Skip to content

Harvest Finance Review

Named audits, ISC only in package.json

of 10

Harvest publishes a performance fee of 8 to 15% used to buy FARM, states that the displayed APY already reflects it, and documents a 12-hour timelock on its strategies. But its repository has no LICENSE file, declaring only ISC in package.json, and custody is not stated.

No money changes hands. This is a non-commercial project: no advertising, no sponsored placements, and no affiliate or referral links. Links to the services below earn us nothing. Every overall score is the plain average of the criteria shown on the page, so you can check the arithmetic yourself — see our rating methodology and how the site is funded.

Performance fee

8-15%, used to buy FARM

Displayed APY

Reflects the performance-fee reduction

Timelock

12 hours before reinvesting

Licence

No LICENSE file; ISC declared in package.json only

Auditors

PeckShield, Haechi Labs, Certik, Least Authority, Halborn

Scores

Fee disclosure
6.0
Licence & code openness
2.0
Audit disclosure
8.0
Custody & control
3.0
Strategy transparency
7.0

Each criterion carries equal weight. The overall score is the average of these 5 scores — (6.0 + 2.0 + 8.0 + 3.0 + 7.0) ÷ 5 = 5.2.

Pros

  • Performance fee published as a range, 8-15%, used to buy FARM
  • Displayed APY stated to already reflect the performance-fee reduction
  • Strategies operate via a 12-hour timelock before reinvesting, documented
  • Five auditors named: PeckShield, Haechi Labs, Certik, Least Authority and Halborn

Cons

  • The harvest repository has no LICENSE file; package.json declares only ISC
  • The fee is a range rather than a single figure
  • No management or withdrawal fee is stated either way
  • Custody is not addressed on the pages read

A documented mechanism, and net APY

Harvest publishes a performance fee of 8 to 15%, used to buy the FARM token, and states that the APY shown on the front page already reflects that reduction. Its strategies run through a 12-hour timelock before the doHardWork function collects rewards, converts them and reinvests — a documented process with a delay a user can observe.

The licence discrepancy

The official harvest repository has no LICENSE file at its root, and package.json declares only ISC. A stated licence in a metadata file is weaker than a proper LICENSE file, and the absence of the file itself is the reason the licence score sits near the bottom despite five named auditors — PeckShield, Haechi Labs, Certik, Least Authority and Halborn.

Custody unstated

Whether funds remain under the user's control is not addressed on the pages we read, which holds the custody score down.

How it compares

Sources

Scored from published primary sources rather than hands-on use. Every figure above comes from one of the pages below, on the date shown. Manufacturers change prices and specifications without notice — if something here no longer matches the source, tell us and we will correct it.

  1. 1.Harvest — strategies and fees — checked
  2. 2.Harvest — repository (no LICENSE file; ISC in package.json) — checked
  3. 3.Harvest — security and audits — checked

Frequently asked questions

What does Harvest charge?

A performance fee of 8 to 15%, used to buy the FARM token. The displayed APY already reflects it.

Is Harvest open source?

The official repository has no LICENSE file at its root; package.json declares only ISC, so the licence position is weak.

Nothing here is financial advice. Editorial policy · How we score · How we're funded.