Audited by yAcademy

https://reports.yacademy.dev/docs/08-2022-Bunni/

Executive Summary

Gauge code is a fork of Curve with minimal changes, I believe the maximum risk are some minor MEV exploits which will not impact yield for the LP position

Risk of Loss of Yield is possible, but risk of principal is very low

V3 positions code is very straightforward and in-my opinion safe

There’s some concerns around front-running and risk of fees being raised, they can be addressed with proper monitoring

LP

Admin Risk - Perf fee can be up to 50%

https://github.com/ZeframLou/bunni/blob/a298b105bc963340f56ac7210d98d7f1340fe7fc/src/BunniHub.sol#L38-L39

    uint256 internal constant MAX_PROTOCOL_FEE = 5e17;

Up to 50% performance fee