Credora

The largest liquid restaking asset in DeFi now carries an independent risk rating. @EtherFi weETH. Rating: A+. Probability of Default: 0.098%. What the number means and what produced it 🧵

9/ Ratings and data provided are for informational purposes only. Not investment advice or a solicitation to buy or sell assets. Always conduct your own due diligence. Credora does not guarantee the completeness or real-time accuracy of any information provided. A full disclaimer is included in each risk assessment report published at credora.network/reports/.

8/ Full post-mortem linked. Incident breakdowns, methodology mapping, and the verdict structure the exercise is built to surface: covers, out of scope, not covered. The exercise is worth less for the six it caught than for showing where the methodology must improve. credora.network/blog/posts/blo…

Six of June's seven major DeFi exploits traced to risk dimensions scorable in advance. One fell outside the scope of asset ratings by design. We mapped all seven against the methodology 🧵

@Davidareising Most of those losses bypassed every audited line of code. Compromised keys and social engineering. Vectors a code review misses entirely. Smart contract review is one surface. Operational security is a different threat model. Glad to be part of the stack.

DeFi has lost over $900M to hacks in the first six months of 2026, +70% YoY. Most of those protocols had audits. A growing share of these losses never touched the smart contracts at all: compromised keys, sophisticated social engineering attacks, operational gaps a smart contract audit can't prevent. That’s why @LotusFi_ takes a holistic approach to security, with independent review from experts across three surfaces: economic design, smart contracts, and operational security. Our team has secured tens of billions of customer deposits, smart contracts, transactions and private keys since 2019. On the contracts, that's meant engagements with top-tier experts early and often: @Iam0x52 for a pre-audit review, @EnigmaDarkLabs on gas and architecture, and early access to Zellic's @v12sec and @cantinasecurity's Apex, two of the newest AI-native scanning tools in the space. All before we even kicked off our smart contract audit with @Cyfrin, supported by their Cygent AI agent for security review and formal verification. AI tools extend what expert reviewers can cover; they don't replace their judgment. As we move closer to deployment, we'll also be pursuing @_SEAL_Org certification for our op-sec practices because as we’ve seen with many recent exploits, security does not stop at the contracts. On the design side, @BlockAnalitica ran an independent economic assessment of Lotus's markets, tranches, and risk parameters. @CredoraNetwork's risk ratings on each tranche give every vault transparent risk you can verify. We want the protocol tested early, repeatedly, and from every angle. That's the standard we think serious onchain infrastructure should meet.

Risk assessment in DeFi will remain human-led. The reason is technical. AI processes known data well. It does not close the gap where data does not exist, and it cannot calibrate how significant that gap is. DeFi risk has structural unknowns: novel protocol designs, untested governance, attack vectors without historical analogues. These require analysis, not pattern recognition. AI will improve how known parameters are processed. Human judgment remains the requirement at the boundary of what can be measured. From a recent panel on DeFi risk infrastructure.

Credora ratings now plug into @newton_xyz as reusable policy packs. A curator turns the integration on, and every vault allocation is automatically checked against the rating, which is visible on the Newton Explorer. More on the new Newton Podcast, recorded live at @TokenizeThisNYC.

2/ Ratings and data provided are for informational purposes only. Not investment advice or a solicitation to buy or sell assets. Always conduct your own due diligence. Credora does not guarantee the completeness or real-time accuracy of any information provided. A full disclaimer is included in each risk assessment report published at credora.network/reports/.

1/ Check the ratings: app.credora.network

Risk moved in May. The ratings followed. Selected events from the Credora Rating Changes feed 👇

Capital efficiency is the delta between return and risk. Return is just the numerator. DeFi built the return infrastructure first. Vaults, lending markets, yield layers, liquidity incentives. The risk side stayed unquantified. That gap has a cost. A portfolio optimized for return without a risk term is undercounting its exposure. The denominator is becoming measurable. That's where the real efficiency gains are. From a recent panel on DeFi risk infrastructure.

Ratings and data provided are for informational purposes only. Not investment advice or a solicitation to buy or sell assets. Always conduct your own due diligence. Credora does not guarantee the completeness or real-time accuracy of any information provided. A full disclaimer is included in each risk assessment report published at reports.credora.network.

Every Credora rating comes down to one number: Probability of Significant Loss (PSL), the annualized probability that bad debt exceeds 1% of principal in a given vault or market. That number maps to a letter grade from A+ to D.

7/ Ratings and data provided are for informational purposes only. Not investment advice or a solicitation to buy or sell assets. Always conduct your own due diligence. Credora does not guarantee the completeness or real-time accuracy of any information provided. A full disclaimer is included in each risk assessment report published at credora.network/reports/.

6/ 51.2% of the combined LST+LRT market. Two independent ratings. One framework. stETH report: credora.network/reports/view/?… weETH report: credora.network/reports/view/?…

Credora rates assets covering 51.2% of the combined LST and LRT market. $17.96B. Two tokens. Two A+ ratings.