🎵Pledge Pool 14 - Crescendo now LIVE🎵

Crescendo ASA will be a marketplace, unlike any other. Up-and-coming creators can use the platform to sell MP3s, physical merchandise, NFTs, services, & more!

YLDY/CRSD LP > YLDY
YLDY>CRSD

Add Liquidity, Stake Now! #20PoolPledge

🚨New Partner Pool 🚨

KryptoNurd and Yieldly are proud to announce, the latest #TEAL5 staking pools are now LIVE!

$YLDY/ $NURD LP> $YLDY
$YLDY> $NURD

✔️Contracts Audited ✔️Liquidity added

Stake now at https://app.yieldly.finance

Details here: https://link.medium.com/tIGQR1FCQnb

We stand for freedom. We stand for peace.

We stand with our Ukrainian friends. 💛💙

🐱Pledge Pool 15 Nekoin NOW LIVE🐱

@NekoinASA is a fun token that powers the Nekoin ecosystem. With community built on philanthropy, art, NFTs, games - NEkoin takes community building to the next level!

$YLDY/ $Nekos LP > $YLDY
$YLDY> $Nekos

Add Liquidity, Stake Now! #20PoolPledge

📢 Message from our Founder📢

AlgoFi … WagmiSwap… Yieldly… Borderless Capital… GameFi… Algorand Foundation …

To answer what these have in common and find out the latest from Yieldly, read our Founders’ latest blog, now! 👇

https://link.medium.com/qpO6rVi61nb

🚨Bitmart listing Update🚨

After recent maintenance causing a slight delay, we are proud to announce the listing of ASA YLDY on Bitmart.

No tag, no memo, no problem 😎

✅Deposits open: 1st March 10:00 AM (EST)
✅Trading: 3rd March 10:00 AM (EST)

#NewListing #ASA

📢Pledge Pools📢

After delivering as promised for 3 solid weeks of back to back LPs, we’re taking a pause before launching our final 5 LPs as part of our pledge to support the Algorand ecosystem.

They are locked and loaded, so watch this space in due time… 👀

#20PoolPledge

🚨Yieldly No-Loss Prize Games Update🚨

Some of you may have noticed our prize games haven't been announced this week. Not to worry, while the ALGO prize game has now run its course, the NFT prize game is just being updated.

Read our mini-blog for more👇https://link.medium.com/gBJ0wOMD5nb

🔔BitMart trading now LIVE🔔

ASA listing🍾 - YLDY/USDT pairs🦩

Check it out here👇

https://www.bitmart.com/trade/en?layout=pro&symbol=YLDY_USDT

Dear all,

In regards to the recent irregular activity around one of our Teal 5 distribution pools, here's what we know so far:

- Based on an initial code analysis, a bot has been using the timing parameters around claiming rewards to glitch the HDL distribution pool Teal 5 contract (HDL -> HDL). As a result, the bot has been able to claim a disproportionate share of HDL rewards.

- It is not a security exploit, but more a manipulation of code to mislead the smart contract. We are closely monitoring the situation and preparing for a remedy with the team.

- As of now, no other pool has been gamed for the same result and no other LP pool shares the same code. This is an isolated incident on a single contract.

- We remind you to please withdraw from the HDL>HDL distribution pool.

We are working hard to investigate this further and will be providing more information in due course. Please be assured that we will also be arranging a plan that will ensure all who have staked in the affected pool receive their fair share of rewards. We thank you for your patience and look forward to sharing more once we have any further information.

Hi all,

We have made further progress in determining what the vulnerability in our Teal 5 HDL distribution pool allowed the attacker to do, and will be putting out a more detailed blog in due time. In summary, here is a high-level rundown of what happened and our actions:

Our preliminary findings indicate that what had appeared to be a time parameter manipulation at first was actually a mathematical discrepancy in which the attacker was able to withdraw an amount of HDL severely disproportionate to the deposited stake.

The vulnerability appears to be due to a rounding error that happened in the contract, which turned a small stake of HDL into a much bigger one that the attacker could then withdraw immediately. They were able to rinse and repeat this a large number of times.

We are committed to finding solutions and are currently engaged in a deep review with security auditors including Halborn. We are also in close contact with the Headline team and greatly appreciate their partnership and support as we make this right.

At this point, we’d like to remind all our users to withdraw your stake from the affected HDL>HDL distribution pool to mitigate any impact for you. While we have removed the affected pool from our interface, the attacker can still interact with the contract directly.

We would like to express our deepest regret and concern for this incident and to all those affected. The team is also working in parallel to determine the extent of impact on users and work out a fair reimbursement plan for all affected.

We want to assure everyone that Yieldly will not penny-pinch with our users who have supported us from the start as we explored more DeFi products for Algorand. We’d like to reiterate that this vulnerability is isolated to the particular HDL->HDL distribution pool contract.

Further, we aim to provide updates daily around developments in how we are responding to this incident. We ask for the patience and understanding of everyone as we navigate these troubled waters. We are working to update everyone on what we know, as we know it.

UPDATE: We wish to make one thing abundantly clear — the security professionals at Halborn completed our audits in Dec 2021. The specific code leading to the issue was pushed into prod post-audit this year. We have identified the issue & will provide a post-incident report as soon as we are ready.

In line with that, we would like to remind you of the following:
1) Please withdraw from HDL>HDL distribution pool if you haven't already. The issue is presently isolated to that particular pool's contract.
2) The team is working to determine the extent of impact on users & create a fair reimbursement plan for all affected.

Update: We have narrowed down the vulnerability in the particular contract and will be working to rectify it. As all of you can understand, we will only be providing more detailed information once we have done a full review of our entire system.

As part of a wider and ongoing security review in light of this incident, we will also be taking the bridge tool off our site while this is in progress. We understand this is short notice, and encourage anyone with issues to reach out to us directly.

We also have the cooperation of several centralised exchanges that have received/sent funds to/from the wallet addresses involved in this incident. Thanks to the blockchain, steps are being taken to identify the wallet owners such that we may pursue further action on our end.

The outcome of these actions will not affect whether or not Yieldly makes affected users right. We once again ask for patience as we work out the best way to do so. As always, any reasonable suggestions on how we can move forward with this are welcome.

🦩The Flamingo squad is growing🦩

Please welcome to the ambassador flamboyance

@somzurim @Donboab @MikeyyHH @Boeieruurd

We’re proud to have them with us along with our existing awesome OG ambassadors.

Welcome to the team guys 🤝

It was remarked once that women hold up half the sky. At Yieldly they are doing more than that in our executive and leadership ranks.

We are proud to lead DeFi companies in diversity and to count many fantastic women in our team, from COO, chief of staff, ops managers through to ambassadors, and many in between.

We are filling more roles across the board and would love to continue our proud tradition of hiring from all walks of life, including exceptional women.

#iwd2022

Update: We continue to work closely with various partners including
Headline to pool resources and information, even as our broader internal security review carries on over the coming weeks. As a final update, we would like to reinforce a few points from the past week:

The affected distribution pool will have run its course in 1 day and we’d like to remind all users who have staked HDL in that pool to withdraw their assets if you have not already done so, as leaving your assets in there puts your funds at risk.

If you are an affected user, please be assured that we will be rolling out a plan to make sure that rewards re-distribution will be as fair as possible for all. We seek your understanding that this may take some time to figure out - but we are working on it.

We thank all our partners and community members for their continued support even through these tough times. We have the best partners, team and community to be in this for the long-haul. Your encouragement is our strength in adversity.

We will continue to strive to do better for all our users and the broader Algorand ecosystem. It has been a big couple of months here at Yieldly but rest assured, we will bounce back from all this and be better than ever!

🦩Hey folks🦩

We’ve got a lot of updates lined up and our future is about to become a whole lot clearer #BuyandBurn

But until then (we know y’all have been patient 🙏) check out this mini sneak peek mock-up of the next version of the dApp interface 👀

🚨Status Update🚨

As part of an ongoing security review and update at Yieldly, users may be experiencing limited functionalities on our application. These are the issues that are being worked on at the moment and we will be updating as we make progress on them:

- HDL Distribution Pool: Security review is underway and reimbursement plan for affected users is being worked out. We will be sharing more information in due course.

- Bridge: The bridge product has been taken down as part of a wider security review of all our products. If you are affected by this, please reach out to us directly at support@yieldly.finance.

- Algoexplorer Indexer APIs: We are in the process of updating our Yieldly codebase and migrating over to the new Algoexplorer API host address. Some contract functions will be temporarily unavailable. We ask for your patience as this is rolled out!

Check out this fantastic Benzinga article where our founder Sebastian & Algorands David M, discuss how and why Algorand are making waves in the burgeoning DeFi arena and how Yieldly are putting it to work. 🔥🦩🔥

https://bit.ly/37M2YVD

#Algorand #FutureOfDeFi #Yieldly

🚨HDL update🚨

Please take note that our investigation into the HDL distribution pool bug is still on going

Once complete we can begin to discuss fair recompense, but this is weeks away. We do care for our community though and compensation will be coming

Please bear with us