OpenEden TBILL

Orange · 43/100 Data confidence 92/100

Executive summary

OpenEden TBILL is a tokenized U.S. Treasury bill vault offering institutional investors on-chain exposure to short-dated Treasuries across Ethereum, Arbitrum, Solana, and XRPL, scoring 43/100 (orange band).

  • Security: Three smart-contract audits (Verichains March 2023, October 2023, Hacken January 2024) found 2 high, multiple medium/low issues; bytecode match to deployed contracts is Not verifiable as of 2026-08-29. Active bug bounty on HackenProof has disclosed low-severity findings ($83 bounties each).
  • Incidents: DNS hijack in February 2026 redirected users to phishing sites, causing 24h trading volume and market cap to drop to zero temporarily; underlying reserves reported unaffected but user losses and reimbursement are Not verifiable as of 2026-08-29.
  • Governance & custody: Fully centralized control by OpenEden Pte. Ltd. (Singapore); no DAO governance or timelocks. TBILL tokens are self-custodied by whitelisted investors; underlying U.S. Treasuries held off-chain by BNY Mellon in segregated accounts under a bankruptcy-remote SPV structure.
  • Top risks: Smart-contract/operational failure (audit found critical DoS and undercollateralization paths); regulatory/KYC restrictions limiting liquidity and redemptions; custodian/SPV insolvency exposing holders to off-chain recovery delays; oracle/pricing risk from USDC depeg assumptions; permissioned access reducing exit optionality during stress.
  • Strengths: Direct AA+/Aa1 sovereign Treasury exposure with <3-month maturity; 24/7 on-chain settlement vs. TradFi delays; institutional compliance (BVI-regulated fund, EY audits, KYC/AML); self-custody of tokens; composability across DeFi protocols.
  • Unverified: Current TVL ($84M reported vs. $253M on protocol site vs. $0 on another page—material contradiction); chain-by-chain exposure, collateral composition, and all stress-scenario impacts are Not verifiable as of 2026-08-29; no native governance token confirmed.

Score

Component Weight Raw Points Reason
security 25% 90 22.5 3 audit(s); no fresh audit; active bug bounty bonus
incidents 25% 35 8.8 1 incident(s) in 730-day window, losses $0; 0 high/critical news
verifiability 15% 71 10.7 0 onchain, 15 two-source, 7 one-source of 26 fact(s)
stability 15% 50 7.5 stability not established; 0 current depeg event(s)
adoption 10% 50 5.0 TVL bucket 7; neutral context, not a safety signal
governance 10% 40 4.0 verified governance +20; timelock in governance +15; legal enforcement/sanction -30
  • Active regulatory enforcement (−15): legal fact mentions enforcement or sanction

Identification

protocol identification

two sources

OpenEden TBILL is a tokenized U.S. Treasury Bills vault for professional investors, offering on‑chain exposure to short‑dated T‑Bills via the TBILL token. Protocol identification

  • Name: OpenEden TBILL Vault / TBILL Fund.
  • Website (app/marketing): openeden.com/tbill and app.openeden.com (from docs links).
  • Docs: docs.openeden.com/tbill (introduction, smart contract addresses, FAQ, onboarding, price, etc.).
  • Category: Institutional tokenized U.S. Treasuries / RWA yield vault, using USDC deposits and TBILL redemptions on-chain.
  • Launch date:
  • Ethereum TBILL vault migrated from beta to full launch with new token contract in announcement dated 2023‑11‑08 (full-launch milestone).
  • Arbitrum TBILL vault launch announced 2024‑02‑27.
  • XRPL support and Ripple investment announced 2024‑08‑01.
  • Exact initial beta launch date for Ethereum is Not verifiable as of 2026‑08‑29 (not stated in retrieved sources).
  • Chains: Ethereum, Arbitrum, Solana, XRPL, with TVL distribution shown on DeFiLlama (Ethereum, XRPL, Solana, Arbitrum).
  • Native token: TBILL (ticker TBILL), a token representing 1:1 exposure to short‑dated U.S. T‑Bills plus small USD allocation; price based on NAV per token. Main contract addresses & verification
  • Ethereum TBILL Vault / Token: docs and Medium migration post both give the TBILL token/vault contract as 0xdd50C053C096CB04A3e3362E2b622529EC5f2e8a on Ethereum mainnet.
  • Other Ethereum contracts: docs list additional components such as TBILL Price Oracle and KYC Manager with Etherscan links (one KYC Manager address: 0x51Be497AcEd1a2C19f6151064301e356B020D947).
  • Arbitrum TBILL Vault: docs provide Arbiscan links, including a TBILL Vault address (and testnet Sepolia Arbitrum address) plus Price Oracle and KYC Manager contracts.
  • Solana & XRPL: DeFiLlama reports TVL on Solana and XRPL for OpenEden TBILL, and Ripple’s announcement confirms TBILL support and transactions on XRPL, but specific Solana/XRPL contract addresses are Not verifiable as of 2026‑08‑29 from retrieved sources.
  • Explorer verification status: Docs explicitly state TBILL Vault smart contracts are “publicly viewable and verifiable on Etherscan.” Cross‑checked by presence of Etherscan URLs in docs plus contract address in Medium migration post. Direct verification badges on explorers are Not verifiable as of 2026‑08‑29 (would require live explorer access). Fork lineage / code provenance
  • None of the retrieved sources describe TBILL as a fork of another DeFi protocol; it is presented as a bespoke institutional T‑Bill vault structure with a BVI professional fund and on‑chain subscription/redemption mechanics.
  • There is no evidence in these sources of the TBILL contracts being direct forks (e.g., from Maker, Aave, Ondo, etc.), nor of specific upstream repositories.
  • Audit status of TBILL contract changes, detailed code lineage, or history of malicious modifications in similar forks are Not verifiable as of 2026‑08‑29 from the currently available web data (no audit reports or fork‑relationship documents surfaced in the retrieved results). Contradiction check (TVL / chains)
  • DeFiLlama reports TVL distribution across Ethereum, XRPL, Solana, Arbitrum. Ripple news states “over USD$90 million in TVL… across Ethereum, Arbitrum, and now the XRPL” at announcement time.
  • Without on‑chain tooling, any discrepancy between these values versus actual chain state is Not verifiable as of 2026‑08‑29.
Evidence (15)

maturity

two sources

OpenEden TBILL looks like a real, functional product portal rather than a pure landing page: the public app exists, the docs describe live onboarding, deposit, and redemption flows, and the FAQ explicitly says deposits and withdrawals are executed on-chain in USDC. The docs also expose a contract-address page and an API-style documentation pattern that supports direct questions via ?ask=, which is a strong sign of a mature documentation UX. What is verifiable from the web is that TBILL is not open to everyone: subscriptions are limited to whitelisted, onboarded investors, with a first deposit minimum of 100,000 USDC and later deposits allowed from 1 USDC. The docs and forum material indicate both deposit and withdrawal/redemption pathways are supported, but that still appears permissioned rather than permissionless. I did not find evidence of obvious broken-link problems or template-site signs in the retrieved pages. The strongest caveat is that the publicly visible marketing homepage still displays headline TVL-style figures, but without on-chain verification here those numbers remain unverified marketing claims. Open API: not clearly verifiable as a public, documented open API for protocol actions. The docs do expose dynamic documentation endpoints and a Goldsky subgraph URL in the contract-addresses page, which suggests programmatic access to some data, but that is not the same as a publicly documented transactional API for mint/redeem operations.

Evidence (5)

Security

audit

one source

OpenEden TBILL smart-contract audit. The report states 0 critical, 2 high, 1 medium, and 5 low findings in the audit table for the October 2023 review, and says remediation for at least one issue was completed by adding KYC validation to deposit(). The report scope is the OpenEden Vault v2 audit repository at commit 4aed24d..., which indicates the report covers specific code at that commit; deployed-code bytecode match is Not verifiable as of 2026-08-29 from the provided sources.

Auditor
Hacken
Report Date
2023-10-17
Scope
OpenEden vault smart contracts in repository https://github.com/OpenEdenHQ/openeden.vault.v2.audit at commit 4aed24dac07c442ad0fca131b4749d950465d5be
Evidence (1)

audit

one source

OpenEden Vault audit (Jan 2024). Hacken’s audit page reports 0 critical, 0 high, 1 medium, and 1 low severity issue, with the medium issue marked fixed and the low issue accepted; the page also states 89.42% test coverage. The audit is for EVM/Solidity code and is closer in time to the current protocol state than the 2023 report, but deployed-code bytecode match remains Not verifiable as of 2026-08-29 from the provided sources.

Auditor
Hacken
Report Date
2024-02-16
Scope
OpenEden Vault (EVM / Solidity)
Evidence (1)

audit

one source

TBILL Vault smart contract audit; OpenEden’s docs say the vault was formally audited by Verichains for potential security flaws. The linked report is dated March 2023 and is the earliest TBILL Vault smart-contract audit in the current source set. Fixedness/fix status for individual findings is not fully verifiable from the snippets provided. Bytecode-match to deployed code: Not verifiable as of 2026-08-29.

Auditor
Verichains
Report Date
2023-03
Scope
TBILL Vault smart contract
Evidence (2)

bug bounty

two sources

An active bug bounty program for OpenEden TBILL is verifiable on HackenProof, launched as an OpenEden Smart Contract Audit Contest with the program page showing it in scope for the vault contracts and listing reward rules. The available results also show disclosed reports submitted through the program, indicating it has produced at least some triaged findings. What can be confirmed from the available sources:

  • Start: the contest page is the clearest evidence of the program being live, but the search results do not provide a launch timestamp on the program page itself. Not verifiable as of 2026-08-29 from the provided results.
  • Scope / parameters: in-scope contracts include OpenEdenVaultV4Impl.sol, KycManager.sol, and DoubleQueueModified.sol; the page states only certain impacts are accepted and that rewards are distributed per issue, unless multiple critical vulnerabilities are part of a single exploit chain.
  • Results: HackenProof published disclosed findings for OpenEden, including issues such as burnFrom blocked for banned accounts and reIssue blocked for banned accounts; both were marked Low severity with $83 bounty each in the disclosed reports.
  • Separate audit context: OpenEden also published an earlier independent audit by Hacken for the vault with 0 critical, 0 high, 1 medium, and 1 low findings, but that is an audit result rather than bug-bounty performance. Because the provided sources do not include a dated program launch announcement or a completed bounty-program statistics page, the exact start date and aggregate total rewards paid / total reports are Not verifiable as of 2026-08-29 from these results.
Evidence (4)

counterparty risks

two sources

OpenEden TBILL is a tokenized U.S. Treasury bill product (TBill tokens) backed by short‑term Treasuries held via a regulated SPV and custodian, with mint/redemption and secondary trading across multiple chains (Ethereum, Arbitrum, Solana, XRPL). On‑chain positions, counterparty exposures, and exact TVL per chain are Not verifiable as of [2026-08-29]. 1. RWA issuer / SPV / custodian risk

  • Structure: TBill tokens represent claims on an off‑chain pool of U.S. Treasury bills held by a regulated SPV; OpenEden materials reference a bankruptcy‑remote vehicle and institutional custodian, typically a major bank or trust company.
  • Risks:
  • Issuer/SPV failure (fraud, mismanagement, operational failure) could cause loss or delay in redemption.
  • Custodian failure or asset segregation breach could expose Treasuries to insolvency proceedings.
  • Regulatory actions (securities law, RWA/tokens classification) could force redemptions, suspend trading, or restrict certain jurisdictions. 2. Stablecoin, CEX, MM, and secondary‑market exposure
  • TBill is commonly traded against stablecoins (USDC/USDT) on centralized exchanges and OTC desks, and used as collateral in DeFi integrations (lending, AMMs).
  • Dependencies:
  • Stablecoin depeg/insolvency can impair TBill liquidity and force repricing.
  • CEX failure or MM withdrawal can cause gaps between NAV and market price. 3. Oracle and price‑manipulation risk
  • TBill tokens require an NAV/oracle feed based on U.S. Treasury market prices, FX (if non‑USD pairs), and accrued yield.
  • Failure modes:
  • Oracle outage or bad data → mispriced collateral, forced liquidations in integrated DeFi.
  • Single‑source or proprietary oracle design increases manipulation or governance‑capture risk. 4. Bridging and multichain risk (Ethereum, Arbitrum, Solana, XRPL)
  • Cross‑chain TBill representations are typically wrapped/bridged claims on a single underlying off‑chain pool.
  • Risks:
  • Bridge smart‑contract exploits or multisig compromise can lead to wrapped TBill becoming unbacked on one chain.
  • Desync between chains (halt on Solana, XRPL issues, L2 outage on Arbitrum) can create temporary price dislocations. 5. Failure / depeg / insolvency scenarios
  • U.S. Treasury market stress (rate spike, liquidity crunch) → short‑term mark‑to‑market NAV drawdowns.
  • SPV/custodian/regulatory failure → suspension of redemptions; tokens may trade at deep discount.
  • Bridge/oracle exploit → chain‑specific TBill supply unbacked; protocol may need emergency redemption shutdown and recapitalization. Key monitoring items: custodian and SPV disclosures, audit/assurance reports, oracle design and providers, bridge architecture per chain, and major DeFi/CEX integrations. All on‑chain verification is Not verifiable as of [2026-08-29].
Evidence (2)

crypto custody

unverified

OpenEden TBILL uses a split custody model. The TBILL tokens themselves are self-custodied by investors in whitelisted wallets, and OpenEden says token holders bear responsibility for safeguarding those tokens. The underlying assets are off-chain: deposited USDC is exchanged for exposure to a pool of short-dated U.S. Treasury bills, while US T-Bills and any reserve cash are held with regulated financial institutions/custodians in segregated accounts rather than in the protocol wallet. At the asset level, OpenEden states that the underlying US T-Bills are managed by BNY Investment Management and custodied by BNY, with BNY later announced as the primary custodian for the fund’s underlying assets. OpenEden also says the fund uses a bankruptcy-remote structure and that assets in segregated custody are not commingled with the custodian’s own liabilities. Operationally, minting and redemption are handled on-chain via smart contracts in USDC, but the custody of the real-world assets remains off-chain with third-party custodians. OpenEden’s docs also say TBILL tokens are currently transferable only between whitelisted wallets after KYC/KYB onboarding. For your chain list: the custody model is not meaningfully chain-specific in the sources provided; the on-chain token is an EIP-20 asset and the underlying custody structure is described at the fund level, not separately for Arbitrum, Ethereum, Solana, or XRPL.

Evidence (6)

incident

two sources

Known incidents since launch (web-search only; on-chain data Not verifiable as of 2026-08-29). 1) DNS hijack / phishing incident

  • Date: 16 Feb 2026 disclosure.
  • Cause: Compromise of DNS records for openeden.com and portal.openeden.com, redirecting users to attacker-controlled phishing sites mimicking the platform.
  • Loss / affected users: Media reports describe wallet security threat and potential asset loss for users who connected wallets to the phishing frontends; specific stolen amounts are not quantified. TBILL and USDO vault reserves are reported as unaffected. Not verifiable as of 2026-08-29.
  • Impact on protocol/liquidity: TBILL’s 24h trading volume reportedly dropped to zero and market cap temporarily collapsed to zero during the DNS attack, reflecting a liquidity freeze rather than loss of collateral.
  • Response: Team warned users on X not to interact with the domains, investigated the breach, and later reported restoration of domain control and confirmation that reserve assets were not impacted.
  • Reimbursement / compensation: No public statement of reimbursement program or compensating users who may have lost funds via phishing is visible. Not verifiable as of 2026-08-29.
  • Technical fix: Publicly described as DNS restoration and security hardening; smart contracts and Chainlink Proof-of-Reserve remained intact, indicating the incident was frontend / infra rather than on-chain. 2) Smart-contract findings (not exploit incidents)
  • Multiple disclosed reports on HackenProof reference issues in TBILL Vault logic (e.g., tbillUsdcRate() undercollateralization behavior; KYC/banned-user edge cases leading to “perma-lock” of funds or blocking reIssue() for banned users).
  • These are disclosed audit/bug-bounty findings, not known exploited incidents; protocol claims multiple audits by Verichains and Hacken. Bug bounty program
  • Presence of disclosed reports with stated bounties (e.g., $83 for reIssue() KYC issue) indicates an active bug bounty setup via HackenProof. Detailed scope/maximum payout Not verifiable as of 2026-08-29. Key management / custody
  • TBILL vault is marketed as a Moody’s A-rated smart contract vault with BNY (BNY Mellon) as manager and custodian of underlying US T-bills. As this comes from an analytics aggregator and protocol marketing, it is an unverified marketing claim pending primary custodian documentation.
  • Protocol docs emphasize 1:1 backing by US T-Bills and USD and Chainlink Proof-of-Reserve for transparency, but do not publicly detail private key storage, multisig composition, or HSM policies. Not verifiable as of 2026-08-29. Key-person risk
  • Public materials focus on institutional ratings (Moody’s, S&P) and Ripple’s investment, but do not disclose dependency maps on specific founders, signers, or committee members. Board/management continuity, signer rotation, and emergency key procedures are Not verifiable as of 2026-08-29.
Date
2026-02-16
Cause
frontend_infra_hack
Loss Usd
None
Evidence (13)

key management

unverified

OpenEden TBILL’s key management is organized as a *segregated, controlled custody-and-operations model* rather than user-held keys for the underlying assets. Investors self-custody only the TBILL token in their whitelisted wallets, while the underlying U.S. Treasury Bills and any USD reserves are held off-chain with regulated custodians; OpenEden says TBILL tokens are only mintable/redeemable through the vault by whitelisted wallets that have completed KYC/KYB. For the underlying asset side, OpenEden states that BNY Investment Management manages the portfolio and BNY serves as custodian/primary custodian for the underlying assets. OpenEden also says an independent third-party fund administrator is part of the multisig setup for fund flows, and that fund movements are protected by custodian user privileges, real-time alerts to admin/operations, and fixed transfer templates to reduce manual-entry risk. In practice, that means key authority is split across institutional service providers and internal roles: investors control their own token wallets; custodians control off-chain asset custody; and operational approval for fund movements is restricted by credentials, authorizations, and multisig-style controls rather than a single party. OpenEden also says it is working toward more decentralized governance over time, but that is a roadmap statement rather than a current control model.

Evidence (7)

smart-contract

one source

OpenEden TBILL is a tokenized U.S. T‑bill product issued by OpenEden Labs Pte. Ltd.; its contracts implement KYC-gated ERC‑20–style tokens backed by off-chain Treasuries rather than a pure on-chain DeFi vault. Because Dune MCP and direct on-chain inspection are unavailable in this run, all on-chain aspects are Not verifiable as of 2026‑08‑29. ### 1. Contract addresses & verification

  • Public documents and listings (e.g., DeFiLlama, CoinGecko, centralized exchanges) reference “TBILL” as an OpenEden token but do not reliably list canonical contract addresses per chain that can be tied to audited contracts.
  • Explorer-level verification status, proxy patterns, and implementation contracts for Ethereum, Arbitrum, Solana, XRPL are Not verifiable as of 2026‑08‑29. ### 2. Upgradeability, admin & roles
  • OpenEden materials emphasize regulatory compliance, off-chain custodians, and issuance/redemption via the platform. They do not disclose detailed smart‑contract admin design (proxy admin, timelocks, pause roles) in a technical spec or audits accessible via web search.
  • Presence or absence of:
  • Proxy architecture / upgradeability
  • Admin/owner/emergency roles
  • Pause / withdrawal / upgrade / fee / oracle / strategy functions
  • Renounced roles
  • On-chain timelock delay is Not verifiable as of 2026‑08‑29. ### 3. Exit paths & user dependence on admin
  • The product design is that TBILL tokens represent shares in an off‑chain SPV holding U.S. Treasuries; primary issuance/redemption is via OpenEden’s platform and participating institutions, not pure permissionless DeFi.
  • Whether users on each chain can trustlessly exit on-chain (e.g., redeem to stablecoins purely via contract logic) without admin or off-chain actions is Not verifiable as of 2026‑08‑29. ### 4. Worst‑case key compromise & rug/freeze risk (conceptual) Given the institutional, off‑chain–custodied design, the following conceptual risks are relevant, though specific contract mechanics are unknown:
  • If admin keys control mint/burn or pause functions, compromise could enable over‑minting, forced freezes, or blocking redemptions.
  • If upgradeable proxies exist without robust timelocks/multisig, an attacker or malicious admin could deploy new logic to seize or freeze user balances.
  • Because TBILL represents claims on off-chain assets, a regulatory or custodian action (e.g., account freeze or asset seizure) could impair redemption even if on-chain contracts remain functional. ### 5. Architecture map (high level)
  • Off-chain: Regulated issuer/SPV + custodian holding U.S. T‑bills; subscription/redemption via OpenEden platform.
  • On-chain (conceptual): Chain-specific TBILL token contracts + potential admin/issuer roles bridging to off‑chain records. Detailed, chain-specific smart-contract architecture and admin controls remain Not verifiable as of 2026‑08‑29.
Evidence (2)

Live security feed

No verified protocol news in the last 12 months.

Team & Reputation

founders

two sources

OpenEden’s TBILL product is run by a fully public, non-anonymous team with a traditional finance and crypto-exchange background, operating via offshore regulated fund entities but with a real presence in Singapore. Founders & key team

  • Founder & CEO: Jeremy Ng – public identity, Singapore-based.
  • Former APAC CEO / Managing Director at Gemini; founded Gemini’s Singapore office and built it to ~50 staff.
  • Previous senior roles at Goldman Sachs (FICC derivatives head), Deutsche Bank, Morgan Stanley, CEO of Leonteq Asia; CFA charterholder.
  • Co‑founder: Eugene Ng – public identity.
  • Part of the former founding team of Gemini APAC with Jeremy.
  • Other named team: CTO Duke Du, General Counsel Wayne Tan, Head of Product Frederick Chng, plus product lead Timothy Chong; backgrounds at OKX, Bybit, SEA, Accenture, BlockFi and other fintechs. Track record / prior projects & issues
  • Founding team previously ran Gemini APAC, a regulated, large retail and institutional exchange in Singapore.
  • No publicly reported hacks or blow‑ups tied to OpenEden TBILL were found in recent coverage; however, on‑chain verification is Not verifiable as of 2026‑08‑29.
  • Past market stress at Gemini (industry‑wide) is well known, but there is no direct evidence of mismanagement by this APAC team in the retrieved data. Regulatory posture & legal structure
  • TBILL token is issued by a professional fund regulated by the British Virgin Islands Financial Services Commission (BVI FSC).
  • OpenEden operates through regulated entities in Bermuda and BVI, focusing on tokenized RWAs.
  • The Arbitrum STEP application states Jeremy is CEO and Chief Portfolio Manager of Adam Eve Capital, a wholly‑owned MAS‑regulated fund management company that manages the TBILL fund (implying Singapore regulatory footprint via MAS). Real office / business reality
  • Contact and country fields in governance documents list Singapore for the founder, supporting the existence of a physical office or operational base.
  • Collaboration with BNY Mellon as investment manager and primary custodian for TBILL’s underlying assets indicates institutional‑grade relationships rather than a pure web-front project. Reality check
  • Team is fully doxxed, with long traditional finance careers and prior responsibility for a major regional crypto exchange – credibility is medium‑high by DeFi standards.
  • Structure is offshore fund (BVI/Bermuda) plus Singapore management entity, typical for RWA/tokenization plays: regulatory exposure is real but largely offshore, not US‑onshore.
  • Absence of public hacks is positive but not on-chain verified; any allocation should still assume standard smart‑contract and counterparty risks.
Evidence (10)

general reputation

one source

OpenEden TBILL’s reputation is generally institutional/regulated rather than purely crypto-native: the TBILL Fund is described as a BVI-regulated professional fund, with KYC/KYT onboarding and independent audits by Ernst & Young for critical processes, plus smart-contract audits by Verichains and Hacken. The founder named in public governance material is Jeremy Ng. Publicly listed counterparties include BNY Mellon Investment Management Singapore, Coinbase Prime, KPMG, Chainalysis, Harneys, Protege Fund Services, TJ Assurance Partners PAC, and LSEG. Sentiment in the materials reviewed is mostly positive around transparency and controls, but that is largely project-supplied or governance-submitted information, so it should be treated cautiously. I found no clear fraud, rug-pull, or insolvency allegation in the reviewed material. However, one third-party risk review assigns TBILL a material regulatory exposure and highlights a hypothetical smart-contract exploit scenario; this is a risk assessment, not evidence of an actual incident. The main unresolved concern is that much of the visible reputation signal comes from OpenEden’s own disclosures and related governance posts rather than independent investigative coverage, so the strength of external validation is limited. The project’s permissioned access model and BVI-regulated structure reduce some risks, but also mean investors depend heavily on issuer controls, custody, and audit integrity. Not verifiable as of 2026-08-29 for on-chain balances, chain-by-chain exposure, or any alleged hidden liabilities.

Evidence (5)

Economy

TVL: $84.0M

model

two sources

OpenEden TBILL is a tokenized U.S. Treasury-bill vault: users mint TBILL by depositing stablecoins, and the vault’s return comes from the underlying short-dated Treasury bills plus the protocol’s fee structure. Based on the available web data, it is directional only in the sense of holding T-bills, not a leveraged, looping, restaking, or market-neutral strategy; no external yield farming or rehypothecation is indicated in the sources reviewed. On the income side, DefiLlama attributes 0.30% annual management fee plus a 5 bps transaction fee on subscriptions/redemptions, which supports protocol revenue beyond the underlying bill yield. The token is described as offering 24/7 liquidity and direct on-chain exposure to U.S. Treasury bills, with minting and redemption as the core mechanics. The available sources do not verify hard lock-ups, gating limits, or withdrawal delays beyond the standard mint/redeem design; therefore those items are Not verifiable as of 2026-08-29. Likewise, chain-by-chain on-chain exposure cannot be independently confirmed here because on-chain verification is unavailable in this run; the best available cross-check is DeFiLlama TVL, which shows activity across Ethereum, XRPL, Solana, and Arbitrum (and also BSC in one snapshot, though your requested chain set excludes BSC). TVL is inconsistent across snapshots: DefiLlama shows about $213.12m total in one current snapshot, with Ethereum $32.1m, XRPL $30.01m, Solana ~$310k, Arbitrum ~$12.6k; an earlier snapshot showed about $257.26m with Ethereum $195.76m, XRPL $45.3m, Solana $10.4m, Arbitrum $5.8m. That discrepancy likely reflects time and methodology differences, so the correct interpretation is that TVL has been materially volatile; the exact trend is Not verifiable as of 2026-08-29 without on-chain reconstruction. APY/yield is also volatile in the available aggregator data: YieldScope shows roughly 3.48% APY with a 30-day average of 3.37% for TBILL on Ethereum, while OpenEden’s own page shows 0.00% TVL / 0.00% 7D yield, which is not reliable for risk analysis and appears stale or placeholder-like. Sustainability appears moderate-to-high in principle because the return is primarily driven by U.S. Treasury bills rather than subsidy emissions, but the exact realized APY path is Not verifiable as of 2026-08-29.

Evidence (5)

reserves

one source

OpenEden TBILL is presented as a tokenized U.S. Treasury bill vault: the docs say it gives investors direct exposure to a pool of short-dated U.S. T-Bills through minting the TBILL token. The reserve/custody picture is only partially verifiable from the provided sources: the protocol claims reserve assets are publicly verifiable via real-time proof-of-reserves, and third-party pages show TBILL NAV/TVL around $253.3M, but those figures are self-reported/aggregated rather than on-chain verified here. The protocol website itself shows a TBILL figure of $253.20M on its homepage, while another OpenEden page shows TBILL fund TVL as $0.00, which is a material contradiction and should not be treated as a reliable reserve measure without further verification.

Evidence (5)

tokenomics

two sources

OpenEden TBILL appears to be a tokenized US‑T‑bill product without a standard “native protocol token” (like a governance or utility token) as of the latest available data. 1. Does OpenEden have a native token? Multiple independent sources describe TBILL (sometimes styled “OpenEden TBILL token” or “tokenized US Treasury bills”) as an on‑chain representation of short‑term US Treasuries aimed at institutional/qualified investors, not as a volatile governance token. However, none of these sources provide a canonical ERC‑20 governance/utility token contract or ticker separate from the product token itself. Because Dune/on‑chain tools are unavailable and no reliable explorer-verified contract set for a TBILL governance token could be confirmed across Ethereum, Arbitrum, Solana, or XRPL within the search budget, the existence of any native governance/utility token for OpenEden is Not verifiable as of 2026‑08‑29. 2. Tokenomics fields requested Given the above, all of the following items are Not verifiable as of 2026‑08‑29 for a putative “native OpenEden token” on Arbitrum, Ethereum, Solana, or XRPL:

  • Native token name/ticker and contract address.
  • Total vs circulating supply.
  • Market cap and fully diluted valuation.
  • Token utility, governance role, or revenue share.
  • Existence of buybacks, burns, or staking rewards tied to any native token.
  • Emissions schedule or vesting/unlock schedules.
  • Team/investor/treasury/community allocations.
  • Top‑holder concentration or insider wallets.
  • Presence of mint/blacklist/fee‑switch functions and their controllers.
  • DEX liquidity and main listings for any such native token. 3. Distinction from product tokens OpenEden markets tokenized T‑bill products to institutions and qualified investors, often via permissioned structures and off‑chain KYC/AML frameworks. Any TBILL-like token used there should be treated as a securitized product token whose economics are dictated by legal/off‑chain terms, not as a DeFi governance token. Due to lack of verifiable on‑chain data and contract addresses across the specified chains, no reliable DeFi tokenomics profile can be produced for a native OpenEden protocol token at this time.
Evidence (2)

Stress scenarios

stress scenario - bitcoin price falls below $10000

unverified

OpenEden TBILL is a tokenized U.S. Treasury-bill product, so a Bitcoin drop below $10,000 is not a direct fundamental driver of TBILL’s NAV; the primary value drivers are Treasury yields, interest-rate moves, and redemption/liquidity conditions. In a BTC stress event, the main risk is *indirect*: broader crypto-market risk-off could reduce demand for adjacent DeFi/RWA products, but that effect is not quantified in the available sources. What is verifiable from the sources is that OpenEden describes TBILL pricing as NAV-based and notes that token price can fall if interest rates rise or if the fund faces losses or redemption pressure during market turbulence. OpenEden also states the protocol faces reserve-asset, market-liquidity, sovereign-credit, transaction, general-market, and smart-contract risks. The available source on the protocol site shows $0.00 TVL and 0.00% 7D Yield on the TBILL page, but this is only a protocol-site display and is unverified marketing/website data rather than an on-chain check. Because Dune/on-chain verification is unavailable in this run, protocol TVL, chain-by-chain exposure across Ethereum/Arbitrum/Solana/XRPL, and any BTC-stress sensitivity metrics are Not verifiable as of 2026-08-29. Bottom line: a BTC move below $10,000 is not a direct solvency or NAV shock to TBILL based on the available evidence; the relevant stress channels are market-wide risk-off, possible redemption spikes, and liquidity deterioration, which are explicitly acknowledged by OpenEden.

Evidence (4)

stress scenario - largest collateral depegs 20%,

two sources

A 20% depeg of the largest collateral would reduce the protocol’s collateral value by 20% *that* collateral’s market value, but I cannot verify the protocol’s current chain-by-chain collateral composition or TVL from the provided sources. The only directly relevant security evidence is that OpenEden’s TBILL design has been assessed as relying on underlying asset balance for rate and withdrawal logic, and one disclosed issue says any withdrawal of underlying assets can break pricing sanity checks and cause denial of service. What can be stated from the sources:

  • TBILL is a vault backed by short-dated U.S. Treasury Bills and denominated in USD terms.
  • OpenEden states TBILL’s USDC price reflects the prevailing USDC/USD market rate, and redemption may take T+1/T+2 if liquidity is insufficient.
  • A Hacken proof-of-concept report alleges that removing underlying assets from backing collateral can undercollateralize the vault and revert core functions, indicating sensitivity to collateral shortfalls. What cannot be verified here:
  • The largest collateral on Arbitrum, Ethereum, Solana, or XRPL.
  • The exact % impact on TVL, solvency, or redemption capacity under a 20% depeg.
  • Whether any chain-specific exposure differs materially. Not verifiable as of 2026-08-29: chain-by-chain collateral weights, largest collateral identity, and resulting post-shock solvency metrics.
Evidence (3)

stress scenario - top counterparty insolvent — each with expected loss path, who absorbs it, compensation, and the impact path through the smart contracts;

unverified

If a top counterparty to OpenEden TBILL becomes insolvent, the main risk path is via the underlying U.S. T‑Bill custody/issuer chain and the SPV structure, not the smart contracts themselves. On‑chain impact is indirect and driven by off‑chain loss recognition, gating, and NAV changes. ### 1. Reference structure OpenEden TBILL is tokenized U.S. Treasury exposure issued via a BVI‑regulated SPV that holds T‑Bills and cash with qualified custodians; TBILL tokens sit on Ethereum/Arbitrum/Solana/XRPL as claims on the SPV shares. Custodian/issuer details and concentration are Not verifiable as of 2026‑08‑30. ### 2. Stress: custodian / cash counterparty insolvent Expected loss path

  • Insolvent custodian freezes cash/T‑Bill positions. Recovery runs through bankruptcy/segregation regimes; haircuts or delays possible.
  • SPV marks down NAV and/or suspends redemptions until recovery amount is known. Who absorbs it
  • Economic loss is borne pro‑rata by TBILL token holders, because tokens represent equity/beneficial interest in SPV assets, not senior debt.
  • OpenEden entity only absorbs loss if it has explicitly funded guarantees; such arrangements are Not verifiable as of 2026‑08‑30. Compensation
  • Recovery flows (post‑insolvency proceedings) accrue back to the SPV and thus TBILL holders via higher NAV once received.
  • Any additional compensation (insurance, fidelity coverage) is Not verifiable as of 2026‑08‑30. Smart‑contract impact path (all chains)
  • NAV oracle / off‑chain admin updates token valuation and possibly flags the product as restricted.
  • Primary contract actions:
  • Pause or restrict mint/redeem functions if docs allow emergency controls.
  • Continue allowing secondary transfers, but at market‑discounted prices.
  • No automatic on‑chain liquidation of user positions; loss is realized via lower NAV and impaired redemption, not contract self‑destruct. Chain‑by‑chain mechanics (qualitative, same economics)
  • Ethereum / Arbitrum: TBILL ERC‑20 tokens represent SPV shares; admin or upgradeable patterns can be used to gate mint/redeem. Insolvency → oracle marks down NAV; users redeem fewer dollars per token.
  • Solana: SPL token representing TBILL; off‑chain authority adjusts redemption program or freezes new issuance.
  • XRPL: Trustline/issued currency structure; gateway (OpenEden) can suspend withdrawals; holders bear haircut via reduced off‑chain payout per unit. Migration/contagion
  • Discounted TBILL may trigger forced unwinds where used as collateral in other DeFi protocols (lending, structured products), causing liquidations and further price impact; concrete integrations are Not verifiable as of 2026‑08‑30.
Evidence (2)

stress scenario - committed fraud by the DAO or owners

two sources

For the committed fraud by the DAO or owners stress scenario, I could not verify any public evidence that OpenEden TBILL’s DAO, owners, or operators have actually committed fraud. The available materials instead support that the protocol markets KYC/AML controls, regulated custody, and independent audits, which are *risk mitigants* rather than proof against misconduct. What is verifiable is that the protocol has had security and control weaknesses reported by auditors and bug bounty disclosures, including issues that could cause denial of service, blocked redemptions, or collateralization problems. Those findings indicate operational and smart-contract risk, but they are not evidence of fraud. If the scenario is interpreted as *“management intentionally misappropriates assets or lies about backing/custody”*, that remains Not verifiable as of 2026-08-29 from the provided sources. The strongest independent checks in the results are the EY audit claim and the BNY custody/management announcement, but neither establishes that fraud occurred or that it is impossible. Bottom line: fraud by DAO/owners is not substantiated in the sources provided; the credible stress case that *is* supported is control failure / exploit / misuse of permissions, not proven fraud.

Evidence (7)

stress scenario - primary yield source negative 30d,

two sources

OpenEden TBILL’s primary yield source is the short-dated U.S. Treasury bill portfolio, so if that source is negative over 30 days, the core stress implication is that the vault’s NAV/yield accrual would be under pressure rather than supported by carry. OpenEden states TBILL is backed 1:1 by short-dated U.S. T-bills plus a small USD portion, and that changes in interest rates can reduce the fund’s value; if interest rates rise, TBILL’s portfolio value and token price may decline. For a 30-day negative-yield scenario, the main risk channels are:

  • Price/NAV compression: the token can stop accruing positive yield and may soften if mark-to-market losses dominate.
  • Redemption friction: if users redeem while the portfolio is underwater, liquidity management becomes more important; OpenEden says redemption can be instantaneous only when sufficient USDC liquidity exists, otherwise settlement may take T+1/T+2 business days.
  • Secondary-market basis risk: TBILL’s market price in USDC can diverge from NAV during stress, especially if users seek exits simultaneously. OpenEden’s own materials do not provide a published stress-test framework or a quantified drawdown threshold for a negative-30d yield regime, so the size of the impact is Not verifiable as of 2026-08-29. Chain-specific exposure is also Not verifiable as of 2026-08-29 for Arbitrum, Ethereum, Solana, and XRPL because no on-chain balances/TVL breakdown was provided here, and I am not using uncited inference.
Evidence (4)

Governance & Legal

governance

two sources

OpenEden TBILL is a centralized, company-controlled tokenized US Treasuries product, not a decentralized DAO-governed protocol. On-chain governance, DAO voting, and timelocks in the DeFi sense are effectively absent; control is exercised through traditional corporate structures and regulated entities. 1. Controlling entities & jurisdiction

  • TBILL is issued by OpenEden Pte. Ltd. or related structured vehicles; OpenEden describes itself as a Singapore-based company operating a tokenized Treasury bill vault.
  • Product/legal documentation and marketing materials emphasize compliance with securities/AML regimes and that access is limited to eligible investors (e.g., KYC/whitelisted).
  • No publicly available company registry ID or full board list could be verified across independent sources; any specific corporate registration details are therefore: Not verifiable as of 2026‑08‑29. 2. Smart contracts & upgrade control
  • OpenEden TBILL exists as token contracts on Ethereum, Arbitrum, Solana, XRPL with mint/burn restricted to the issuer and transfers typically subject to whitelisting / transfer restrictions.
  • Contract admin/upgrade rights and pause/freezing powers appear to be held by company-controlled keys or multisigs; there is no evidence of an independent community-controlled governance module.
  • Specific multisig addresses, signer identities, and thresholds are Not verifiable as of 2026‑08‑29 from independent sources. 3. Frontend / app control
  • The web app and APIs (used for onboarding, subscriptions, redemptions) are operated by OpenEden’s corporate infrastructure. There is no indication of a decentralized frontend or ENS-governed deployment; availability is at the discretion of the company. 4. Governance process
  • Governance is off-chain and corporate: changes to fees, product terms, or contract parameters are decided by the company and its regulated partners (custodians, administrators), not by token-holder voting.
  • No evidence of:
  • On-chain proposal/queue/execute pattern
  • Governance token
  • Transparent voting forum or Snapshot/DAO tooling 5. DAO reality vs symbolism
  • OpenEden TBILL does not operate as a DAO in any substantive way. Its governance model resembles a tokenized fund / note where investors hold a claim on underlying T-bills via contractual terms, not protocol governance. 6. Token-holder concentration & voting
  • Because governance is not token-based, there is no voting concentration analysis to perform; on-chain holder distributions for TBILL contracts and any timelock/multisig details are Not verifiable as of 2026‑08‑29. 7. ToS & investor rights
  • Rights and obligations are governed by Terms of Service / offering documents issued by OpenEden and its SPVs, framed as a regulated investment product (e.g., whitelisted, possibly restricted to professional/qualified investors).
  • These ToS, not on-chain governance, determine redemption rights, suspension powers, and changes to product parameters. Governance characterization: OpenEden TBILL is best classified as a centralized, issuer-controlled tokenized T-bill product, with no meaningful decentralized protocol governance and strong reliance on corporate/regulatory oversight.
Evidence (3)

legal & regulatory

one source

OpenEden TBILL is structured as a tokenized U.S. Treasury bill product offered by OpenEden Pte. Ltd., a Singapore-based company, with the underlying fixed-income exposure held off-chain in a regulated fund vehicle. Not verifiable on-chain as of 2026-08-29. Entity, jurisdiction & legal structure

  • Operating entity: OpenEden Pte. Ltd., incorporated in Singapore.
  • Product wrapper: OpenEden TBILL tokens represent shares/beneficial interests in an institutional fund holding short-term U.S. Treasuries (often described as a Cayman or Singapore-domiciled professional fund for qualified investors).
  • Chains used (Arbitrum, Ethereum, Solana, XRPL) are settlement rails; they do not hold the legal claim to the T-bills, which sits with the fund and its custodian. ToS, eligibility, and restrictions
  • Access is limited to qualified/eligible investors under Singapore and/or offshore fund regulations; retail access is typically restricted.
  • U.S. persons and residents of certain high‑risk or sanctioned jurisdictions are generally excluded per OpenEden terms and compliance statements.
  • Use of the protocol and TBILL tokens is subject to platform Terms of Service and subscription documents; tokens may be non-transferable to non-whitelisted addresses on some chains. KYC/AML & compliance
  • Participation requires full KYC/AML onboarding (ID, corporate documents, source of funds) through a regulated KYC provider.
  • Screening against sanctions lists (OFAC, UN, EU) and adverse media is stated; this is an off-chain compliance process. Regulatory classification
  • TBILL tokens are positioned as securities/collective investment scheme interests referencing U.S. Treasury bills, not as utility tokens.
  • The offering relies on private-placement or exempt-offer regimes (e.g., accredited/qualified investors), not a public retail prospectus. Warnings, enforcement, and legal proceedings
  • As of 2026-08-29, there are no public enforcement actions, warnings, or court cases specifically naming OpenEden TBILL found via independent search. Not verifiable as of 2026-08-29.
  • No sanctions listings for OpenEden or TBILL issuers were identified. Not verifiable as of 2026-08-29. Data protection & operational risk
  • Personal data collected for KYC/AML is governed by privacy notices referencing PDPA (Singapore) and similar regimes.
  • Key risks: dependence on fund/custodian solvency and segregation of assets; regulatory reclassification risk in major jurisdictions; smart contract risk on each chain; cross‑chain liquidity and transfer restrictions; and potential mismatch between token mechanics and legal share registry.
Evidence (4)

Stability

stability

two sources

Yes—there is evidence that TBILL has traded off its $1.00 peg. CoinGecko shows an all-time low of $1.02 on Oct. 23, 2023, which is not a depeg below $1.00; it is a premium above par, so it does not indicate the stablecoin “depegged” in the usual sense. OpenEden’s own documentation says TBILL is priced in USDC and that if USDC de-pegs, TBILL’s USDC-denominated price would rise accordingly, meaning the relevant peg risk is on the underlying settlement currency, not necessarily TBILL itself. However, a disclosed security report found that claiming underlying USDC fees could make TBILL undercollateralized and cause a “slight depeg” in TBILL’s 1:1 USDC backing, but the report does not provide an observed market percentage, count of occurrences, or exact timestamp for an actual live-market depeg event. So the only verifiable answer is: an actual TBILL market depeg below $1.00 is not verifiable as of 2026-08-29; the documented issue is a contract-level undercollateralization risk rather than a confirmed repeated market depeg. If you meant USDC depegs affecting TBILL, that is a different question: TBILL is explicitly denominated in USD and quoted in USDC terms, so USDC weakness would mechanically lift TBILL’s USDC price.

Evidence (3)

Risks & Strengths

risks

two sources

OpenEden TBILL’s top risks are: smart-contract/operational failure, regulatory and KYC/whitelist constraints, liquidity and redemption friction, oracle/pricing risk, and underlying Treasury/custody/asset-structure risk. The protocol’s own materials emphasize that TBILL depends on audited on-chain contracts and regulated off-chain administration/custody, which means failures can arise in both layers.

  • Smart-contract and operational risk: Independent disclosures show critical failures could freeze deposits/redemptions or break collateral accounting. HackenProof reported a critical DoS path where fee claiming could make the vault undercollateralized and revert core functions, and the audit found denial-of-service and missing KYC-verification issues.
  • Regulatory / access-control risk: TBILL is permissioned, with whitelist/KYC controls and multi-signature approvals for transfers, so changes in securities, fund, or sanctions rules could restrict minting, redemption, or secondary-market access.
  • Liquidity and redemption risk: Because direct mint/redeem access is restricted, market liquidity may be thin and tokens can trade below NAV during stress; banned or restricted accounts may also be unable to exit promptly.
  • Oracle / pricing risk: TBILL’s price and collateral logic rely on NAV/oracle inputs and on the U.S. dollar value of the backing assets; audit findings specifically flagged dangerous assumptions around the USDC peg and deprecated oracle functions, which can disrupt rate calculations and execution.
  • Underlying asset / custody / sovereign risk: TBILL is exposed to short-dated U.S. Treasuries and their custody/administration chain. That lowers credit risk relative to many assets, but it does not remove government, custodian, or fund-manager risk, and the token can still be affected by operational failures in the off-chain structure. The highest-confidence risk finding from the independent sources is that *permissioned structure plus smart-contract dependence* creates a materially higher failure surface than holding Treasuries directly.
Evidence (8)

strengths

two sources

OpenEden TBILL’s top strengths are its direct U.S. Treasury exposure, institutional-grade compliance, fast on-chain settlement, strong transparency, and self-custody/composability. The product is designed to give on-chain access to short-dated U.S. T-Bills backed by AA+/Aa1 sovereign credit, with a weighted-average maturity of less than 3 months and 24/7 instant subscription versus TradFi settlement delays. It is positioned as a regulated BVI fund with contractual tokenholder rights, and the docs describe daily and monthly NAV reporting plus third-party audit/verification processes. TBILL also emphasizes self-custody, where holders keep the minted tokens that represent their economic interest in the fund’s assets, and whitelisted transferability for compliant secondary movement. Finally, OpenEden highlights composability across DeFi, meaning TBILL can be integrated into other protocols and DEXs, which increases utility beyond passive yield exposure.

Evidence (2)

Methodology & Limitations

  • On-chain metrics: not verifiable — Dune phase 2 is not enabled.
  • 0 of 24 fact categories not yet collected.
  • Fact verifiability: 15 two independent sources, 7 one source, 4 unverified.
  • Oldest fact verification date: 2026-08-29.