Safety model
Bounded operator power. Capital leaves the Fund only into allowlisted Strategy wallets or whitelisted external wallets. Fund can always pull from a Strategy; Strategy cannot call Fund. Separated roles. Reporting, accepting, reviewing, allocating, configuring, and pausing are distinct roles. Upgrade authority (ProxyAdmin ownership) is separate. See Access control and roles. Guarded pricing. Oracle: mandatory review delay, staleness limit, per-asset suspicious-price bounds. Out-of-bound prices need a stronger role or rejection. Snapshotted redemptions. Redeem payout fixed at settlement; later fee/price changes do not alter an already-settled batch. Per-fund guardrails. TVL caps, batch caps, minimums, drawdown gate, whitelist, emergency pause via RiskManager. Pull-based upgrades. Live funds upgrade only through tenant-owned ProxyAdmins. Protocol operator cannot push code into a deployed fund.Residual risks
Market and strategy risk. Strategies can lose money; NAV falls; shares worth less. Primary risk; not removed by the controls above. Operator and reporting risk. Off-chain NAV. Wrong, delayed, or dishonest reports affect settlement. Bounds and delay reduce but do not eliminate this — a report inside bounds is treated as truth. Redemption timing risk. Settlement fixes amounts; payout waits on capital returning to the Fund. Illiquid or slow unwind delays funding. Custody trust on external legs. Assets at external wallets or on StandaloneStrategy cannot be pulled by the Fund. Return depends on the controller. Smart-contract risk. Bugs possible despite testing. Upgradeability helps fix issues and expands the attack surface if ProxyAdmin is compromised. Key-management risk. Privileged roles and ProxyAdmin owners must stay secure. Compromise ofDEFAULT_ADMIN_ROLE or ProxyAdmin can put assets at risk.
Regulatory and jurisdictional risk. Access and treatment of tokenized funds vary by jurisdiction and change over time.
Before you deposit
Review the fund’s fee schedule, risk limits, who holds operational and upgrade roles, accepted assets, and expected redemption timing. The protocol supplies the rails; each fund’s profile is set by its operator.Protocol mechanics and general risks only — not financial, legal, or tax advice. Consult a qualified professional before investing.