DeFi

Robinhood

Morpho

Billion

<ul>
 <li><strong>Deposits in onchain lending vaults have reached $10 billion.</strong></li>
 <li><strong>S&amp;P Global Ratings has introduced a risk assessment built specifically for these vaults.</strong></li>
 <li><strong>The framework judges the human curator as well as the code.</strong></li>
 <li><strong>A top vault score is not equivalent to a AAA credit rating.</strong></li>
</ul>
<p>S&amp;P Global Ratings has introduced a <a href="https://www.prnewswire.com/news-releases/sp-global-ratings-launches-vault-risk-assessment-for-digital-asset-markets-302897714.html" rel="noopener noreferrer nofollow">Vault Risk Assessment</a> for onchain lending vaults, a segment of decentralized finance where deposits climbed from roughly $1.5 billion in September 2024 to $10 billion in September 2026, according to the agency’s own figures. The 567% increase matters less than what the money now sits in. Depositors are handing capital to specialist firms that choose collateral, set exposure limits and move funds between lending markets, which places a sector built to remove financial intermediaries in the position of needing an outside party to grade them.</p>
<div style="background: linear-gradient(135deg,#0b1f3a,#1c3d6e); border-radius: 12px; padding: 22px; margin: 24px 0; color: #ffffff;">
 <p style="margin: 0 0 16px 0; font-size: 13px; letter-spacing: 1px; text-transform: uppercase; color: #9fb8dc;">Onchain vault deposits, per S&amp;P Global Ratings</p>
 <div style="margin-bottom: 14px;">
  <div style="display: flex; justify-content: space-between; font-size: 14px; margin-bottom: 6px;">
   September 2024<strong>$1.5B</strong>
  </div>
  <div style="background: rgba(255,255,255,0.12); border-radius: 20px; height: 14px;">
   <div style="width: 15%; height: 14px; border-radius: 20px; background: #6f8fbf;"></div>
  </div>
 </div>
 <div style="margin-bottom: 16px;">
  <div style="display: flex; justify-content: space-between; font-size: 14px; margin-bottom: 6px;">
   September 2026<strong>$10B</strong>
  </div>
  <div style="background: rgba(255,255,255,0.12); border-radius: 20px; height: 14px;">
   <div style="width: 100%; height: 14px; border-radius: 20px; background: linear-gradient(90deg,#2ec4b6,#7ee8a2);"></div>
  </div>
 </div>
 <div style="display: inline-block; background: #2ec4b6; color: #0b1f3a; font-weight: bold; font-size: 14px; padding: 6px 14px; border-radius: 20px;">
  +567% in two years
 </div>
</div>
<h2 id="morpho-lets-anyone-open-a-market-yet-a-few-firms-decide-where-10-billion-goes">Morpho lets anyone open a market, yet a few firms decide where $10 billion goes</h2>
<p>Morpho, <a href="https://ethnews.com/appchain-thesis-dies-as-aave-picks-monad-over-its-own-chain/" rel="noopener noreferrer nofollow">one of the largest lending protocols</a>, lets anyone create a lending market. The protocol’s documentation concedes that selecting among those markets, evaluating collateral and monitoring risk continuously requires specialist knowledge, and <a href="https://docs.morpho.org/learn/concepts/curator/" rel="noopener noreferrer nofollow">independent firms known as curators</a> have stepped in to do that work. A curator decides which markets a vault may lend into, what collateral is acceptable, how much exposure each position can carry and when deposits should be reallocated. The smart contract executes the strategy. A firm designs it.</p>
<p>Morpho says Steakhouse Financial alone manages more than $2.2 billion across its vaults, up from $1.5 billion a year earlier. Distribution has moved to mainstream platforms as well: Coinbase’s USDC lending product and <a href="https://ethnews.com/robinhood-chain-volume-halves-as-free-gas-ends-tvl-stays-at-1b/" rel="noopener noreferrer nofollow">Robinhood Earn</a> had each passed $500 million in deposits by September 2026, according to Morpho. A retail customer on either app now sits at the end of a chain that runs from fintech front end to curator to lending protocol, and most of that chain barely existed three years ago.</p>
<h2 id="why-a-public-ledger-hides-faulty-oracles-bad-debt-and-frozen-withdrawals">Why a public ledger hides faulty oracles, bad debt and frozen withdrawals</h2>
<p>Anyone can inspect a vault’s balances and transactions onchain. S&amp;P’s argument is that this gives a snapshot of positions at a given moment while disclosure of strategy and risk remains limited, and <a href="https://docs.morpho.org/learn/resources/risks/" rel="noopener noreferrer nofollow">Morpho’s own risk documentation</a> supports the point with specifics.</p>
<p>An oracle, the data feed that supplies asset prices to a lending market, can overvalue collateral and leave loans undercollateralized without triggering liquidations. In Morpho Vault V2, bad debt from an underlying market flows directly into the vault’s value, and depositors absorb it in proportion to their holdings. Withdrawals can stall temporarily if borrowers have taken all available liquidity. Owners, curators, allocators and sentinels hold significant powers over a vault, which makes the identity and security practices of whoever controls those roles a material question for depositors.</p>
<p>None of this can be read off a block explorer. It requires judgment about people, collateral and contingency, which is the work rating agencies have always sold.</p>
<h2 id="how-sp-scores-a-vault-six-factors-and-one-of-them-is-a-person">How S&amp;P scores a vault: six factors, and one of them is a person</h2>
<p>S&amp;P evaluates six factors and expresses the result on a scale that borrows its familiar letter symbols with a “(v)” suffix, where AAA(v) indicates the lowest relative risk of impairment.</p>
<div style="margin: 24px 0; border-radius: 12px; overflow: hidden; border: 1px solid #dfe5ee;">
 <div style="background: linear-gradient(90deg,#0b1f3a,#1c3d6e); color: #ffffff; padding: 14px 18px; font-weight: bold; font-size: 16px;">
  What the Vault Risk Assessment examines
 </div>
 <div style="display: flex; flex-wrap: wrap; gap: 12px; padding: 14px; background: #f4f6fa;">
  <div style="flex: 1 1 240px; background: #ffffff; border-radius: 10px; border-top: 4px solid #f4a261; padding: 14px;">
   <div style="display: flex; align-items: center; gap: 10px; margin-bottom: 8px;"><span style="display: inline-block; width: 28px; height: 28px; line-height: 28px; text-align: center; border-radius: 50%; background: #f4a261; color: #ffffff; font-weight: bold; font-size: 14px;">1</span><strong style="color: #0b1f3a;">Portfolio credit quality</strong>
   </div>
   <div style="font-size: 14px; color: #44506a; line-height: 1.5;">
    Risk in the assets and lending markets the vault holds
   </div>
   <div style="margin-top: 10px;"><span style="font-size: 11px; font-weight: bold; letter-spacing: 0.5px; text-transform: uppercase; background: #fdebd8; color: #b3611a; padding: 3px 9px; border-radius: 12px;">Financial</span>
   </div>
  </div>
  <div style="flex: 1 1 240px; background: #ffffff; border-radius: 10px; border-top: 4px solid #f4a261; padding: 14px;">
   <div style="display: flex; align-items: center; gap: 10px; margin-bottom: 8px;"><span style="display: inline-block; width: 28px; height: 28px; line-height: 28px; text-align: center; border-radius: 50%; background: #f4a261; color: #ffffff; font-weight: bold; font-size: 14px;">2</span><strong style="color: #0b1f3a;">Liquidity mismatch</strong>
   </div>
   <div style="font-size: 14px; color: #44506a; line-height: 1.5;">
    Whether depositors can withdraw while funds are lent out
   </div>
   <div style="margin-top: 10px;"><span style="font-size: 11px; font-weight: bold; letter-spacing: 0.5px; text-transform: uppercase; background: #fdebd8; color: #b3611a; padding: 3px 9px; border-radius: 12px;">Financial</span>
   </div>
  </div>
  <div style="flex: 1 1 240px; background: #ffffff; border-radius: 10px; border-top: 4px solid #e63973; padding: 14px;">
   <div style="display: flex; align-items: center; gap: 10px; margin-bottom: 8px;"><span style="display: inline-block; width: 28px; height: 28px; line-height: 28px; text-align: center; border-radius: 50%; background: #e63973; color: #ffffff; font-weight: bold; font-size: 14px;">3</span><strong style="color: #0b1f3a;">Curator risk</strong>
   </div>
   <div style="font-size: 14px; color: #44506a; line-height: 1.5;">
    Ability and willingness of the manager to hold the vault’s risk profile
   </div>
   <div style="margin-top: 10px;"><span style="font-size: 11px; font-weight: bold; letter-spacing: 0.5px; text-transform: uppercase; background: #fde0ea; color: #a81f4f; padding: 3px 9px; border-radius: 12px;">Human</span>
   </div>
  </div>
  <div style="flex: 1 1 240px; background: #ffffff; border-radius: 10px; border-top: 4px solid #2ec4b6; padding: 14px;">
   <div style="display: flex; align-items: center; gap: 10px; margin-bottom: 8px;"><span style="display: inline-block; width: 28px; height: 28px; line-height: 28px; text-align: center; border-radius: 50%; background: #2ec4b6; color: #ffffff; font-weight: bold; font-size: 14px;">4</span><strong style="color: #0b1f3a;">Blockchain risk</strong>
   </div>
   <div style="font-size: 14px; color: #44506a; line-height: 1.5;">
    Vulnerabilities of the underlying network
   </div>
   <div style="margin-top: 10px;"><span style="font-size: 11px; font-weight: bold; letter-spacing: 0.5px; text-transform: uppercase; background: #d9f5f2; color: #167a71; padding: 3px 9px; border-radius: 12px;">Technology</span>
   </div>
  </div>
  <div style="flex: 1 1 240px; background: #ffffff; border-radius: 10px; border-top: 4px solid #2ec4b6; padding: 14px;">
   <div style="display: flex; align-items: center; gap: 10px; margin-bottom: 8px;"><span style="display: inline-block; width: 28px; height: 28px; line-height: 28px; text-align: center; border-radius: 50%; background: #2ec4b6; color: #ffffff; font-weight: bold; font-size: 14px;">5</span><strong style="color: #0b1f3a;">Protocol risk</strong>
   </div>
   <div style="font-size: 14px; color: #44506a; line-height: 1.5;">
    Weaknesses in the lending protocols that receive the assets
   </div>
   <div style="margin-top: 10px;"><span style="font-size: 11px; font-weight: bold; letter-spacing: 0.5px; text-transform: uppercase; background: #d9f5f2; color: #167a71; padding: 3px 9px; border-radius: 12px;">Technology</span>
   </div>
  </div>
  <div style="flex: 1 1 240px; background: #ffffff; border-radius: 10px; border-top: 4px solid #2ec4b6; padding: 14px;">
   <div style="display: flex; align-items: center; gap: 10px; margin-bottom: 8px;"><span style="display: inline-block; width: 28px; height: 28px; line-height: 28px; text-align: center; border-radius: 50%; background: #2ec4b6; color: #ffffff; font-weight: bold; font-size: 14px;">6</span><strong style="color: #0b1f3a;">Security and governance</strong>
   </div>
   <div style="font-size: 14px; color: #44506a; line-height: 1.5;">
    Smart-contract security, controls and administrative powers
   </div>
   <div style="margin-top: 10px;"><span style="font-size: 11px; font-weight: bold; letter-spacing: 0.5px; text-transform: uppercase; background: #d9f5f2; color: #167a71; padding: 3px 9px; border-radius: 12px;">Technology</span>
   </div>
  </div>
 </div>
</div>
<p>The assessment is <a href="https://www.spglobal.com/ratings/en/products/vault-risk-assessments" rel="noopener noreferrer nofollow">not a credit rating</a>, and S&amp;P says so explicitly. It does not measure a vault’s ability to meet payment obligations, and it takes no view on whether the yield is attractive. It ranks the relative likelihood that a depositor’s position ends up impaired. A reader who sees AAA(v) and assumes parity with a AAA bond has misread the scale.</p>
<h2 id="kaiko-then-openzeppelin-three-days-later-the-september-deals-behind-the-framework">Kaiko, then OpenZeppelin three days later: the September deals behind the framework</h2>
<p>OpenZeppelin’s contracts have underpinned <a href="https://press.spglobal.com/2026-09-17-S-P-Global-Announces-Agreement-to-Acquire-OpenZeppelin" rel="noopener noreferrer nofollow">more than $37 trillion in transferred value</a>, by S&amp;P’s count, and the firm has completed over 900 security engagements. S&amp;P said the acquisition would extend its reach into onchain technology risk and support new security assessments. Less than three weeks later it published a methodology in which protocol, blockchain, security and governance risk account for half the factors. A traditional agency grades creditworthiness. An onchain product adds collateral, curator, protocol, contract and network risk on top, and S&amp;P has been buying or building the capacity to cover each one.</p>
<h2 id="what-changes-when-an-11-vault-and-a-5-vault-carry-a-risk-grade">What changes when an 11% vault and a 5% vault carry a risk grade</h2>
<p>DeFi users have long chosen products by headline yield. A vault paying 11% looks better than one paying 5% until the depositor learns that the first accepts illiquid collateral, runs tighter liquidation thresholds and gives its curator wider discretion. Because the S&amp;P assessment deliberately says nothing about yield, it can sit beside the market rate and allow the kind of comparison fixed-income investors make routinely: return against a standardized measure of risk.</p>
<p>Institutional allocators stand to benefit first, since many cannot hold an instrument without an independent risk opinion on file. Curators face a different pressure. A firm managing billions will have its competence and discipline scored against rivals for the first time, and fintech platforms that distribute vaults to retail users gain a reason to favor those with an assessment attached.</p>
<p>The agency’s record with Sky Protocol suggests how strict that scoring may be. On October 1, S&amp;P reaffirmed Sky’s B- rating, deep in speculative-grade territory, citing governance concentration, capitalization and growing ecosystem complexity. Sky is among the oldest and largest names in DeFi. Vault curators hoping for scores near the top of the (v) scale will be judged by the same analysts on several of the same weaknesses.</p>
<p>The post <a href="https://ethnews.com/defi-lending-10-billion-sp-vault-risk-assessment/" rel="noopener noreferrer nofollow">DeFi Lending Hits $10 Billion – Now S&amp;P Wants to Measure the Risk</a> appeared first on <a href="https://ethnews.com" rel="noopener noreferrer nofollow">ETHNews</a>.</p>

DeFi Lending Hits $10 Billion – Now S&P Wants to Measure the Risk

Table of Contents

ETHNews

Other articles published on Oct 5, 2026

Join our free newsletter for daily crypto updates!