Research summary
The research assessment is adverse. Fluid has absorbed material bad debt and its public evidence does not support two important safety claims: a clean loss record and an audit roster including Spearbit, Trail of Bits, and Certora formal verification. By the 2026-08-01 review date Fluid had already absorbed $19.3M to $21M of bad debt from the Resolv collapse: in late March 2026 an attacker compromised Resolv Labs' off-chain signing keys and minted about 80M unbacked USR, discounted wstUSR entered Fluid markets through stale oracle pricing, and roughly $100M of USR collateral stood against USDC and USDT borrows. The settlement closed 2026-05-11, per the post-mortem: Resolv about $9.7M, Fluid governance treasury $8.2M, the team $1.5M from future revenue. A separate key compromise took about $215k from the Ethereum reward distributor on 2026-06-01. Our loss record therefore requires renewed assessment. The Liquidity Layer pools the USDC and USDT borrows the USR markets drew on with the markets assessed here, so market labels do not isolate supplier exposure. The audit roster fails the same check: no Trail of Bits or Certora report for Fluid exists in either firm's public index, and the official docs list PeckShield, Statemind, MixBytes, and Cantina. The strongest stated reason for approval could not be confirmed anywhere primary. The mitigations get equal weight. No Fluid contract was itself exploited; the loss came through a listed asset's oracle. The bad debt was paid in full with a public post-mortem and users were made whole. The architecture description was verified as accurate: one Liquidity Layer serving lending, vaults, and the DEX, tick-based liquidations with 0.1 to 3% penalties against the 5 to 10% typical elsewhere, and Automated Limits that throttle large movements per block, confirmed by the docs and MixBytes' engineering write-up. The shared Liquidity Layer prevents the held-reserve loss from being separated with the retained primary accounting. Reimbursement mitigates realized user harm but does not resolve that exposure question. Capacity evidence is also weak: TVL peaked at $2.68B on 2025-10-08 and the stack stood at $802.6M at the 2026-08-14 review with $752.5M borrowed, so free liquidity is thin, and the $500k Immunefi cap is 0.06% of TVL, the same thin shape observed in other capacity-constrained venues. The research must answer the questions below by 2026-09-15.
Observable review triggers
- Reopen only after primary market-level accounting proves no held USDC, USDT, or WETH supplier balance absorbed Resolv bad debt through the shared Liquidity Layer
- Reopen only after every live held-market binary maps to a published PeckShield, Statemind, MixBytes, or Cantina review and any claimed formal verification is linked
- Reopen only after Guardian, team multisig, signer thresholds, upgrade paths, and timelock delays are reproduced on-chain for every approved chain
- Reopen only after proposed-size withdrawals from each named reserve succeed while free liquidity exceeds $10M and trailing-30-day utilization stays below 90%
- Reopen only after the post-Resolv oracle overhaul is deployed and mapped to a published specification and audit; any new bad debt or key compromise keeps the protocol rejected
Facts on file
- Verdict
- Rejected
- Type
- Dollar lending
- Chains examined
- Ethereum, Arbitrum, Base
- Instruments
- USDC, USDT, WETH
- Reviewed
- Last confirmed