Morpho Sentora RLUSD Main

under-reviewethereumreviewed 2026-08-13

TL;DR

How it works

RLUSD deposits mint senRLUSDv2; NAV grows as borrower interest accrues. Vault V2 routes through one adapter (0x3C6E…DFFF) into the immutable Morpho Blue singleton — 8 funded markets. Allocation (2026-08-13): kBTC 49.9% · weETH 29.6% · cbBTC 6.0% · syrupUSDC 5.0% · FXRP 1.8% · WBTC 0.8% · PT-sUSDe 0.7% · wstETH 0.6% · idle 5.7%. Labelled a Ripple-stablecoin product; the exposure is a leveraged credit book — 57% BTC-wrappers, 30% ETH-LSTs — on the same single-key Sentora control plane as our PYUSD strategy. Ripple and Flare — issuers of the deposit asset and of the FXRP collateral — are strategic investors in the curator (FinanceFeeds, 2026-08-03).

Oracle setup. The vault only lends and is never itself liquidated; NAV absorbs bad debt. All eight markets quote via one RLUSD/USD Chainlink feed (0x26C4…7f2A, measured 24h heartbeat), so a depeg reaches every liquidation engine up to a day late. kBTC prices off bare BTC/USD — no kBTC feed could be located on Ethereum (2026-08-13), so a wrapper depeg is structurally invisible; cbBTC/WBTC carry wrapper legs; weETH/wstETH use exchange-rate feeds × ETH/USD; syrupUSDC convertToAssets × USDC/USD; FXRP a RedStone XRP feed with no FXRP leg.

Yield. Borrower interest is the only leg entering NAV: gross 2.90%, 2.61% net of the 10% performance fee (Morpho API, 2026-08-13). The 6.14% headline adds 3.54pp of off-NAV Merkl rewards in RLUSD — 58% of the total — pre-funded 7 days at a time (217,685 RLUSD this week). Size on the 2.61%. Capital is rented: −67% in ~6 days in April 2026, and ~66% of today’s shares are held by wallets with no exposure before that run.

Risks

Verified on-chain (2026-08-13, block 25,746,797): all 9 market ids from adapter event history, positions, caps, LLTVs, utilisation, every oracle feed leg, RLUSD/USD heartbeat, fees, owner/curator getOwners/getThreshold + codesize/nonce per signer, selector timelocks + gate abdications, full sentinel/allocator grant history, totalAssets at 13 blocks incl. daily April-2026 resolution, simulated withdraw to find the true at-NAV exit cap, share-holder ledger from full Transfer history (reconciles to totalSupply exactly) incl. holder-contract attribution, the Merkl funding chain, RLUSD role grants + multisig quorums, kBTC supply vs Morpho balance, Curve RLUSD/USDC depth + get_dy quotes, byte-diff of this vault’s runtime vs the PYUSD vault’s. Taken on trust: Ripple’s monthly CPA attestation (doubly so — the firm is unnamed), Sentora’s allocation intent, what the Vault V2 audits actually covered (firms/dates are documented, and codebase identity with the PYUSD vault is proved by the byte-diff), collateral-issuer solvency, Merkl distribution correctness.

IDRiskMechanismSource + our delta
R1kBTC: 50% of TVL, oracle-blind, no exit marketLargest market ($160.0M, at its $160M cap) liquidates kBTC on plain BTC/USD — no kBTC feed located, so a Kraken-custody depeg is invisible at 86% LLTV. 90.6% of all kBTC (5,584 of 6,164) sits in Morpho: liquidators have only Kraken redemption. Exit: kBTC↔BTC spread >200bps >1h.On-chain oracle + supply reads; NOCA-original (no public third-party coverage of this vault). Same structure as PYUSD strategy Risk R1 at 32% — here 50%, plus the circular-supply finding: the wrapper exists almost entirely as loop collateral. A structural constraint, not a curator choice — but the risk is identical either way.
R258% of the yield is a weekly subsidy from unattributed EOAs — and this book already ran once3.54 of 6.14pp is off-NAV Merkl RLUSD, funded 7 days at a time from a bare EOA holding 4.19M RLUSD ≈ 11 weeks at live all-campaign spend (~385k/wk incl. new Aave/Euler campaigns; 19 weeks against this vault alone). April 2026: −67% in ~6 days ($199.0M→$64.8M). Exit: two weeks without a campaign, or runway <2 weeks.Merkl API + on-chain trace: campaign Safe (1/1) ← 0xB70e…a78b ← 0xe36b…4dce ← 0x69ae…90a2 ← a >2.8B-throughput hub EOA — all unattributed. Press documents Ripple/Flare equity in Sentora, not campaign funding: treat the budget as a discretionary 7-day promise. Poisoning mimics already target four funder counterparties.
R3Single-key curator/owner, instant fee seizure, no independent vetoOwner (0xe8C9…8008) and curator (0x9e39…aac0): same 1-of-1 Safes over bare EOAs as the PYUSD vault. Fee setters carry 0 timelock (10% perf today; 50%/5% caps). All three sentinels are the operator’s own keys. Exit: any fee raise or unexpected Accept.getOwners/codesize/nonce + selector timelocks + full SetIsSentinel history, verified today. The identical control plane fired on PYUSD 2026-07-13 (kBTC cap raise). Holding both Sentora vaults doubles this key-family — and one ~$39.9M EOA (holder #3 here) also holds ~$57M of the PYUSD book.
R4Only 5.7% of TVL redeems instantly at NAVSimulation caps a single withdraw at $18.19M — the idle balance; $30.9M more needs permissionless forceDeallocate (0.01% penalty), the rest borrower repayment. Markets run 89–90% utilised; the top holder alone is 5.3× the at-NAV buffer. Exit: idle + unborrowed <10% of TVL.Simulated withdraws + market reads, 2026-08-13. April 2026 cleared ~$134M in ~6 days at NAV — an orderly loop unwind, not a credit event. Contagion we add: EtherFi sits both sides — its liquidETH vault is depositor #4 (10.6%) while weETH backs 29.6% of loans, so one issuer shock impairs collateral and triggers redemptions at once.
R5RLUSD depeg reaches every market a day late — and we hold no redemption accessOne RLUSD/USD feed (24h heartbeat, $1.00006) quotes all 8 engines, and the vault is 42% of Ethereum’s 761.8M RLUSD — it is the RLUSD-on-Ethereum market. Direct mint/redeem is enterprise-only; everyone else exits via secondary venues. Exit: RLUSD <0.995 for >1h.Feed + supply reads on-chain. Redemption per Ripple docs (enterprise onboarding) and Bluechip (retail → secondary markets); NYDFS caps compliant redemptions at T+2 and confers par redemption on any lawful holder — the constraint is access, not entitlement (LlamaRisk). Counterweight we measured: Curve RLUSD/USDC holds $77.0M, −0.014% on a $10M swap — deeper than PYUSD’s route.
R6Issuer pause/clawback at 2 keys; upgrade at 7RLUSD is UUPS-upgradeable with no timelock at the token: UPGRADER and DEFAULT_ADMIN sit in quorum-7 custom multisigs; PAUSER + CLAWBACKER share one quorum-2 multisig — two keys pause all RLUSD transfers, freezing every exit path at once. Exit: any pause/clawback event or role change.RoleGranted history + quorum()/signers() reads — re-verified today: quorums match LlamaRisk’s 2024-12 baseline (⚠️ >180d) 20 months on, but signer sets have rotated — pause/clawback is 2-of-22 today vs the 2-of-31 it documented. The seize/freeze capability is a GENIUS-Act mandate for US-regulated issuers, not an RLUSD quirk.

Key-compromise threshold

Morpho Blue’s core is immutable and withdrawals cannot be gated after the fact: setReceiveAssetsGate, setReceiveSharesGate, setSendSharesGate and setAdapterRegistry all read abdicated() = true; the one live gate setter (setSendAssetsGate, 0 timelock) covers deposits only per source. Privilege sits in the same two single-signer Sentora Safes as the PYUSD vault, re-verified today: owner 0xe8C9…8008 = 1/1 over EOA 0x295D…d7E9, curator 0x9e39…aac0 = 1/1 over EOA 0x9925…0ABE, both signers codesize 0. Three sentinels (curator Safe, EIP-7702 EOA 0x13DE…90e1, never-used EOA 0x74D1…1618) and three allocators (curator Safe, 0x13DE…90e1, bare EOA 0xC4Ba…79D3) — every one an operator key.

Liquidity & exit

Primary path is ERC-4626 redeem at NAV. totalAssets() = 320,766,325 RLUSD, idle RLUSD.balanceOf(vault) = 18,185,539 (2026-08-13, block 25,746,797). Same-day at-NAV capacity is the idle alone — simulation caps a single withdraw at $18.19M and maxWithdraw() reads 0 (no liquidity adapter). A further $30.9M unborrowed is reachable via permissionless forceDeallocate at 0.01% ($49.1M, 15.3% all-in); the remaining ~85% needs borrower repayment. No secondary market for senRLUSDv2. Holder base: top four hold 72.3% — #1 and #2 (49.2%) are Sentora’s own feeder vaults (on-chain name(): “Advanced Strategies BTC/USDC”, symbols sentoraBTC/sentoraUSDC), #3 a bare EOA also in the PYUSD book, #4 EtherFi liquidETH. Underlying RLUSD exits via Curve RLUSD/USDC ($77.0M, −0.014% at $10M, block-stamped above) — we hold no enterprise redemption line.

Defensible size at current liquidity (post-haircut): $10M — clears same-day at NAV today (verified by simulated withdraw), 20% of the $49.1M all-in depth; under a 3× haircut the at-NAV leg falls to ~$6.1M, so assume the forceDeallocate path ($1,000 penalty per $10M). Below the PYUSD vault’s $12M because kBTC is 50% at cap (vs 32%), the yield is 58% subsidy on 7-day tenor, and the top holder — a curator-run feeder — is 5.3× the at-NAV buffer. Stress (“NOCA exits 50% in 7d while peers redeem”): $5M against ~$16.4M post-haircut clears; April 2026 moved ~$134M out in ~6 days at NAV, but that was a loop unwind and every major market now runs ~90% utilised. Halve if not refreshed by 2026-11-13.

External reviews

No publicly available independent rating of this vault exists (checked 2026-08-13): LlamaRisk and Chaos Labs have none; Staking Rewards has a page for this vault with its rating gated behind “request a full report”; Exponential no longer publishes pool ratings (redirects to yo.xyz). The only vault-level risk analysis is Sentora’s own — conflicted twice over (curator, and Ripple/Flare equity; discount per rubric.md). Asset-level coverage of RLUSD: