Avant savETH

TL;DR

• What it is: savETH, the staked-avETH ERC-4626 vault from Avant Protocol (Avant Protocol Foundation, BVI). Its underlying avETH is marketed as “1:1 ETH-backed” but is not a staking token — the ETH backs an off-chain delta-neutral trading book.
• Yield source: funding and basis carry from that managed book — short-volatility carry with a negative tail, not staking yield, and no token emissions.
• Biggest risk: one externally-owned key, behind no timelock, is admin of token, vault, and minter — it can mint unbacked avETH, seize balances, or freeze exits (Risk R1).
• For detail: no independent risk rating exists (no LlamaRisk, Chaos Labs, Bluechip, DeFiScan); the code is an Ethena sUSDe fork, but Avant’s Ethereum deployment has no published contract audit.

How it works

You deposit ETH or WETH into Avant’s minting contract and receive avETH, a plain token that holds no yield. Staking avETH mints savETH, an ERC-4626 vault share whose redemption value grows as the protocol pays yield in. The deployed contracts are a near-verbatim fork of Ethena’s USDe/sUSDe: the same single-admin access control, the same cooldown “silo,” and the same 8-hour reward-vesting schedule. Yield arrives when a privileged rewarder transfers avETH into the vault, lifting the share price; on-chain the price is simply the vault’s assets divided by its shares (convertToAssets(1e18) = 1.05382 avETH, 2026-08-20). There is no external oracle and no borrowing, so a savETH holder can never be liquidated — they can only absorb a loss if the share price falls. Chainlink price feeds and proof-of-reserves are described in the docs as “planned,” not live.

The yield is a single economic leg: carry from a managed delta-neutral book (short perpetual-futures funding against spot, lending-rate arbitrage, Pendle and LP positions), executed by third-party trading partners that Avant names only in part (0xPartners is one). That is short-volatility carry — positive most of the time, with a fat negative tail when funding inverts or a basis trade gaps. It is not an ETH staking yield, so if the strategies stop there is no floor underneath avETH; the token is only a claim on the book. As the book grows, the same funding is split over more capital, so the carry compresses.

The label-vs-exposure gap is the whole story here. The name and marketing read like stETH — “Ethereum-pegged, 1:1 ETH” — but on-chain the vault holds only avETH, and avETH’s backing is WETH swept to an off-chain custody address for basis trading. savETH sits senior to a small junior tranche, avETHx, which absorbs losses first and is paid an extra 10% of total strategy yield for doing so; that buffer is only about a tenth of the senior tranche (about 1,346 avETHx versus about 10,615 savETH, 2026-08-20), and the reserve-fund address published in Avant’s docs holds under 0.01 ETH on Ethereum.

Risks

Verified on-chain: contract lineage (Ethena fork), the single-EOA admin across token, vault and minter with no timelock, the 1-day cooldown, the 5,000-avETH/block mint-and-redeem caps, zero avETH DEX liquidity, tranche sizes, the near-empty balance of the reserve-fund address published in Avant’s docs, and the 1.0538 share price. Taken on trust: the strategy composition, off-chain custody / MPC key management, the fee schedule, the “no critical audit findings” claim, and any reserve held off Ethereum.

Key-compromise threshold

Per the code, admin power is a single on-chain address behind no timelock; whether it is MPC-distributed off-chain is unattested and, either way, enforces no on-chain threshold or delay.

• Funds (theft / unbacked mint / burn): 1 — the admin EOA (0xd4d2…57cb). It can grant itself MINTER_ROLE and mint avETH with no deposit, add an arbitrary custodian and sweep collateral, or full-restrict a holder and redistribute their savETH to itself.
• Liveness (freeze / forced exit): 1 — the same key, or any gatekeeper it appoints. disableMintRedeem halts redemptions; the cooldown can be raised to its 90-day maximum; blacklisting blocks transfers and unstaking.
• Single point of failure: yes — one externally-owned key breaches both tiers, with no delay.

Liquidity & exit

Primary path: request redemption in-app; Avant’s whitelisted redeemer burns avETH and returns ETH from off-chain custody, “often within hours, up to 7 days,” and only after the 24-hour savETH cooldown. Backup path: none — avETH has no DEX liquidity to sell into. Worst-case latency: effectively unbounded — redemption is off-chain and discretionary, and the admin can extend the cooldown to 90 days or disable redemptions.

On-chain reads (2026-08-20): savETH.totalAssets = 11,185.95 avETH; convertToAssets(1e18) = 1.05382; maxRedeemPerBlock = 5,000 avETH; avETH DEX reserves = $0 (GeckoTerminal, no pools); the reserve-fund address published in Avant’s docs holds 0.0097 ETH.

Defensible size at current liquidity: effectively $0 while under review. There is no secondary market to haircut, so no slippage math applies — size is bounded entirely by trust in a single off-chain redemption desk, not by depth. Treat any position as fully illiquid and potentially freezable.

Stress scenario: “NOCA exits 50% in 7 days while peers also redeem.” Every redemption funnels through one desk unwinding off-chain basis positions, throttled to 5,000 avETH/block and to whatever the desk can liquidate. Correlated redemptions (the Nov-2025 pattern) queue; if the gatekeeper pauses redemptions, exit is indefinite. Hold only size you can afford to have frozen.

External reviews

No independent risk rating of avETH/savETH exists (no LlamaRisk, Exponential, Bluechip, DeFiScan, or Chaos Labs coverage found, 2026-08-20). Coverage is limited to the protocol’s own audit and security pages.

• Avant Protocol — audits page (8 unlabeled reports; avUSD + bridge only) · 2026-08-20
• Omniscia — avUSD system audit · 2026-08-20
• Omniscia — cross-chain ERC-20 bridge audit · 2026-08-20
• Avant docs — security & reserve model · 2026-08-20