Securitize Tokenized AAA CLO Fund (STAC)

under-review ethereum reviewed 2026-06-24

TL;DR

How it works

Subscriptions are an instant on-chain USDC→STAC swap (2:30pm ET cut-off, per Securitize’s offering terms); shares mint to KYC-allowlisted wallets. The fund is Securitize AAA CLO Tokenized Fund, Ltd (BVI) — the issuer is the fund itself, with Securitize Capital LLC as adviser/manager; BNY Investments / Insight runs the credit book, BNY (Bank of New York Mellon) is custodian, WithumSmith+Brown auditor. Capital is deployed off-chain into AAA-rated US CLO tranches — the senior slice of a waterfall over diversified BB/B leveraged corporate loans, ~30%+ subordination (historical AAA-CLO default <0.1%, S&P/Moody’s). Traced to root it is corporate-loan credit; the waterfall is the only leverage layer, no on-chain looping. Coupons float (SOFR + spread), so duration is short and NAV accretes net of fees — 0.30% management + 2% redemption (rwa.xyz, 2026-06-23), 0% performance; Securitize’s offering card cites a 0.40% all-in expense ratio.

STAC is a Securitize DS-Protocol token (UUPS proxy → impl 0x7768…feb0). Pricing is off-chain: the token itself exposes no NAV getter (verified — every NAV getter reverts), so a position here can never be liquidated on-chain, only absorb an off-chain NAV write-down; NAV (~$1,021/token, rwa.xyz, 2026-06-23) is published by Securitize. Separately, Chronicle runs an announced on-chain Proof-of-Asset feed for STAC (holdings + verified-NAV, 2026-02-05) we could not locate or read on-chain — treat it as unverified. Exit is a daily redemption request settled off-chain after the manager liquidates CLOs (T+2/T+3, not guaranteed); an “on-demand” liquidity-pool path exists only at GP discretion. Label vs exposure: the name says diversified AAA-CLO fund, but on-chain today the Ethereum leg is 99.8% a single Grove contract (0x491e…a44e — Grove is Sky’s USDS allocator, ilk ALLOCATOR-BLOOM-A, ~$2.65B USDS drawn; the same proxy also anchors JAAA), and the Solana majority is Ethena’s $250M — the fund is two anchors.

Risks

Verified on-chain (Ethereum, 2026-06-23, block 25,380,802): MASTER is a bare EOA, the ISSUER role is held by bare EOAs + contracts, UUPS proxy, the token exposes no NAV getter, 99.8% single-holder concentration, ~6.4% of issued supply burned down (burn/pause/upgrade authority reproduced in simulation; seize is MASTER-gated). Taken on trust: off-chain CLO backing at BNY, the Withum audit, the announced Chronicle Proof-of-Asset feed, the Solana leg, redemption settlement timing, and the exact _authorizeUpgrade gate.

#RiskMechanismSource + our delta
1A single Securitize EOA controls roles, pause, seize and upgrade; ISSUER keys mint/burnMASTER 0x59c1…676Ee (getRole=1, a single bare EOA, also owner()) reassigns roles, pauses, seizes, and UUPS-upgrades the proxy to arbitrary logic; ISSUER keys (getRole=2, incl. bare EOAs like 0x22F5…528B) mint unbacked STAC or burn/confiscate a balance (live burn tx confirms). No timelock, no multisig. Exit: any Upgraded/role-change/seize event or EOA→contract code change.Same single-key pattern we flagged on JAAA/USCC — but worse: JAAA caps theft behind a 4-of-9 Safe + 48h Root; STAC has no protocol-layer backstop.
2Off-chain custodial backing; on-chain transparency is an unverified third-party feedCLO tranches sit at BNY off-chain; the token gives no proof-of-reserve and the on-chain swap contract holds only dust (0xa022…98a8 ≈ $1,000 USDC). The only external attestation is an announced Chronicle Proof-of-Asset feed we could not read on-chain, so an impairment or custody freeze is invisible until the next off-chain NAV push. Exit: custodian/auditor change or BVI license change.BNY is a top-tier custodian (stronger than JAAA’s StoneX) and the Chronicle PoA layer is a step beyond JAAA — but it’s unverified by us, and there’s no public CUSIP disclosure (weaker than JAAA’s SEC-EDGAR cross-check).
3Extreme anchor concentration → reflexive co-redeemer~99% of the fund is two leveraged crypto-native allocators: Grove ~$100M (99.8% of the Ethereum leg, verified) and Ethena $250M (Solana). Their own stress (USDS / USDe redemptions, Sky-Grove governance) forces a simultaneous STAC redemption that dwarfs any NOCA position. Exit: top-holder balance drop >25%/24h, or a Grove/Ethena exit signal.Verified on-chain: Grove is Sky’s USDS allocator (ALMProxy 0x491e…a44e, ~$2.65B USDS drawn) and the same proxy anchors JAAA — STAC’s anchor risk is shared with JAAA and sits downstream of USDS/sUSDS (a USDS run forces Grove to redeem here). The anchors are effectively the entire fund; the holder base (5, ~8 months) is too thin for retention. See the STAC↔JAAA study.
4Curator-gated redemption; T+2/T+3 settlement; discretionary instant poolDaily redemption requests settle off-chain only after CLOs are sold (T+2/T+3, “no guarantee”); the on-demand liquidity pool is at GP discretion and currently unfunded on-chain; no public secondary market (KYC-gated transfers, 1-day post-issuance hold). Exit: settlement stalls >7d, or the instant-pool path is suspended.Milder than JAAA’s manual approveRedeems (daily frequency, instant on-chain subscription), but the binding path is still off-chain liquidation at issuer discretion.
5AAA-CLO mark-to-market volatility in stressUnderlying is sub-IG leveraged loans, AAA-tranched (~30% subordination). A March-2020-style shock widened AAA-CLO spreads ~100bps and froze primary issuance ~6 weeks; NAV would likely mark down low-single-digits (est. ~3–5%) at the next push. Exit: NAV drop >0.5%/day warn, >2%/day page.AAA tranches recovered fully by year-end 2020; the tail is bounded by structural subordination, not a wipeout (historical AAA-CLO default <0.1%, S&P/Moody’s). But the AAA-tranche secondary price fell ~5–10% in Mar-2020 — a forced sale realizes that, beyond the ~3–5% NAV markdown.

Key-compromise threshold

Securitize concentrates authority in unguarded keys governed by a shared TrustService — a single bare MASTER EOA plus multiple ISSUER addresses (incl. bare EOAs); none is timelocked or multisig-gated.

Liquidity & exit

Primary path: daily redemption request → manager liquidates CLOs at BNY → USDC/USD settles T+2/T+3 (not guaranteed). Subscription is the reverse: an instant on-chain USDC→STAC swap. Secondary path: an on-demand liquidity pool at GP discretion — the on-chain swap/redemption contract (0xa022…98a8) holds ≈ $1,000 USDC (2026-06-23), so it is effectively unfunded; no public DEX (KYC-gated). 1-day hold before transfer, whitelisted holders only (offering terms).

On-chain reads (cast + $ETH_RPC_URL, 2026-06-23, block 25,380,802): totalSupply() = 100,197.807065 STAC; totalIssued() = 107,057.44 (≈ 6.4% of issued supply burned down — investor redemptions and/or issuer confiscations); top holder 0x491e…a44e = 100,000.0 STAC (99.8%, the Grove anchor); owner() = 0x59c1…676Ee (MASTER, bare EOA); isPaused() = false. NAV (~$1,021) and the ~$352M total / Solana leg are off-chain / rwa.xyz, not independently on-chain-verified this session (the announced Chronicle feed aside).

Defensible size at current liquidity (post-haircut): $10M — provisional. Redemption is at NAV (zero slippage), so size is latency-bound, not depth-bound: $10M is ~3% of the ~$352M total and clears within normal daily processing. But the denominator is two mobile anchors, not diversified float — size against the curator-gated, off-chain-settled path and the Grove/Ethena co-redemption risk, not headline AUM. The haircut applies to latency: T+2/T+3 normal → ~2 weeks under a Mar-2020-style CLO freeze, during which NAV marks down ~3–5% and the discretionary instant pool likely closes. Prerequisite: the GnosisDAO wallet must be KYC-allowlisted before any deposit — it cannot be added during a crisis. Provisional pending a track record beyond ~8 months and a holder base wider than 5.

Stress scenario (NOCA exits 50% / $5M in 7d while anchors redeem): $5M is small against AUM and settles at NAV, so it is latency-bound — but if Grove or Ethena redeem at scale into the same daily window, the manager must liquidate CLOs into a stressed market and our settlement stretches past T+3 at a marked-down NAV. Size the position to be tolerable locked for weeks, and treat Grove/Ethena flow as the leading indicator.

External reviews

Source links for the third-party takes in the Risks table. No independent risk rating (LlamaRisk, Chaos Labs, Particula, Bluechip, DeFiScan) covers the STAC wrapper as of 2026-06-23 — coverage is issuer + press, plus a Chronicle Proof-of-Asset feed (a transparency/oracle layer, not a risk rating). Per rubric.md, reviews older than 90d (⚠️) are stale — refresh before relying.