# Ketju research: Jupiter Lend (Solana)

- URL: https://riadefi.com/rejections/jupiter-lend/
- Verdict: rejected
- Type: Dollar lending
- Reviewed: 2026-08-16
- Last confirmed: 2026-08-16

## Research summary

This review rejects Jupiter Lend ahead of the scheduled review because its own condition for rejection has now been met. The prior draft said not to approve it without proof that the July 2026 Code4rena findings were fixed in deployed programs, and to reject it formally if remediation evidence was still absent at the next review. That evidence is now confirmed absent, not merely unchecked: no Code4rena mitigation review was ever commissioned, and no public program source exists to verify a fix independently. Waiting until 2026-11-30 to record what is already true serves no one. Jupiter Lend launched in August 2025 and scaled faster than its stress record: DefiLlama reported $925.7M TVL and $855.1M borrowed on 2026-08-14, after a $1.17B TVL peak in March. The architecture is Fluid on Solana: lenders receive transferable JL tokens, a shared liquidity layer funds Earn, Borrow, and Multiply within a market, and tick-based partial liquidation plus dynamic borrow and withdrawal ceilings manage flows. Separate top-level markets are isolated, but vaults inside the Jupiter Market reuse the same asset liquidity. An “isolated vault” does not segregate lender principal. Security work is substantial: seven listed firm audits, formal verification, and a 29-day Code4rena contest. But the final contest report found three medium issues, including a liquidation-engine denial of service during extreme ratios and two accounting paths that could over-credit suppliers and create reserve deficits. The public report does not record deployed remediation. Documentation also expanded the product in August 2026 to Smart Vaults whose collateral or debt doubles as Jupiter AMM liquidity, adding composition and DEX execution risk during this review. Time remains a blocker, but it is no longer the only blocker. Reopen after deployed fixes are mapped to audited commits, live roles are disclosed for the Jupiter Market, and the fixed system completes at least twelve clean months including a material Solana volatility event.

## Observable review triggers

- Any exploit or bad debt event
- Oracle design change without published migration
- TVL growth outpacing the audit and review cadence

---

Published by Ketju Research (https://ketjuresearch.com). Educational analysis only; not legal, tax, compliance, or investment advice.
Machine-readable index: https://riadefi.com/llms.txt · Content API: https://riadefi.com/content.json