Cove is built to prioritize safety and security. However, engaging with smart
contracts intrinsically carries certain risks.
Potential Risks
Potential risks include, but are not limited to:
Smart Contract Risks
Complex Interactions: The protocol involves complex interactions between multiple contracts which increases the risk of unforeseen bugs.
Integration Dependencies: Reliance on external protocols (like Yearn) means that bugs or changes in those systems could adversely affect this protocol.
Financial Risks
Asset Volatility: The underlying assets are subject to high volatility which can lead to significant changes in value.
Yield Farming Risks: Strategies involving yield farming are exposed to smart contract risks of the platforms they interact with.
Governance Risks
Governance Attacks: The protocol may be vulnerable to governance attacks if token distribution is not sufficiently decentralized.
Technical Risks
Gas Costs: High gas costs could make the protocol uneconomical for users, especially during network congestion.
Systemic Risks
Protocol Interconnectivity: The high degree of interconnectivity with other DeFi protocols could lead to cascading failures if one protocol is compromised.
Smart Contract Exploits: The protocol could be subject to exploits due to vulnerabilities in smart contracts, leading to loss of user funds.
{"docsConfig":{"$schema":"https://mintlify.com/docs.json","theme":"mint","name":"Cove","colors":{"primary":"#062819","light":"#C1DA76","dark":"#062819"},"favicon":"/favicon.svg","logo":{"light":"https://mintcdn.com/stormlabs/orc7kwrtEJdekWDS/logo/light.svg?fit=max\u0026auto=format\u0026n=orc7kwrtEJdekWDS\u0026q=85\u0026s=b8a2514605ff69e3df8089b38a0a33fa","dark":"https://mintcdn.com/stormlabs/qew6jsW71Sw-JZvn/logo/dark.svg?fit=max\u0026auto=format\u0026n=qew6jsW71Sw-JZvn\u0026q=85\u0026s=95c341de6b682007ec561ce3c2021846"},"background":{"image":"https://mintlify.s3.us-west-1.amazonaws.com/stormlabs/images/header-aura.svg","decoration":null,"color":{"light":"#FAFDF0","dark":"#020D08"}},"navbar":{"links":[{"label":"Support","href":"https://discord.gg/fvxc4p6gB2"}],"primary":{"type":"button","label":"Visit Website","href":"https://www.cove.finance/"}},"footer":{"socials":{"website":"https://www.cove.finance/","twitter":"https://twitter.com/cove_fi","discord":"https://discord.gg/fvxc4p6gB2","github":"https://github.com/Storm-Labs-Inc"}},"integrations":{"ga4":{"measurementId":"G-CRVCPHERBP"}},"navigation":{"global":{"anchors":[{"anchor":"Twitter","href":"https://twitter.com/cove_fi","icon":"twitter"},{"anchor":"Discord","href":"https://discord.gg/fvxc4p6gB2","icon":"discord"},{"anchor":"Mirror","href":"https://mirror.xyz/covefi.eth","icon":"newspaper"},{"anchor":"Discourse","href":"https://gov.cove.finance/","icon":"discourse"},{"anchor":"Snapshot","href":"https://vote.cove.finance/","icon":"bolt"}]},"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"stormlabs","hasAudioNarration":false,"actualSubdomain":"stormlabs","customDomains":["docs.cove.finance"],"gitSource":{"type":"github","owner":"storm-labs-inc","repo":"cove-docs-mintlify","deployBranch":"master","contentDirectory":"","isPrivate":false,"mountPath":"","label":""},"buildId":"6ae91ec625e4849087077c5a:success","clientVersion":"0.0.4143","searchFilterCounts":[{"language":"default","tag":"Documentation","count":27},{"language":"default","tag":"Cove Ecosystem","count":14},{"language":"default","tag":"Technical Documentation","count":14},{"language":"default","tag":"Boosties","count":10},{"language":"default","tag":"Partners","count":5},{"language":"default","tag":"Cove Protocol","count":5},{"language":"default","tag":"Resources","count":5},{"language":"default","tag":"The $COVE Token","count":4},{"language":"default","tag":"Security","count":4},{"language":"default","tag":"How-to Guides","count":3}]},"assistantConfig":{},"basePath":"","hasChatPermissions":false,"hasWebMcpPermissions":false,"toggles":[],"googleFontsInlined":false},"customCss":[],"page":{"pagePath":"security/risks","slug":"/security/risks","pageMetadata":{"title":"Risks","description":"Risks of using the Cove Protocol","href":"/security/risks"},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsx(_components.p, {\n children: \"Risks of using the Cove Protocol\"\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx,jsxs:_jsxs}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){const _components={li:`li`,p:`p`,strong:`strong`,ul:`ul`,..._provideComponents(),...props.components},{Heading,Warning}=_components;if(!Heading)_missingMdxReference(`Heading`,true);if(!Warning)_missingMdxReference(`Warning`,true);return _jsxs(_Fragment,{children:[_jsx(Warning,{children:_jsx(_components.p,{children:`Cove is built to prioritize safety and security. However, engaging with smart\ncontracts intrinsically carries certain risks.`})}),`\n`,_jsx(Heading,{level:`2`,id:`potential-risks`,children:`Potential Risks`}),`\n`,_jsx(_components.p,{children:`Potential risks include, but are not limited to:`}),`\n`,_jsx(Heading,{level:`3`,id:`smart-contract-risks`,children:`Smart Contract Risks`}),`\n`,_jsxs(_components.ul,{children:[`\n`,_jsxs(_components.li,{children:[_jsx(_components.strong,{children:`Complex Interactions`}),`: The protocol involves complex interactions between multiple contracts which increases the risk of unforeseen bugs.`]}),`\n`,_jsxs(_components.li,{children:[_jsx(_components.strong,{children:`Integration Dependencies`}),`: Reliance on external protocols (like Yearn) means that bugs or changes in those systems could adversely affect this protocol.`]}),`\n`]}),`\n`,_jsx(Heading,{level:`3`,id:`financial-risks`,children:`Financial Risks`}),`\n`,_jsxs(_components.ul,{children:[`\n`,_jsxs(_components.li,{children:[_jsx(_components.strong,{children:`Asset Volatility`}),`: The underlying assets are subject to high volatility which can lead to significant changes in value.`]}),`\n`,_jsxs(_components.li,{children:[_jsx(_components.strong,{children:`Yield Farming Risks`}),`: Strategies involving yield farming are exposed to smart contract risks of the platforms they interact with.`]}),`\n`]}),`\n`,_jsx(Heading,{level:`3`,id:`governance-risks`,children:`Governance Risks`}),`\n`,_jsxs(_components.ul,{children:[`\n`,_jsxs(_components.li,{children:[_jsx(_components.strong,{children:`Governance Attacks`}),`: The protocol may be vulnerable to governance attacks if token distribution is not sufficiently decentralized.`]}),`\n`]}),`\n`,_jsx(Heading,{level:`3`,id:`technical-risks`,children:`Technical Risks`}),`\n`,_jsxs(_components.ul,{children:[`\n`,_jsxs(_components.li,{children:[_jsx(_components.strong,{children:`Gas Costs`}),`: High gas costs could make the protocol uneconomical for users, especially during network congestion.`]}),`\n`]}),`\n`,_jsx(Heading,{level:`3`,id:`systemic-risks`,children:`Systemic Risks`}),`\n`,_jsxs(_components.ul,{children:[`\n`,_jsxs(_components.li,{children:[_jsx(_components.strong,{children:`Protocol Interconnectivity`}),`: The high degree of interconnectivity with other DeFi protocols could lead to cascading failures if one protocol is compromised.`]}),`\n`,_jsxs(_components.li,{children:[_jsx(_components.strong,{children:`Smart Contract Exploits`}),`: The protocol could be subject to exploits due to vulnerabilities in smart contracts, leading to loss of user funds.`]}),`\n`]})]})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent};function _missingMdxReference(id,component){throw new Error(`Expected `+(component?`component`:`object`)+\" `\"+id+\"` to be defined: you likely forgot to import, pass, or provide it.\")}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"Risks","description":"Risks of using the Cove Protocol","href":"/security/risks"}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[{"title":"Potential Risks","slug":"potential-risks","depth":2,"children":[{"title":"Smart Contract Risks","slug":"smart-contract-risks","depth":3,"children":[]},{"title":"Financial Risks","slug":"financial-risks","depth":3,"children":[]},{"title":"Governance Risks","slug":"governance-risks","depth":3,"children":[]},{"title":"Technical Risks","slug":"technical-risks","depth":3,"children":[]},{"title":"Systemic Risks","slug":"systemic-risks","depth":3,"children":[]}]}],"codeExamples":{}},"jsLinks":[],"subdomain":"stormlabs","siteName":"Cove","title":"Risks - Cove","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-01-07T00:49:59.627Z","originalFileLocation":"security/risks.mdx"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"system\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"Risks of using the Cove Protocol\">\u003cmeta data-mint-head name=\"application-name\" content=\"Cove\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/stormlabs/8qOxNcqW59--RZYT/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/stormlabs/8qOxNcqW59--RZYT/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/stormlabs/8qOxNcqW59--RZYT/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/stormlabs/8qOxNcqW59--RZYT/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/stormlabs/8qOxNcqW59--RZYT/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/stormlabs/8qOxNcqW59--RZYT/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/stormlabs/8qOxNcqW59--RZYT/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/stormlabs/8qOxNcqW59--RZYT/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/stormlabs/8qOxNcqW59--RZYT/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Risks - Cove\">\u003cmeta data-mint-head property=\"og:description\" content=\"Risks of using the Cove Protocol\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Cove\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://docs.cove.finance/security/risks\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://stormlabs.mintlify.site/_mintlify/api/og/v2?division=Security\u0026amp;title=Risks\u0026amp;description=Risks+of+using+the+Cove+Protocol\u0026amp;theme=d4b245a3a1cf07113124e981\u0026amp;signature=45a0ea041b1e645d0e5e75ed1c9a612a670a1a5ce511101dbb8dd23540fdf794\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Risks - Cove\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"Risks of using the Cove Protocol\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://stormlabs.mintlify.site/_mintlify/api/og/v2?division=Security\u0026amp;title=Risks\u0026amp;description=Risks+of+using+the+Cove+Protocol\u0026amp;theme=d4b245a3a1cf07113124e981\u0026amp;signature=45a0ea041b1e645d0e5e75ed1c9a612a670a1a5ce511101dbb8dd23540fdf794\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/stormlabs/8qOxNcqW59--RZYT/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Cove\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#062819\">\u003clink data-mint-head rel=\"canonical\" href=\"https://docs.cove.finance/security/risks\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/security/risks.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://docs.cove.finance/#organization\",\"name\":\"Cove\",\"url\":\"https://docs.cove.finance\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/stormlabs/orc7kwrtEJdekWDS/logo/light.svg?fit=max\u0026auto=format\u0026n=orc7kwrtEJdekWDS\u0026q=85\u0026s=b8a2514605ff69e3df8089b38a0a33fa\"}},{\"@type\":\"WebSite\",\"@id\":\"https://docs.cove.finance#website\",\"name\":\"Cove\",\"url\":\"https://docs.cove.finance\",\"publisher\":{\"@id\":\"https://docs.cove.finance/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://docs.cove.finance/security/risks#webpage\",\"url\":\"https://docs.cove.finance/security/risks\",\"name\":\"Risks\",\"description\":\"Risks of using the Cove Protocol\",\"dateModified\":\"2026-01-07T00:49:59.627Z\",\"isPartOf\":{\"@id\":\"https://docs.cove.finance#website\"},\"breadcrumb\":{\"@id\":\"https://docs.cove.finance/security/risks#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://docs.cove.finance/security/risks#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Security\",\"item\":\"https://docs.cove.finance/security/audits\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Risks\",\"item\":\"https://docs.cove.finance/security/risks\"}]},{\"@type\":[\"Article\",\"TechArticle\"],\"@id\":\"https://docs.cove.finance/security/risks#article\",\"headline\":\"Risks\",\"name\":\"Risks\",\"description\":\"Risks of using the Cove Protocol\",\"url\":\"https://docs.cove.finance/security/risks\",\"mainEntityOfPage\":{\"@id\":\"https://docs.cove.finance/security/risks#webpage\"},\"dateModified\":\"2026-01-07T00:49:59.627Z\",\"publisher\":{\"@id\":\"https://docs.cove.finance/#organization\"},\"isPartOf\":{\"@id\":\"https://docs.cove.finance#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"Cove\",\"publisher\":{\"@type\":\"Organization\",\"name\":\"Cove\"},\"provider\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","agentPointerHref":"/security/risks.md","siteName":"Cove","nav":{"global":{"anchors":[{"anchor":"Twitter","href":"https://twitter.com/cove_fi","icon":"twitter"},{"anchor":"Discord","href":"https://discord.gg/fvxc4p6gB2","icon":"discord"},{"anchor":"Mirror","href":"https://mirror.xyz/covefi.eth","icon":"newspaper"},{"anchor":"Discourse","href":"https://gov.cove.finance/","icon":"discourse"},{"anchor":"Snapshot","href":"https://vote.cove.finance/","icon":"bolt"}]},"tabs":[{"tab":"Documentation","groups":[{"group":"Getting Started","pages":[{"title":"Introduction","mode":"wide","href":"/introduction"}]},{"group":"Cove Ecosystem","pages":[{"group":"Cove Protocol","pages":[{"title":"Cove Protocol","href":"/ecosystem/protocol/cove-protocol"},{"title":"coveUSD","tag":"NEW","href":"/ecosystem/protocol/coveusd"}]},{"group":"The $COVE Token","pages":[{"title":"Token Information","href":"/ecosystem/token/info"},{"title":"Liquidity Mining","href":"/ecosystem/token/liquidity-mining"},{"title":"Governance","href":"/ecosystem/token/governance"},{"title":"Launchpad on Bazaar","href":"/ecosystem/token/launchpad"}]},{"group":"Boosties","pages":[{"title":"Boosties","href":"/ecosystem/boosties/boosties"},{"title":"coveYFI","href":"/ecosystem/boosties/coveyfi"},{"title":"dYFI Redeemer","mode":"wide","href":"/ecosystem/boosties/dyfi-redeemer"}]},{"group":"Partners","pages":[{"title":"Storm Labs","href":"/ecosystem/partners/storm-labs"},{"title":"Gauntlet","href":"/ecosystem/partners/gauntlet"},{"title":"Bazaar","href":"/ecosystem/partners/bazaar"},{"title":"Ritual","href":"/ecosystem/partners/ritual"},{"title":"The 4626 Alliance","href":"/ecosystem/partners/4626-alliance"}]}]},{"group":"Security","pages":[{"title":"Audits","mode":"wide","href":"/security/audits"},{"title":"Bug Bounty","mode":"wide","href":"/security/bug-bounty"},{"title":"Contract Addresses","mode":"wide","description":null,"href":"/security/contract-addresses"},{"title":"Risks","href":"/security/risks"}]},{"group":"How-to Guides","pages":[{"group":"Boosties","pages":[{"title":"Using Boosties","description":"How-to guides for using Boosties","href":"/how-to/boosties"},{"title":"Using coveYFI","href":"/how-to/coveyfi"},{"title":"Using the dYFI Redeemer","href":"/how-to/dyfi-redeemer"}]}]},{"group":"Resources","pages":[{"title":"Gauntlet coveYFI Dashboard","url":"https://app.hex.tech/a22e666c-4bc7-40d3-93ed-45a25554a14e/app/4ee7c6cb-ac7c-4e96-8d56-9ae630ab6641/latest","href":"/resources/gauntlet-dashboard"},{"title":"coveYFI/YFI Curve Pool","url":"https://www.curve.finance/dex/ethereum/pools/factory-stable-ng-152/deposit/","href":"/resources/coveyfi-curve-pool"},{"title":"Terms of Service","url":"https://drive.google.com/file/d/1C4ydOODywm_tZRAMiSOywcP6LzOEnS11/view?usp=drive_link","href":"/resources/terms-of-service"},{"title":"Privacy Policy","url":"https://drive.google.com/file/d/1eMwHRh7qSvyufYmdbWfu5wlLWqOTICPv/view?usp=drive_link","href":"/resources/privacy-policy"},{"title":"Media Kit","url":"https://github.com/Storm-Labs-Inc/brand-media-kit","href":"/resources/media-kit"}]}]},{"tab":"Technical Documentation","pages":[{"title":"Technical Documentation","href":"/technical/cove/rfc"}]}]},"basePath":"","title":"Risks - Cove","buildId":"dpl_Fyv1NbzwP68g2bEH2Roy98uY1zmE","deploymentId":"dpl_Fyv1NbzwP68g2bEH2Roy98uY1zmE","dynamics":[],"chunks":[]}
