
Who it suits
The score suits an Avalanche user who values open code, no entry or exit fees and net-of-fee vault APYs, and who accepts limited audit coverage. It suits less well anyone who needs published audit reports for the specific farm, or written admin controls, before depositing. Check a farm's age and underlying platform first.
How it compares

Origin (OUSD)
Open code and component-level audits for a yield-bearing dollar

Convex Finance
Fees itemized to the component, under an MIT licence

Beefy
Named auditors and a plain no-custody statement

Yearn Finance
AGPL code with audits tied to each vault version

Pendle
Audit reports filed by component and a single published YT fee

Harvest Finance
Linked audits and net-of-fee APY with a 12-hour timelock

Idle Finance
Exact per-product fees and a dated, linked audit table

Sommelier
Apache-licensed code and a written user-only withdrawal rule
Sources
Scored from published primary sources rather than hands-on use. Every figure above comes from one of the pages below, on the date shown. Manufacturers change prices and specifications without notice — if something here no longer matches the source, tell us and we will correct it.
- 1.Yield Yak docs: Welcome (risks, CoinFabrik) — checked
- 2.Yield Yak docs: The Reinvest Button (farm fees) — checked
- 3.Yield Yak docs: Vault returns and fee structure — checked
- 4.Yield Yak docs: Ecosystem vaults — checked
- 5.Yield Yak docs: Returns and tracking — checked
- 6.Yield Yak docs: Manual withdrawal — checked
- 7.Yield Yak docs: Bug bounty — checked
- 8.GitHub: yieldyak/smart-contracts (MIT) — checked
Frequently asked questions
Why does Yield Yak score 5.8?
It is the plain average of five equally weighted marks: fee disclosure 7, licence 8, audit disclosure 3, custody 4 and strategy transparency 7. Open code and clear fees are offset by thin audit and admin-control disclosure.
What holds Yield Yak's score back?
Audit disclosure at 3 and custody at 4. The docs name CoinFabrik but publish no reports and say not all farms are audited. They also do not describe who holds admin rights over strategies or any timelock.
Does Yield Yak charge deposit or withdrawal fees?
No. Its docs say it charges neither on farms or vaults, though underlying farms may. Farms pay a fee of usually 5-10% of reward tokens at each reinvest; vault fees are set per vault.
What changed at the November 2026 check?
Audit disclosure rose from 2 to 3 now that the docs name CoinFabrik, and strategy transparency from 6 to 7 on the net-of-fees vault APY statement. Licence moved from 9 to 8 when the category's licence scale was applied consistently on November 6, 2026, because the vault fork has MIT terms only in SPDX headers. The overall moved from 5.6 to 5.8.
How does Yield Yak compare with Beefy and Harvest Finance?
Beefy scores 8.4 and Harvest Finance 7.0. All three score 8 on licence and 7 on strategy transparency; Yield Yak has the weakest audit and custody marks of the three.
Nothing here is financial advice. Editorial policy · How we score · How we're funded.