yRisk: Automation-First Risk Provider for Curve
Both RFP scopes · 12 months · $250,000 · 50% stablecoins / 50% CRV
Proposal
Good risk work starts with reliable data, shows its reasoning, and follows through when something needs to change. Our operating model favors:
- always-on reliable automation over repetitive manual work, preserving contributor time for judgment;
- reproducible, evidence-based methods over unsupported intuition;
- proactive, measurable risk reduction over analytical complexity for its own sake;
- open-source tools, data, and methods over closed work products, so the Curve community can inspect, challenge, reuse, and improve them.
Automation and frameworks are designed to support high-quality decision-making by the DAO.
The team
yRisk is led by Wavey and Dudesahn, core developers at Yearn and Resupply, through their respective limited companies.
Resupply is a stablecoin and lending protocol built by Yearn and Convex with deep crvUSD and CurveLend integration. Both contributors are primary Resupply developers.
They maintain open-source tooling like crv.lol, featuring an immutable onchain GaugeValidator, and live data for 19 Resupply markets, including 14 CurveLend markets. Other open-source work includes SlotScan, Yearn’s Curve vaults, LlamaLend integrations, and Tidal auction tooling.
yRisk will collaborate closely with Yearn’s curation team, iterating on and improving existing risk frameworks.
Scope
crvUSD and mint markets
- Evaluate the risk profiles of proposed mint markets and PegKeepers, including assessments of collateral, issuer, admin, bridge, redemption, liquidity, concentration, and oracle risks.
- Recommend debt ceilings, market parameters, PegKeeper limits, monetary policy settings, and lifecycle actions.
- Monitor the crvUSD peg and the factors that may influence it.
- Support governance processes, including forum posts and onchain proposals, and coordinate closely with the eDAO during market stress.
Llamalend and isolated markets
- Support LlamaLend v1 market deprecation and v2 rollout.
- Evaluate collateral risk, oracle design, and other market configurations.
- Monitor market health and liquidity depth, with alerts when market parameters cross specified thresholds.
What Curve gets
Curve receives a public risk operating system: connected public infrastructure and workflows, including:
- Risk framework: Methods for evaluating market, collateral, oracle, liquidity, and governance risks and translating findings into onboarding, parameter, and lifecycle recommendations.
- Monitoring and alerting: Dashboards, APIs, and alerts using thresholds defined by the risk framework and configurable by Curve-designated operators.
- Incident support: An incident runbook, war-room support, postmortem analysis, and reporting.
- Decision support: Governance proposal analysis and parameter recommendations. Curve governance and the eDAO retain final decision and execution authority, including whether to act on yRisk’s recommendations.
- Custom tooling: Automated code-analysis tooling to check oracles and other key contracts against safety standards and best practices.
- Reporting: Monthly progress updates and ad hoc publication of research and analysis.
yRisk will prioritize automation that supports the safe scaling of Curve products. All yRisk-created components funded by this mandate will be open source under the MIT License and publicly accessible, except where security or third-party licensing restrictions require otherwise.
How we work
Risk work is most valuable when it strengthens the habits, processes, and safeguards behind every change. yRisk will work upstream with Curve contributors, using live evidence to improve product design, parameters, monitoring, observability, and emergency controls.
At startup, yRisk will review available LlamaRisk reports, models, dashboards, repositories, and handoff material and classify relevant materials for reuse, deprecation, or rebuilding. We will coordinate with Swiss Stake and backend contributors where monitoring infrastructure overlaps. Coverage will proceed even if the handoff is incomplete.
Budget
The request is $250,000 for 12 months through parallel revocable streams:
- $125,000 in stablecoins; and
- CRV worth $125,000, with the amount fixed before the vote using a transparent valuation rule.
The budget covers contributors, hosting, data, RPC, AI, and developer tooling.