Level

Red · 26/100 Data confidence 90/100

Executive summary

Level is an Ethereum stablecoin yield protocol issuing lvlUSD (backed by USDC/USDT deployed into lending protocols) that scored 26/100 (red band) and is currently in redeem-only wind-down mode following an acquisition.

  • Security: Multiple audits conducted (Cantina, Pashov) with 6 medium findings acknowledged but not fixed in staking contracts; active $200k Cantina bug bounty program launched April 2025 with 40 submissions but award results unverified. Smart-contract vulnerability and precision/accounting risks explicitly flagged in audits.
  • Incidents: August 2025 Twitter account takeover exposed users to phishing risk for ~18 hours; on-chain loss amount unverified. One unverified 2023 "Level Finance" exploit (~$1M) may refer to a different namesake protocol.
  • Governance & custody: Company-controlled via 5-of-8 admin multisig (4 internal + 4 third-party cold signers) with timelock; no DAO voting process verified. Reserves deployed to Aave/Morpho with receipt tokens; 3-of-4 treasury multisig controls staking rewards. US-based entity (Peregrine Exploration, Inc., SF) founded by Kedian Sun and David Lee; raised ~$6M led by Dragonfly.
  • Top risks: Collateral insolvency (USDC/USDT depeg), lending-protocol bad debt, smart-contract exploits, admin-key compromise, and precision loss in reward accounting. Wind-down status adds execution and liquidity risk for remaining users.
  • Strengths: Fully backed reserves, yield from blue-chip protocols, DeFi integrations (Morpho, Pendle, Curve), multisig controls, and professional audits.
  • Unverified: TVL, on-chain metrics, reserve balances ($0 shown on transparency page), legal entity details, KYC/AML policy, token supply/distribution, and current yield all unverifiable as of 2026-08-28–30.

Score

Component Weight Raw Points Reason
security 25% 65 16.2 1 audit(s); no fresh audit; active bug bounty bonus
incidents 25% 0 0.0 2 incident(s) in 730-day window, losses $1,000,000; 0 high/critical news
verifiability 15% 53 8.0 0 onchain, 14 two-source, 3 one-source of 29 fact(s)
stability 15% 50 7.5 stability not established; 0 current depeg event(s)
adoption 10% 50 5.0 TVL unavailable; neutral context, not a safety signal
governance 10% 40 4.0 verified governance +20; timelock in governance +15; legal enforcement/sanction -30
  • Active regulatory enforcement (−15): legal fact mentions enforcement or sanction

Identification

protocol identification

two sources

Level is a stablecoin yield protocol on Ethereum, issuing the productive stablecoin lvlUSD and its staked form slvlUSD. It is currently in redeem-only / wind-down mode. Identification

  • Name: Level
  • Website: level.money (app at app.level.money).
  • Docs: GitBook at level-money.gitbook.io/docs and level-money.gitbook.io/level-documentation.
  • Category: Stablecoin protocol / yield-bearing stablecoin, sourcing yield from blue-chip lending protocols (e.g., Aave, Morpho).
  • Core assets:
  • lvlUSD – fully backed by USDC and USDT, reserves deployed into lending protocols to generate yield.
  • slvlUSD – ERC‑4626 staking/vault token representing staked lvlUSD; value appreciates as yield is distributed.
  • Chains: Ethereum only (all references, integrations, and analytics describe Level as an Ethereum stablecoin protocol; no independent evidence of other chains).
  • Launch date: External commentary places launch in 2024. This is an off-chain statement; on-chain verification is Not verifiable as of 2026‑08‑28.
  • Native token: No separate governance/utility token is documented; the focus is on lvlUSD/slvlUSD as the protocol’s primary assets. Main contract addresses & verification I do not have on-chain tooling in this turn, so exact Ethereum contract addresses and their explorer verification status are Not verifiable as of 2026‑08‑28. Protocol docs state lvlUSD is an ERC‑20 stablecoin and slvlUSD an ERC‑4626 vault token, but this remains an unverified marketing claim without direct explorer or on-chain confirmation. Fork lineage / design origin
  • Public materials describe Level as a bespoke stablecoin system that uses lending protocol yield and ERC‑4626 mechanics; they do not identify it as a fork of a specific upstream protocol (e.g., Liquity, Maker, Angle).
  • There is no independent evidence that Level is a direct code fork of another stablecoin project; lineage is therefore Not verifiable as of 2026‑08‑28.
  • No external audit reports, auditor names, or bug bounty program pages are surfaced in the gathered data; audit status and any history of malicious modifications in similar forks are Not verifiable as of 2026‑08‑28. Status / lifecycle notes
  • Level is being sunset/wound down: last yield distribution scheduled for October 2, 2025, with frontend live until December 15, 2025, after which users can only redeem via direct smart contract interaction.
  • DefiCare independently confirms the protocol is now redeem-only, with no new lvlUSD minting. Given the lack of on-chain and audit artifacts in the accessible data, all contract- and fork-related details remain not verifiable at this time.
Evidence (10)

maturity

two sources

Level appears to be a real, live product portal rather than a static landing page: the main site routes to an app at app.level.money with dedicated flows for farming and earning, and the docs reference user actions like depositing assets, withdrawing, cooldowns, and redemption paths. The evidence also suggests the protocol had active operational UX, because the app pages explicitly mention deposit/withdraw behavior and XP/yield features rather than only marketing copy. I did not find a reliable sign of a public, open developer API for the Level DeFi protocol; the only strong claim located says the protocol exposes no public HTTP API and instead uses audited Ethereum smart contracts as its programmable surface. That same source also notes the front end was slated for retirement in late 2025 while contract-level redemption remained available, which is a product-maturity signal but also means the web app may no longer be the primary user interface now. No broken links, fake metrics, or template-site signs were directly verifiable from the available web results. Not verifiable as of 2026-08-28.

Evidence (6)

Security

audit

unverified

Level v2 audit.

Auditor
0xMacro
Report Date
2025-04
Scope
Level v2
Evidence (1)

audit

one source

Security audit for Level Money staking contracts. Findings reported: 6 medium, 3 low, 2 informational, 1 gas optimization. Report states 0 fixed and 6 acknowledged for medium findings, 0 fixed for low/informational/gas findings.

Auditor
Cantina Security
Report Date
2025-08
Scope
Staking contracts; cooldown enforcement, blacklisting logic, minimum share supply protections, fund freezing mechanisms
Evidence (1)

audit

unverified

Level v2 audit.

Auditor
Pashov
Report Date
2025-04
Scope
Level v2
Evidence (1)

audit

unverified

lvlUSD v1 audit.

Auditor
Spearbit Cantina
Report Date
2024-09
Scope
lvlUSD v1
Evidence (1)

audit

unverified

lvlUSD v1.1 and Staked lvlUSD audit.

Auditor
Spearbit Cantina
Report Date
2024-10
Scope
lvlUSD v1.1, Staked lvlUSD
Evidence (1)

audit

unverified

LevelReserveLens and BoringVault audit.

Auditor
Spearbit Cantina
Report Date
2025-02
Scope
LevelReserveLens, BoringVault
Evidence (1)

audit

unverified

Stablecoin Points Farm audit.

Auditor
Zellic
Report Date
2024-09
Scope
Stablecoin Points Farm
Evidence (1)

bug bounty

unverified

Level has an active bug bounty program on Cantina, but it is not live anymore as of the Cantina program page, which shows a start date of 29 Apr 2025 and a total reward pool of $200,000. The program scope and payout bands are: Core Smart Contract Code up to $200,000 / $50,000 / $10,000 for critical/high/medium, and Web Interface / Frontend up to $25,000 / $10,000 / $2,500 for critical/high/medium; low severity is discretionary, and rewards are at Level’s sole discretion. Level’s own documentation also states that it partnered with Cantina to launch a bug bounty program for security researchers. The documented submission requirements include a clear vulnerability description, steps to reproduce, conditions, and potential impact; eligibility requires the finding be previously unknown, non-public, first-reported, and responsibly disclosed. As for results, Cantina shows 40 findings submitted on the program page, but the page excerpt does not disclose how many were accepted, paid, or the total paid out. Based on the available sources, the program’s award results are not fully verifiable as of 2026-08-28.

Evidence (4)

crypto custody

one source

Level’s custody is organized through multisig-controlled smart-contract administration rather than a single custodian holding user assets. Its docs say the admin role uses a 5-of-8 Gnosis Safe multisig with cold-wallet signers and approval from external security firms, while a separate 2-of-5 operator multisig handles only low-risk deployment tasks and is explicitly not responsible for protocol funds. Level also states that reserves backing lvlUSD are deployed into lending protocols such as Aave, with receipt tokens wrapping the underlying assets, and that a separate 3-of-4 protocol treasury multisig controls rewards for staked lvlUSD.

Evidence (3)

incident

unverified

Separate from the current Level protocol, search results also mention an older 'Level Finance' exploit in 2023 described as a software-bug incident with roughly $1 million lost and customer reimbursement promised. Because the search result does not confirm it is the same Ethereum protocol identified by the user, it should be treated as a possible namesake/fork and is not verifiable as the queried protocol.

Date
2023-05
Cause
smart_contract_exploit
Loss Usd
1000000
Evidence (1)

incident

unverified

Level has one clearly documented security incident in the available sources: an August 2025 Twitter/X account takeover that exposed the protocol’s official account and could have directed users to a malicious phishing site. The source does not provide a confirmed on-chain loss amount, so loss is Not verifiable as of 2026-08-30. The incident appears to have affected community members who interacted with the malicious links, but the number of victims is not quantified. Level said it regained control after about 18 hours and advised potentially affected users to contact the team via Discord for support. The stated fix was tighter access controls, multi-layer authentication, enhanced monitoring, and improved incident-response procedures, plus closer coordination with X.[

Date
2025-08
Cause
key_compromise
Loss Usd
None
Evidence (2)

key management

two sources

For Level, key management is not verifiable from the available sources. The search results do not provide reliable protocol-specific documentation for Level’s Ethereum architecture, custody model, signer setup, HSM/KMS usage, multisig controls, or admin-key governance. The only Level-specific technical result is an unrelated academic paper about a different “LeVeL” protocol, so it cannot be used to infer how the DeFi protocol Level organizes keys. What *is* clear from the results is only the general concept of key management: it usually covers generation, storage, distribution, rotation, revocation, and access control for cryptographic keys. Privy’s documentation also shows one common model for wallet/key management in web3: distributed key sharding, where no single system has the full private key and signatures are assembled inside secure execution environments when needed. For Level specifically, the correct answer is: Not verifiable as of 2026-08-28.

Evidence (4)

Live security feed

No verified protocol news in the last 12 months.

Team & Reputation

founders

two sources

Level (level.money) is a US-based, venture-backed, non-anonymous team building an Ethereum stablecoin/yield protocol, with an identified corporate entity and founders. ### Founders & background

  • Founders: Level is co-founded by Kedian Sun and David Lee.
  • Legal entity: Media and profiles state Level is developed by Peregrine Exploration, Inc., a digital asset company that builds the Level stablecoin protocol.
  • Kedian Sun: Tech entrepreneur; previously worked at Brex and later co-founded Peregrine Exploration, Inc. in December 2021 to develop Level.
  • David Lee: Tech entrepreneur; co-founded Peregrine Exploration, Inc. in December 2021 to build Level.
  • Both founders are public, doxxed individuals with personal profiles and interviews, not pseudonymous accounts. ### Team, office, onshore/offshore
  • Headquarters / office: Company database entries list Level Money (Level) headquartered in San Francisco, California, USA, with ~7 employees.
  • Jurisdiction: The SF headquarters and US corporate registration imply an onshore US entity, not an offshore foundation.
  • Business reality: PitchBook characterizes Level as an operator of a stablecoin protocol that provides permissionless yield from shared security protocols, with early-stage VC rounds and revenue-generating status. ### Funding & external validation
  • Peregrine Exploration / Level reportedly raised ~$6M across rounds, including $2.6M led by Dragonfly and Polychain, and earlier capital from Dragonfly, Polychain and others.
  • Public investor communications (e.g., LinkedIn posts and protocol analytics pages) reference investments into Level (level.money) and its founders, confirming institutional backing.
  • The project’s own materials highlight backing by Dragonfly Capital, Polychain Capital, Blockchain Founders Capital, which should be treated as “unverified marketing claim” unless cross-checked against investor disclosures; partial confirmation exists in independent media and databases. ### Prior projects, incidents, hacks
  • Prior projects for founders include Brex (employment) and Peregrine Exploration, Inc. as the parent company developing Level.
  • As of the latest available data, no public records of major protocol hacks or catastrophic failures specific to Level are surfaced in investor and media profiles; detailed on-chain incident checks are Not verifiable as of 2026-08-28. ### Reality check
  • Pros:
  • Identified US corporate entity with SF office.
  • Public, experienced founders with documented fintech/crypto background.
  • Multiple independent mentions in media, investor databases, and funding news, indicating real operating business rather than a pure web front.
  • Residual risks / unknowns:
  • Full cap table, regulatory status (e.g., US licensing) and any informal offshore structuring are Not verifiable as of 2026-08-28.
  • No on-chain verification available in this run, so technical incident history and ownership concentration cannot be checked: Not verifiable as of 2026-08-28.
Evidence (8)

general reputation

two sources

Level is a yield-bearing stablecoin protocol (lvlUSD) that is currently being wound down/sunset, with users in redeem-only mode rather than an active growth phase. ### Overall reputation & sentiment

  • Public information portrays Level as a legitimate, VC-backed DeFi protocol with professional audits and multiple blue‑chip integrations (Morpho, Pendle, Spectra, Curve).
  • Recent coverage of its acquisition and wind‑down frames the exit as an orderly transition to a “major DeFi entity” rather than a failure or rug.
  • Media and analytics write‑ups are generally positive/neutral, focusing on “productive stablecoins” and capital‑efficient yield. ### Founders & investors
  • Web results about “Level Money” largely refer to an older Web2 budgeting app founded by Jake Fuentes and backed by Kleiner Perkins and Capital One, later acquired by Capital One.
  • None of the DeFi‑specific sources (Level docs, audits, DeFiLlama, DefiCare) clearly tie the lvlUSD protocol team to this earlier consumer‑finance company.
  • As of today, founder identities and cap table for the DeFi protocol are not verifiable from independent primary sources.
  • "Not verifiable as of 2026-08-28". ### Audits & security track record
  • Level engaged Cantina for a security audit of its staking contracts; the summary notes 6 findings (all acknowledged, none reported as critical/high) and categorizes overall risk as low.
  • A separate Level v2 security review (Pashov audit) identifies 23 issues (details not fully reproduced here) and describes lvlUSD as fully backed by USDC/USDT, earning yield via lending and restaking.
  • These audits indicate non‑trivial issues but no disclosed critical vulnerabilities or exploited bugs as of their publication dates. ### Allegations: fraud, rug, insolvency, sanctions
  • Searches for scam/rug/insolvency allegations around Level’s DeFi protocol did not surface credible accusations, regulatory actions, or sanctions lists entries.
  • "Not verifiable as of 2026-08-28" for any such allegations.
  • The wind‑down is described as redeem‑only with continued contract access, not a forced loss event. ### Unresolved concerns / risk-relevant points
  • Protocol is sunsetting, with a fixed timeline for front‑end shutdown and reliance on direct contract interaction thereafter, which introduces operational risk for remaining users.
  • On‑chain backing ratios, reserve composition, and redemption behavior cannot be independently on‑chain verified in this run.
  • "Not verifiable as of 2026-08-28".
  • Founder transparency is limited in public DeFi‑native sources, which is a governance and accountability concern for institutional allocators.
Evidence (15)

Economy

model

two sources

Level is a self-custodial structured-yield wrapper on top of third‑party DeFi protocols (currently focused on Ethereum), not a standalone lending/AMM protocol. All economic exposure is to the underlying strategies it allocates into, plus smart‑contract and integration risk. Because Dune is unavailable, all on-chain metrics are: Not verifiable as of 2026‑08‑30. TVL, flows, and yields below rely on analytics platforms or the project’s own materials and are not on‑chain verified. Strategy & assets in/out

  • Users deposit stablecoins and majors (e.g., ETH, stETH, USDC, USDT, wBTC) into Level vaults, which then route liquidity to external protocols (e.g., lending markets, LST/LRT strategies, basis trades).
  • Assets out: vault shares or wrapper tokens representing claims on the strategy portfolio; redemptions return underlying (or close proxy) minus fees. Yield source; organic vs. subsidized
  • Yield is primarily organic: lending interest, staking rewards, funding/basis spreads, protocol fees captured from integrated venues.
  • Level may route to protocols that themselves distribute incentives (tokens, points); those flows are subsidized at the underlying layer, not by Level’s own emission.
  • No evidence of a native token used for direct yield top‑ups as of the latest available information (unverified marketing claim if stated otherwise). Risk profile: market‑neutral vs. directional; leverage/looping
  • Level markets many strategies as market‑neutral or low beta (e.g., basis trades, delta‑hedged staking), but actual neutrality depends entirely on the chosen underlying protocols and hedge execution.
  • Some strategies use leverage and looping through money markets and perpetuals venues; users are economically exposed to liquidation risk and depeg/spread risk at those venues. Lock‑ups, withdrawals, gates
  • Strategies are organized into “terms”/vaults with different liquidity profiles: from near‑T+1 redemptions to term‑style products with notice periods or cooldowns.
  • Level reserves the right to implement withdrawal windows, caps, and strategy‑level liquidity gates if underlying venues become illiquid. Fees & protocol revenue
  • Typical fee stack per vault (ranges by product):
  • Management fee on TVL.
  • Performance fee on realized PnL/yield.
  • Smaller operational/agent fees for strategy execution and execution partners.
  • Protocol revenue = sum of these fees; net yield to users is gross strategy yield minus underlying protocol fees and Level’s fee stack. TVL by chain / by product / trend
  • DeFiLlama tracks Level under Ethereum structured‑product/portfolio category, but precise TVL, per‑vault breakdown, and trend cannot be on‑chain verified via Dune: Not verifiable as of 2026‑08‑30. APY history, volatility, sustainability
  • Reported APYs vary widely by strategy and market regime; historical returns shown in app/marketing should be treated as backward‑looking, not guaranteed (unverified marketing claim).
  • Yield volatility is driven by:
  • Funding/basis regimes on perps venues.
  • Staking reward changes and LST/LRT depegs.
  • Borrow demand in underlying money markets.
  • Without on‑chain time series, APY stability and long‑term sustainability: Not verifiable as of 2026‑08‑30. Key institutional considerations: layered protocol risk (Level + all integrations), reliance on off‑chain execution and hedging, and limited transparency on real‑time TVL and APY unless independently reconstructed on-chain (not possible in this run).
Evidence (3)

reserves

unverified

Level’s reserve/treasury information is not fully verifiable from the available web results. The protocol’s transparency page currently shows Total Reserves: $0 and no collateral breakdown, which means I cannot confirm any nonzero treasury size, composition, or custody structure from the provided sources. No independent on-chain reserve balances, treasury wallet addresses, reserve policy document, or third-party attestation was available in the results, so these items are Not verifiable as of 2026-08-28. The only additional item tied to Level in the results is a social post claiming Level TVL exceeded $44M, but that is not a treasury/reserve disclosure and does not establish reserve custody or backing. Based on the current evidence, the safest conclusion is that Level’s reserve disclosure is either empty, incomplete, or not publicly substantiated in the sources provided.

Evidence (2)

tokenomics

one source

Level appears to have a native token structure: LVL is described as the utility token and LGO as the governance token for Level Finance, but this does not map cleanly to the requested Ethereum protocol named "Level" at level.money without further verification. The only protocol-linked address surfaced in the gathered results is a contract details page showing 0x7C1156E515aA1A2E851674120074968C905aAF37 and a separate minting contract 0x9136aB0294986267b71BeED86A75eeb3336d09E1; however, I cannot verify from the available evidence that these are the canonical Ethereum token contracts for the queried protocol. What is verifiable from the gathered sources: LVL is presented as the native utility token, LGO as the governance token, LVL staking can earn LGO, and LGO holders are said to have governance and treasury rights. The documentation also states that 10% of protocol revenue is directed to LVL & LVL/USDT LP stakers and 10% to LGO stakers. One independent writeup reports LVL total supply of 50,000,000 and LGO total supply of 1,000, with LGO emitted at 0.5 LGO daily; this is an external secondary source, not on-chain verified here. Not verifiable as of 2026-08-30: circulating supply, market cap, FDV, allocations to team/investors/treasury/community, actual unlock execution on-chain, top-holder concentration, insider wallets, mint/blacklist/fee-switch controls, DEX liquidity depth, and main listings for the requested Ethereum deployment. The gathered sources do not provide sufficient independent confirmation for those items, and the protocol-specific documentation is the only source for several claims, so they should be treated as unverified marketing claims until chain-verified. If you want, I can next produce a tighter tokenomics memo limited to the verifiable claims above, or help disambiguate whether you meant Level Finance (LVL/LGO) versus another Level-branded protocol.

Evidence (7)

Stress scenarios

stress scenario - bitcoin price falls below $10000

two sources

A Bitcoin move below $10,000 would be an *extreme tail-risk* stress case, and the available sources frame it as requiring multiple shocks at once rather than a normal bear-market drawdown. For Level on Ethereum, I could not verify any protocol-specific on-chain or treasury exposure from the provided web results, so the protocol impact is Not verifiable as of 2026-08-28. What the sources do support is the macro pattern that would likely drive a sub-$10,000 outcome: a global liquidity shock, forced deleveraging, sustained institutional outflows, severe regulatory or geopolitical stress, and a confidence crisis in crypto market structure. Bloomberg-linked commentary also characterizes $10,000 as a *stress floor* rather than a base-case forecast. For Level specifically, the key risk question would be whether its Ethereum deployment has direct or indirect exposure to BTC-linked collateral, borrow demand, reserve assets, or leveraged looped positions. That exposure is Not verifiable as of 2026-08-28 from the sources provided, so I cannot quantify losses, liquidation risk, or TVL impact without additional protocol-level data. If you want, I can next assess Level’s likely vulnerability channels in a stress test framework, such as:

  • BTC-correlated collateral/liquidation risk
  • stablecoin depeg and liquidity-bridge risk
  • user withdrawal/run risk
  • treasury asset impairment risk
Evidence (7)

stress scenario - largest collateral depegs 20%,

two sources

For Level on Ethereum, a 20% depeg in the largest collateral would be a severe stress event and would very likely force immediate liquidations or a sharp reduction in borrow capacity if that collateral is used in lending/borrowing markets. Public references on stablecoin and DeFi depegs show that even much smaller moves have caused rapid liquidations, because oracle updates and maintenance thresholds can turn a price shock into a liquidation cascade. However, the protocol-specific impact for Level is Not verifiable as of 2026-08-28 because no on-chain or protocol-position data was available in this run to identify the largest collateral asset, its borrow exposure, or liquidation thresholds. The exact losses, bad debt risk, and user liquidation count therefore cannot be quantified from the available sources. What can be said from the broader evidence is that a depeg of this size would stress any system relying on a single dominant collateral, especially if that asset is also used as a reserve or has concentrated borrowing against it. Market research notes that stablecoin confidence depends on maintaining sufficient backing and handling redemption stress, while historical depegs such as USDC/DAI in March 2023 triggered large liquidation waves across DeFi. If you want, I can next provide a qualitative risk assessment framework for Level under a 20% collateral depeg, including the specific inputs needed to turn this into a quantified loss estimate.

Evidence (3)

stress scenario - top counterparty insolvent — each with expected loss path, who absorbs it, compensation, and the impact path through the smart contracts;

two sources

Level on Ethereum issues lvlUSD, backed by USDC/USDT deployed into external lending and restaking strategies (e.g., blue‑chip money markets and restaking protocols). The “top counterparty” here is the largest external yield venue where reserves are deposited, not a centralized custodian. Because I cannot query on‑chain data in this run, exposures, TVL by venue, and exact position sizes are Not verifiable as of 2026‑08‑30. Below is the insolvency path if the largest external lending/restaking counterparty fails. --- ### 1. Immediate loss mechanism

  • Level’s reserve vaults hold USDC/USDT and deposit them into ERC‑4626‑style strategies and lending protocols to generate yield for lvlUSD.
  • If the largest external protocol becomes insolvent (bad debt, oracle failure, smart‑contract exploit), the vault’s claim on that protocol becomes partially/fully worthless.
  • The loss is realized at the vault level as: reduced asset balance, stuck funds, or discounted withdrawal value from that strategy. ### 2. Who absorbs the loss?
  • lvlUSD is intended to be fully collateralized by reserves; there is no native insurance fund or junior tranche documented.
  • When reserves drop below outstanding lvlUSD:
  • lvlUSD holders collectively bear the loss via under‑collateralization; the token may trade below $1, and/or protocol redemptions (if still enabled) will pay less than 1:1.
  • staked lvlUSD (slvlUSD) holders bear the same economic loss, expressed as slower appreciation or even a drop in redemption value of the staking vault.
  • There is no documented automatic haircut on governance/tresury or separate equity tranche; any treasury backstop would be discretionary governance, not a coded guarantee. ### 3. Contract‑level impact path 1) External protocol insolvency → strategy vault cannot withdraw or only withdraws impaired collateral. 2) Level vault accounting updates: totalAssets() falls, but totalSupply(lvlUSD) initially unchanged. 3) Redemptions: users redeem lvlUSD for underlying; they receive pro‑rata share of the remaining good collateral, crystallizing losses for all remaining holders. 4) Staking vault (slvlUSD): share price reflects reduced underlying; future yield is also impaired. 5) If losses are severe, governance may pause minting/withdrawing using pauser/guardian roles identified in audits, further limiting exits and trapping losses in‑system. ### 4. Compensation & legal/regulatory recourse
  • Level emphasizes audited, “blue‑chip” venues, but does not document any formal insurance, guarantee, or priority payout for users beyond smart‑contract rules.
  • Any ex‑gratia compensation (treasury backstop, token airdrop) would be off‑chain, discretionary and not enforceable via contracts. This scenario applies chain‑by‑chain, but for Ethereum only, precise exposure by venue and % in the “top counterparty” are Not verifiable as of 2026‑08‑30.
Evidence (6)

stress scenario - committed fraud by the DAO or owners

two sources

For Level (Ethereum), I found no verifiable evidence in the provided sources that the DAO or its owners committed fraud. The available results do not identify Level-specific misconduct, and the search set is dominated by unrelated DAO fraud/exploit examples and general DAO-risk commentary rather than evidence about this protocol. Because I cannot confirm Level-specific on-chain facts from the provided material, the correct stress-scenario assessment is: fraud by the DAO/owners is not verifiable as of 2026-08-28. What *is* supported by the sources is only the general risk framing: DAOs can be vulnerable to creator control, deceptive proposals, key compromise, and asset misappropriation in other cases, but those examples do not establish that Level itself has engaged in fraud. If you want, I can next assess adjacent stress scenarios for Level, such as admin-key abuse, rug-pull risk, or governance capture—but for the specific question of committed fraud, the evidence provided is insufficient.

Evidence (5)

stress scenario - primary yield source negative 30d,

two sources

For Level on Ethereum, a negative 30-day primary yield would mean the protocol’s primary income over the trailing 30 days did not cover the expenses or other deductions used in the yield calculation, so the reported annualized yield can go below zero. In a stress scenario, that is a red flag for sustainability because it implies users are effectively paying more in costs than the protocol is earning from its primary yield source over that window. For this protocol specifically, the primary yield source and whether its 30-day yield is currently negative are Not verifiable as of 2026-08-28 from the provided web results. The results only define what a negative 30-day SEC-style yield means in general; they do not provide Level’s current on-chain or reported yield composition. So the correct stress-test interpretation is:

  • If Level’s primary yield source turns negative over 30 days, the protocol’s core earning engine is under stress and may require either subsidy, fee reduction, or a change in strategy to restore positive carry.
  • A negative 30-day yield does not automatically mean users lose the same amount in principal; it means the annualized income rate from the primary source is below zero for that period.
  • Without protocol-specific disclosures or verified on-chain data, the magnitude and persistence of the stress cannot be confirmed.
Evidence (5)

Governance & Legal

governance

two sources

Level appears company-/team-controlled rather than DAO-controlled. The best independent evidence found is Level’s audit and contract docs, which describe an Admin Multisig with highest authority (upgrade/pause/unpause, disable minting/redeeming, manage roles/oracles) and an Operator Multisig plus Treasury Multisig for narrower functions; the audit says the admin is a 5/8 timelocked multisig with 4 internal and 4 third-party cold-wallet signers, the operator is 2/5, and the treasury is 3/4. The contract-details doc also lists an Admin Timelock, Admin Multisig, and Operator Multisig, consistent with centralized operational control rather than token-holder governance. I did not find evidence of a live DAO proposal/voting process controlling contracts or funds; on the material gathered, governance looks symbolic or absent as a DAO, with control concentrated in multisigs rather than token voting. Any claim that Level is DAO-governed is Not verifiable as of 2026-08-28 from the sources reviewed. The protocol-level legal entity, jurisdiction, registration number, directors, and terms-of-service were Not verifiable as of 2026-08-28 from the sources reviewed. I also could not verify voting concentration or top holders via on-chain data because on-chain checks were unavailable in this run; those items are Not verifiable as of 2026-08-28.

Evidence (2)

legal & regulatory

unverified

Level’s published Terms of Service state that the protocol/interface is not offered to persons or entities in the United States or Singapore and that users must not be in those restricted jurisdictions; however, the available source does not identify a clear legal entity, jurisdiction of incorporation, or corporate structure for the protocol, so that is Not verifiable as of 2026-08-30. The same Terms of Service say the interface collects only a wallet address, transaction hashes, and token identifiers, and that it does not collect personal information such as a user’s name or other identifiers. On KYC/AML, the available material does not show that Level runs a customer-identification program; instead, the published terms imply a non-custodial interface with limited data collection and jurisdictional restrictions, but an actual KYC/AML policy is Not verifiable as of 2026-08-30. On legal classification, the most supportable statement from the retrieved material is that Level presents itself as a DeFi protocol/interface with access restrictions, but any claim about regulatory status, licensing, or formal classification beyond that would be Not verifiable as of 2026-08-30. No court cases, sanctions actions, or regulator enforcement specific to Level were identified in the retrieved sources, so those items are Not verifiable as of 2026-08-30. Data-protection risk is limited by the stated collection practice, but the Terms of Service are still a legal document with no guarantee of regulatory compliance across all jurisdictions; from a risk perspective, the main concern is the gap between a website-level restriction and the absence of a verifiable, disclosed legal entity or compliance framework.

Evidence (1)

Stability

stability

two sources

Not verifiable as of 2026-08-28. The web results provided do not identify which stablecoin Level uses on Ethereum, so I cannot reliably determine whether *that specific stablecoin* ever depegged, how many times it happened, when the last event was, or the exact depeg percentage. The results only show general stablecoin depeg history for USDT, USDC, DAI, FDUSD, and others, but none are confirmed to be Level’s underlying stablecoin. If you want, I can answer this precisely once you provide the stablecoin symbol/name used by Level.

Evidence (3)

Risks & Strengths

risks

two sources

Level’s top five protocol risks are: collateral insolvency, lending protocol/bad-debt risk, smart contract vulnerability risk, operational security / admin-compromise risk, and precision / accounting risk. Level’s own documentation explicitly lists collateral risk, lending protocol risk, smart contract risk, and operational security risk, while its audit report adds precision-loss and inaccurate accounting concerns in reward and asset calculations.

  • Collateral insolvency: Level accepts only USDC and USDT as collateral, so a depeg, issuer problem, or insolvency in either asset would directly pressure lvlUSD solvency.
  • Lending protocol / bad-debt risk: Level deploys collateral into external lending protocols, and those protocols may suffer bad debt, liquidation failures, or stress events that impair Level’s backing assets.
  • Smart contract vulnerability risk: Level acknowledges that vulnerabilities in deployed contracts could make lvlUSD insolvent, and its audit found multiple issues, including under-collateralization risk after reward calls and other code-level defects.
  • Operational security / admin-compromise risk: Some critical functions are permissioned and controlled via multisig/timelock structures, so compromise of signers, governance roles, or admin processes could affect user funds.
  • Precision / accounting risk: The audit reports potential precision loss, inaccurate total-assets calculations, and inaccurate rewards if underlying assets depeg, which can distort minting, withdrawals, and solvency checks. A broader market risk is that any hidden weakness in the protocols Level depends on can cascade into user losses, since DeFi protocols are exposed to smart-contract, oracle, and systemic shocks.
Evidence (3)

strengths

unverified

Level’s top strengths are: (1) fully backed reserves — lvlUSD is backed by USDC and USDT, which supports peg confidence and transparency; (2) yield generation from blue-chip lending protocols — the protocol routes reserve assets into established lending venues to produce low-risk yield; (3) on-chain transparency — users can verify reserves and the yield source onchain; (4) DeFi composability and integrations — lvlUSD is integrated with protocols such as Morpho, Pendle, Spectra, Curve, and LayerZero, improving utility and capital efficiency; and (5) security posture — Level states it uses audited/open-sourced smart contracts, outside auditors, a bug bounty program, multisig controls, and monitoring/pause mechanisms. These are the clearest strengths supported by the available sources, though they are primarily protocol-claimed rather than independently verified here.

Evidence (4)

Methodology & Limitations

  • On-chain metrics: not verifiable — Dune phase 2 is not enabled.
  • 2 of 24 fact categories not yet collected.
  • Fact verifiability: 14 two independent sources, 3 one source, 12 unverified.
  • Oldest fact verification date: 2026-08-28.