Orca DEX

Orca is a Solana-based decentralized exchange (DEX) and automated market maker (AMM) offering swaps and concentrated-liquidity pools under the “Whirlpools” design. Protocol identification

• Name: Orca DEX / Orca Protocol.
• Website: orca.so (multiple independent listings confirm this).
• Docs: docs.orca.so.
• Category: DEX / AMM, specifically a concentrated liquidity AMM (CLAMM).
• Chains: Primarily Solana mainnet; developer materials also reference use on Eclipse but the core production deployment for the DEX is Solana.
• Launch date: Third‑party project reviews state Orca has been operating on Solana since 2021.
• Native token: ORCA SPL token on Solana; the mint address is orcaEKTdK7LKz57vaAYr9QeNsVEPfiu6QeMU1kektZE, confirmed both in Orca docs and an independent analytics site. Main contract / program IDs (Solana)
• Concentrated-liquidity AMM (“Whirlpools”) program ID: whirLbMiicVdio4qvUfM5KAg6Ct8VwpYzGff3uctyCc.
• Stated in an external DEX guide with explicit mention as the official Solana mainnet Whirlpool program, audited and open‑source.
• Independently repeated in a separate technical reference listing Orca program IDs for Solana mainnet/devnet/Eclipse.
• ORCA SPL token mint: orcaEKTdK7LKz57vaAYr9QeNsVEPfiu6QeMU1kektZE, cross‑checked between Orca’s own governance/treasury docs and external market data. Direct on‑chain verification of these addresses via block explorers or on-chain analytics is Not verifiable as of 2026‑08‑29 under the current constraints. Fork lineage and design origin
• Independent reviews describe Orca as a native Solana DEX/AMM and one of the ecosystem’s early exchanges, not as an explicit fork of another chain’s design.
• The Whirlpools CLAMM is presented as Orca’s own concentrated-liquidity implementation, with no indication in third‑party materials that it is a direct fork of Uniswap v3 or other AMMs, though it is conceptually similar.
• A guide notes that the Whirlpool program is open‑source and audited by Kudelski Security and Neodyme, implying at least two independent audits of the modified codebase. Malicious-modification / fork incident history
• Across the referenced project reviews, exchange listings, and technical guides, there is no reported history of malicious modifications in Orca forks or copycats. Any comprehensive incident record would require on-chain and security-advisory checks, which are Not verifiable as of 2026‑08‑29.

Orca on Solana appears to be a real, mature product rather than a simple landing page: its documentation site exposes a full docs index, an API reference, FAQs, and developer pages, and the main site describes publicly available code and audited/battle-tested smart contracts. The product side is also live at the website level, with public REST endpoints for protocol stats, pool search, token search, and an interactive API explorer, which indicates operational app/backend functionality rather than only marketing pages. Live deposit/withdrawal functionality is not verifiable as of 2026-08-29 from the available web evidence in this run. The docs and third-party integration snippets describe liquidity actions such as deposit and withdraw, but those are insufficient to confirm current production behavior without direct on-chain or live-app verification. I did not find strong signs of a template-only or fake-metrics site in the gathered sources; however, broken-link or UI-quality testing was not verifiable as of 2026-08-29 from the available evidence. The protocol does appear to have an open API: Orca’s docs explicitly reference a public REST API with Solana base URL api.orca.so/v2/solana and an interactive explorer, and external API directories also list public Orca protocol collections.

Whirlpools / Orca concentrated liquidity program audit.

Whirlpools / Orca concentrated liquidity program audit.

Whirlpools / Orca concentrated liquidity program audit.

Whirlpools / Orca concentrated liquidity program audit; Orca lists multiple Sec3 reviews and PDFs for 2025-02-28, 2025-06-23, 2025-08-22, plus later 2026-01-14 items in the audit index.

Whirlpools / Orca concentrated liquidity program audit; Orca lists multiple Sec3 reviews and PDFs for 2025-02-28, 2025-06-23, 2025-08-22, plus later 2026-01-14 items in the audit index.

Whirlpools / Orca concentrated liquidity program audit; Orca lists multiple Sec3 reviews and PDFs for 2025-02-28, 2025-06-23, 2025-08-22, plus later 2026-01-14 items in the audit index.

Additional Sec3 audit entries appear in Orca’s audit index dated 2026-01-14, but the provided search results do not expose report contents, findings counts, or fix status.

Orca does have an active bug bounty program. Immunefi lists it as live since 19 May 2022, with a maximum bounty of $500,000 and PoC required. The most specific publicly documented parameter set in the sources is that the program, as reflected on Immunefi, is tied to Orca Whirlpools; Orca’s own governance forum later stated that its existing Immunefi bounty only covers vulnerabilities tied to the Orca Whirlpools program, not the older deprecated legacy pools. The forum proposal also shows an exception-based payout of 100,000 USDC for a critical issue in the legacy spl-token-swap program that had been patched before harm occurred. On results: the clearest disclosed outcome in the supplied sources is that a whitehat reported a critical vulnerability on 15 November 2022, Orca patched it the same day, and the Council proposed a 100,000 USDC reward. The sources provided do not enumerate total bounty payouts, number of submissions, or accepted reports, so those are Not verifiable as of 2026-08-29.

Orca is a Solana-native AMM DEX; most technical risk is Solana and SPL-token dependent, with limited direct reliance on cross-chain bridges or off-chain custodians. However, it is exposed to oracle manipulation (via Pyth/Switchboard), stablecoin depegs, and failure of integrated Solana protocols. ### 1. Core dependencies (Solana stack)

• Solana L1: All pools, liquidity and swaps live on Solana; chain halts, congestion, or consensus failures can freeze trading and liquidity withdrawals.
• SPL tokens & token programs: Orca pools hold SPL tokens; bugs or upgrades in Solana token standards or specific token programs (e.g. token-2022 features) can impact pool accounting and transfers. ### 2. Oracles & price manipulation
• Orca is primarily constant-product AMM, but some pools and integrated protocols (e.g. lending/derivatives using Orca liquidity) rely on Pyth and Switchboard oracles for pricing.
• Oracle manipulation vectors:
• Thinly traded tokens on centralized or decentralized venues feeding oracle prices.
• Short-lived spikes enabling under-collateralized borrowing or toxic order flow against Orca pools.
• Resulting risks:
• Pool value extraction via sandwich/price manipulation.
• Knock-on liquidations in external lending markets that use Orca prices/liquidity. ### 3. Bridges & cross-chain exposure
• Orca itself is not a cross-chain protocol, but pools hold bridged assets (e.g. wrapped BTC/ETH, bridged USDC/USDT) from Solana bridges like Wormhole and others.
• Bridge failure (exploit or minting bug) can:
• Render wrapped assets worthless on Solana.
• Leave Orca LPs with unbacked tokens and permanent loss. ### 4. Stablecoin & LST/restaking exposure
• Orca has significant liquidity in USDC, USDT, and other stablecoins (SPL versions plus bridged).
• Failure scenarios:
• Issuer insolvency or regulatory action against Circle/Tether → off-chain backing impairment.
• Depeg of algorithmic or exotic stables held in Orca pools → LP losses, toxic flow.
• LSTs and yield tokens: Pools containing Marinade, Jito, or other Solana LSTs/LST-like assets are exposed to validator-set slashing, staking protocol bugs, or governance failures. ### 5. CEX/MM and market structure risk
• Orca pricing for major assets implicitly depends on broader Solana and cross-exchange liquidity, including centralized exchanges and MMs (e.g. Jump, Wintermute, etc.).
• Large MM withdrawal or CEX disruption can:
• Widen spreads and increase slippage on Orca.
• Make AMM prices easier to manipulate relative to global markets. ### 6. Custodians, RWA, SPVs
• No direct evidence of Orca holding off-chain RWA, custodial assets or SPV structures; exposure arises only via tokens representing such claims in pools.
• If any RWA token issuer/custodian fails, Orca LPs holding that token bear value impairment.

Orca DEX is organized as a non-custodial Solana protocol: users connect their own wallet, sign each swap or liquidity action themselves, and Orca does not hold user balances in an exchange account. In the terms of use, Orca states that it does not act as a custodian, intermediary, or counterparty, and that users maintain exclusive control of their digital assets through their personal wallets at all times. In practical terms, custody stays with the user’s wallet/private keys; Orca’s smart contracts provide the swap and liquidity logic, while users authorize transactions from their own wallet interface. For institutional risk analysis, that means custody risk is primarily wallet/key-management risk rather than platform balance-sheet custody risk, although smart-contract and transaction-signing risks still remain.

Orca’s CEO reportedly confirmed user funds were unaffected by the Drift Protocol hack, but that incident was at Drift, not an Orca exploit; no loss to Orca is stated in the provided results.

A 2026 report says Orca rotated potentially leaked deployment credentials after a possible cloud-hosting/provider issue, with no impact on funds and no on-chain protocol compromise described.

Orca is organized as a non-custodial, wallet-based Solana DEX: users connect their own Solana wallet, sign each swap or liquidity action locally, and funds stay in the user’s wallet rather than in an Orca account. The available sources do not describe a protocol-controlled custody or key-escrow model for end users, so end-user key management appears to rest with the wallet provider and the user, not with Orca itself. For protocol governance, Orca uses the ORCA token for governance and a DAO-style process in which holders can participate in proposals, with power delegated to an elected DAO Council. That means governance key management is organizational: voting power is mediated through token holdings and delegation rather than a centralized admin account. For operational tooling, the public Orca MCP repository shows that interacting software needs a Solana wallet keypair JSON file or similar private-key configuration, confirming that actions are authenticated by wallet keys when programs interact with Orca on Solana. However, that repository is a third-party integration tool, not the Orca protocol itself, so it only shows the key-handling pattern required by client automation, not Orca’s internal treasury or admin-key setup. Not verifiable as of 2026-08-29: the sources provided do not disclose Orca’s internal multisig structure, signer rotation, upgrade authority, treasury key custody, or any emergency key-management controls.

Orca on Solana is a set of upgradable Solana programs, so the primary smart-contract risk is *program upgrade authority* rather than an EVM-style proxy/admin pattern. Solana’s upgradeable-loader model allows a program to be upgraded while an upgrade authority is set, and revoking that authority makes the program immutable. I could verify Orca’s documentation and audit index, but I could not verify the live on-chain program IDs, current upgrade authority, or any Dune-decoded admin events in this run; those items are Not verifiable as of 2026-08-29. Verified / likely structure

• Orca documents swaps, pools, and liquidity-position withdrawals; its FAQ says liquidity positions generally have no lock-up period and users can withdraw when liquidity is available, subject to wallet access and execution conditions.
• Orca also states it has security audits, including a 2025 Sec3 audit listing.
• Solana’s model means an upgrade authority can change program logic; if that authority is compromised, the worst case is malicious program upgrades, which can change swap/position logic or redirect flows until authority is revoked. Risk assessment
• Upgrade / rug risk: medium-to-high if any critical Orca program remains upgradeable; low only if all relevant authorities are revoked on-chain, which I could not verify.
• Freeze risk: no verified evidence in the gathered material of a protocol-level freeze authority over user funds; however, this is Not verifiable as of 2026-08-29 without live chain confirmation.
• User exit: for ordinary liquidity positions, Orca says withdrawals are generally possible when liquidity is available, so a complete admin freeze of exit is not established by the available sources. Architecture map (high level)
• User wallet → Orca UI / router → Solana Orca programs → pool accounts / position accounts → token accounts.
• Control plane: Solana upgrade authority governs program updates; an expected best practice is revocation or timelocked upgrades, but Orca-specific timelock delay was Not verifiable as of 2026-08-29. Bottom line
• The main institutional risk is *upgrade authority centralization* on Solana programs, not proxy-admin complexity.
• Without verified live-chain authority data, the correct conservative stance is: admin/upgrade risk unresolved; user exit appears available for normal LP withdrawals; worst case under key compromise is malicious program upgrade rather than automatic asset seizure.

Orca is a real Solana DEX business, not just a web front: its LinkedIn page lists it as a privately held company founded in 2021 with 11–50 employees, and Orca’s own site says it has been audited by 4+ independent security firms with zero exploits in over five years of operation. The co-founders are Yutaro Mori (YM) and Grace Kwan (Ori); a third-party profile states they were initially pseudonymous and disclosed their identities in June 2021, while another profile describes Mori as a former Google software engineer and Kwan as a former Meta product manager, which supports credibility but is not independently confirmed here. Public footprint exists through Orca’s X account and institutional/partner announcements such as a 2025 MOU with Shinhan Asset Management and Solana Foundation, which is consistent with an active operating team rather than an anonymous fly-by-night project. I could not verify a real office, onshore/offshore jurisdiction, or the legal entity structure from the provided results, so those points are Not verifiable as of 2026-08-29. There is also no evidence in these results of a major hack or failure associated with the founders’ prior projects; however, prior-project outcomes beyond the resume claims above are Not verifiable as of 2026-08-29.

Orca DEX appears to have a generally strong reputation in Solana DeFi: it has operated since 2021, is described by review sources as non-custodial and audited, and multiple independent security reviews plus an active Immunefi bug bounty are publicly referenced. Sentiment in the sources is mostly positive on product quality and security, with recurring praise for the interface and liquidity tooling, but there are still standard DeFi criticisms around smart-contract risk, wallet/user error, fake tokens, impermanent loss, and congestion-related UX issues. I found no credible source in the provided results alleging fraud, a rug pull, insolvency, sanctions, or active legal/regulatory action against Orca itself; however, one source notes it is not currently regulated by any government authority, which is normal for DeFi but still a governance/risk consideration. The main unresolved concern is that DEX safety ultimately remains dependent on contract, wallet, and LP risks even when the protocol’s track record is clean.

Orca is a Solana-only concentrated-liquidity DEX whose economics are driven primarily by swap fees and protocol-controlled fee splits rather than heavy token subsidies. Strategy & assets in/out

• Core product: Whirlpools concentrated liquidity plus legacy constant-product pools, all on Solana.
• Users deposit token pairs (e.g., SOL/USDC) as LP; traders pay swap fees; fees are split between LPs and the protocol. Yield source & organic vs subsidized
• Main yield to LPs is organic trading fees. Whirlpools use fee tiers from 0.01–2.00% per swap, with 87% to LPs, 12% to the Orca DAO treasury, 1% to an impact fund in the current configuration.
• Governance docs describe constant-product pools with 0.30% fees, where 0.17% goes to LPs, 0.10% to the treasury, 0.03% to an impact fund.
• There is no evidence of large, ongoing inflationary farming campaigns; yields are primarily fee-driven (organic). Any emissions/“double dip” programs appear ancillary and not the core engine. Market-neutral vs directional; leverage
• LPs face impermanent loss and are economically directional on the pair, especially in narrow concentrated ranges. The protocol itself does not embed leverage, looping, restaking, or off-chain exposure; any leverage comes from external users/venues. Lock-ups, withdrawals, mechanics
• Standard AMM model: LP positions can be withdrawn at any time, subject only to on-chain transaction constraints. No native lock-up mechanic is described in public economic docs. Fees, gates, limits
• Fees are set at the pool level via fee tiers (0.01–2.00% for Whirlpools).
• No deposit/withdrawal gates or hard limits are documented in economic summaries; risk is primarily price/IL + Solana/L1 risk. Protocol revenue & token value capture
• DeFiLlama reports annualized fees ≈ $90m and annualized protocol revenue ≈ $10.8m, all on Solana, as of its latest update (2026-06-28).
• Orca docs: 12% of trading fees is protocol share; this is split such that 40% funds ORCA buybacks for xORCA stakers, 60% to the fee treasury for development and operations.
• A governance proposal and follow-on coverage describe 30% of protocol fees used for ORCA buybacks and staking, embedding a buyback-and-revenue-share model. Collateral, TVL by chain/product
• Orca is single-chain (Solana), so 100% chain exposure to Solana.
• DeFiLlama shows TVL ≈ $250–260m with recent figures around $246–259m, ranking Orca roughly top-10 in Solana DeFi.
• Product-level TVL split (Whirlpools vs classic pools) is Not verifiable as of 2026-08-29 without on-chain analytics. APY history, volatility, sustainability
• Aggregators show fees 30d ≈ $3.8m and revenue 30d ≈ $0.46m, implying fee APR in the low–mid single digits vs TVL, but LP APYs vary widely by pair and range.
• Sustainability: revenue is volume-driven, not subsidy-driven, but LP returns remain volatile with market cycles and IL risk; protocol revenue appears more stable than token price. Data caveats
• All quantitative metrics are aggregator figures (primarily DeFiLlama) and not on-chain verified. Where on-chain checks would be required, they are Not verifiable as of 2026-08-29.

Not verifiable as of 2026-08-29. I could not confirm a Solana on-chain treasury/reserve address set, custody arrangement, reserve policy, or balance breakdown from the available sources. The best available third-party material only indicates that Orca routes 12% of pool fees to an "Orca DAO Treasury" and 1% to an Impact Fund, but it does not provide the treasury wallet addresses, signing/control model, or audited reserve composition. The protocol’s own token/fee descriptions are therefore unverified marketing claims unless independently matched to on-chain accounts. DefiLlama shows Orca’s overall TVL and chain split on Solana, but that is protocol liquidity, not a treasury or reserve statement. No Dune on-chain balance verification was available in this run, so on-chain balances via Dune are not verifiable as of 2026-08-29.

Orca is a Solana DEX whose current native/governance token is ORCA; an older utility token AQUA exists but is effectively deprecated and not central to current protocol tokenomics. Because Dune/on-chain tools are unavailable in this run, all on-chain checks are: Not verifiable as of 2026-08-30. ### 1. Token identifiers

• Token name/ticker: Orca (ORCA).
• Chain: Solana.
• Contract address (Solana mint): Not verifiable as of 2026-08-30. ### 2. Supply, market cap, FDV
• Reported max supply of ORCA is around 100 million tokens according to aggregators such as CoinGecko/CoinMarketCap.
• Circulating supply, market cap, and FDV figures differ slightly across aggregators and change over time; all are aggregator data, not on-chain verified.
• Precise values: Not verifiable as of 2026-08-30 (no on-chain/Dune cross-check). ### 3. Utility and governance
• ORCA is used as the governance token for the Orca protocol, including voting on proposals for fee parameters and protocol changes.
• Historical documentation also referenced AQUA for loyalty rewards and some internal fee distribution, but current governance and branding center on ORCA.
• Claims about future governance expansions or utilities from Orca’s own docs are unverified marketing claims. ### 4. Revenue share, buybacks, burns, staking
• Orca charges trading fees on swaps; part of these go to liquidity providers, and a portion historically to the protocol treasury.
• Any direct revenue share to ORCA holders, buybacks, token burns, or staking rewards are not consistently documented in independent sources and are therefore Not verifiable as of 2026-08-30. ### 5. Emissions & unlocks; allocations
• Public tokenomics charts (from launch-era materials and aggregators) show allocations to team, investors, community incentives, and treasury, but the exact percentages and vesting schedules differ by source.
• Whether specific vesting/unlock events (team/investor cliffs, linear vesting) actually occurred on-chain is Not verifiable as of 2026-08-30. ### 6. Holder concentration & controls
• Top-holder concentration, identification of insider/team wallets, and existence/use of mint, blacklist, or fee-switch functions and their controllers are Not verifiable as of 2026-08-30. ### 7. DEX liquidity and listings
• ORCA is primarily traded on Solana DEXs, including Orca itself and other Solana venues.
• Depth/volumes and dominant trading pairs (e.g., ORCA/SOL, ORCA/USDC) are reported by aggregators but Not verifiable as of 2026-08-30 as on-chain depth.

A Bitcoin move below $10,000 would most likely be a severe *risk-off* shock for Solana DeFi, and Orca would likely face lower trading volumes, thinner liquidity, and weaker fee generation. However, the effect on Orca is not directly verifiable from the provided sources because they do not contain on-chain Orca liquidity, volume, or treasury data for Solana, so the protocol-specific impact is Not verifiable as of 2026-08-29. What the sources do support is the direction of the shock: Bitcoin at $10K is described as a tail-risk outcome that would typically require deep recession, broad equity drawdowns, sustained liquidity contraction, leverage liquidations, and confidence shock across markets. In that setting, Solana-linked assets would likely be pressured as part of the broader crypto selloff, and Orca-specific price commentary already frames ORCA as sensitive to Solana DeFi sentiment and market-wide weakness. For Orca, the most defensible stress view is:

• Lower spot demand for ORCA and trading pairs as market participation falls.
• Reduced DEX activity if Solana DeFi volumes contract alongside the broader crypto deleveraging shock.
• Higher downside volatility because Orca is a Solana-native DEX token whose outlook is tied to ecosystem conditions and liquidity. I cannot verify a precise downside price target for ORCA from the evidence provided. Any exact forecast would be speculative and is Not verifiable as of 2026-08-29.

Not verifiable as of 2026-08-29. The provided results do not include any protocol documentation, risk model, or on-chain state for Orca DEX on Solana that specifies a collateral basket, collateralization logic, or liquidation/depeg response to stress a “largest collateral depeg” by 20%. Orca is primarily a DEX/liquidity layer on Solana, so a collateral-depeg stress test may not even be applicable in the same way it is for lending or synthetic-asset protocols. The only Orca-specific source in the results is a general trading article that mentions impermanent loss and slippage, but it does not define collateral assets or quantify depeg losses under a 20% shock. The rest of the results are generic stress-testing methodology examples or unrelated depeg case studies for other protocols, and they do not establish an Orca-specific exposure set. If you want, I can reframe this as a DEX-specific stress scenario, for example: 20% adverse price move in the largest LP pair on Orca, estimating impermanent loss and LP value impact rather than collateral depeg.

For Orca DEX on Solana, a “top counterparty insolvent” stress scenario is not fully verifiable as of 2026-08-29 from the available sources, because Orca is a spot AMM, not a credit/intermediated counterparty venue, so there is no single borrower, clearing member, or LP counterparty whose insolvency can be traced through a CCP-style default waterfall. The most relevant loss path is therefore liquidity-provider insolvency / pool depletion, not counterparty default in the classic sense.

• Expected loss path: if a major LP exits or cannot perform, the pool’s *available liquidity* shrinks and price impact/slippage rises; traders still receive whatever the AMM state allows at execution, but there is no separate debt claim against an insolvent LP documented in the provided sources.
• Who absorbs it: in a constant-function AMM, the remaining pool reserves and *other LPs pro rata* absorb adverse trading outcomes through impermanent loss and inventory rebalancing; if reserves are insufficient for a trade, the trade simply clears at worse price or fails due to insufficient liquidity.
• Compensation: the provided sources do not verify any Orca-specific insurance fund, loss socialization fund, or protocol backstop for counterparty insolvency. Not verifiable as of 2026-08-29.
• Smart-contract impact path: user swap instruction → pool account state read → pricing curve / quote computation → token transfer in/out via Solana program accounts → pool reserves update. Insolvent liquidity counterparties do not trigger a special recovery workflow in the verified sources; the on-chain effect is just reduced liquidity and changed execution price. If you want, I can next map this into a failure tree for Orca’s specific pool types (whirlpool vs. legacy pools) using only verifiable sources.

For the stress scenario “committed fraud by the DAO or owners,” Orca DEX presents limited direct evidence of fraud allegations or confirmed misconduct in the provided sources. The stronger evidence points instead to governance control and smart-contract / operational risk, not to verified DAO fraud or owner fraud. Key points:

• Orca is described as a non-custodial Solana AMM/DEX with DAO governance, and its public risk profile is framed around smart-contract risk, wallet mistakes, fake tokens, malicious links, and LP loss rather than fraud by insiders.
• A 2021 security assessment flagged a governance/treasury-related issue: the treasury could be set to the zero address, potentially blocking deposits and withdrawals. That is a control-risk finding, not evidence that the DAO or owners actually committed fraud.
• Third-party review material notes the Orca Council can withdraw assets when “deemed appropriate” for buybacks, which indicates some centralized governance discretion, but the source does not allege fraud or misuse.
• No source provided here confirms a DAO theft, rug pull, insider embezzlement, or enforcement action against Orca owners. Assessment: based on the available evidence, a fraud-by-DAO/owners scenario is not verifiable as of 2026-08-29. The observable risk is governance centralization / discretionary control, which could enable abuse in theory, but the supplied sources do not substantiate actual fraudulent conduct. If you want, I can next turn this into a concise institutional risk rating (e.g., low / medium / high) focused specifically on governance abuse risk versus technical exploit risk.

For Orca DEX on Solana, I cannot verify a negative 30-day primary yield source from the provided sources. The available results only show that Orca’s LP yield is an *estimate* based on recent activity and position specifics, and that APR/APY snapshots can be misleading for concentrated liquidity positions. What can be stated is that Orca’s yield display is not a guaranteed return metric: the docs say *Estimated Yield* is informational and based on recent trading activity, fee accrual, rewards, and selected position range. A community discussion also notes that Orca-style APR can be “useless” as a forward-looking yield measure because it is derived from recent fee earnings and depends on each LP position’s range. A potential contradiction exists between protocol/aggregator yield displays and realized LP outcomes, but the provided sources do not contain a verifiable 30-day negative yield figure for Orca or its Solana pools. Therefore, the stress-scenario answer is: Not verifiable as of 2026-08-29. If you want, I can next help structure a risk note around the stress case qualitatively, e.g. fee compression, range-outs, incentive decay, and impermanent loss, without asserting an unverified 30-day negative metric.

Governance of Orca DEX on Solana is still largely company-controlled, with limited evidence of a fully on‑chain, binding DAO structure. All on‑chain verification is Not verifiable as of 2026-08-29. ### 1. Core entities & control

• Orca is operated by a core team that previously announced the formation of Orca Foundation as a steward for protocol development and ecosystem growth; this is presented as a non-profit–style entity but detailed corporate records (jurisdiction, registration number, directors) are Not verifiable as of 2026-08-29.
• Public materials and interviews describe Orca as a team-led protocol with a strong focus on UX and compliance, implying continued centralized product and business control. ### 2. Smart contracts & upgrades
• Orca pools and routing logic are deployed on Solana, but there is no clear, public technical documentation detailing:
• Who controls upgrade authority for core program IDs
• Whether upgrade authority has been renounced or transferred to a DAO
• Any timelock or formal on-chain governance program All of the above are Not verifiable as of 2026-08-29. ### 3. Governance / DAO structure
• Orca markets a community‑oriented ethos (e.g., community grants, open-source components, discussions in Discord/Forums), but no binding, token-based governance system (governance token, on-chain proposals, formal voting contracts) can be confirmed.
• There is no evidence of a robust DAO with enforceable control over smart contracts, treasury or frontend; governance appears primarily advisory/symbolic via off-chain community feedback. Not verifiable as of 2026-08-29. ### 4. Treasury, multisigs, timelocks
• Public treasury structure (multisig addresses, signer count/threshold, independence of signers, specific powers over fee revenue or protocol-owned liquidity) is Not verifiable as of 2026-08-29.
• No reliable sources describe:
• Existence of timelocks on major changes
• Formal risk-oversight committees or segregation of duties ### 5. Frontend & brand control
• The main web UI, branding, and domain are clearly controlled by the Orca core team/company, not a DAO.
• Terms of Service or legal disclaimers exist on the website, but: full ToS text, governing law, and corporate details behind the ToS are Not verifiable as of 2026-08-29. ### 6. Token holders / voting concentration
• Orca does not have a clearly documented governance token with on-chain voting; therefore, voting concentration and top holders via Dune are Not verifiable as of 2026-08-29.

Orca DEX is presented in its terms as a decentralized, non-custodial protocol on Solana, with use limited to adults and users who have legal capacity in their jurisdiction; it also states the service may be unavailable in some jurisdictions and that users are responsible for confirming local legality. The same terms indicate governing law/jurisdiction language is present, but the search snippet does not fully reveal the named jurisdiction, so that specific point is Not verifiable as of 2026-08-30. On KYC/AML, the available materials do not show a user KYC flow for the DEX itself; the practical legal posture is closer to an unpermissioned DeFi interface than a regulated financial intermediary, but that classification is an interpretation rather than an explicit legal determination. Orca’s documentation also says that for regulated assets / permissioned pools, eligibility terms are defined by the asset servicer rather than Orca, which suggests Orca distinguishes between open pools and externally restricted assets. For privacy/data protection, Orca’s privacy policy states users may contact it at a designated privacy email and describes collection/retention rules, but the snippet does not establish a detailed data-processing architecture for the DEX beyond a standard privacy notice. No court cases, enforcement actions, or sanctions hits were identified in the gathered web results, so those items are Not verifiable as of 2026-08-30. Risk view: the main legal risk is not custodial misuse but jurisdictional access restrictions, sanctions screening by third-party infrastructure, and potential regulatory reclassification of DeFi interfaces. The protocol’s “decentralized, non-custodial” framing is relevant, but it does not eliminate exposure if a user is located in a restricted jurisdiction or if local law treats the interface/operator as a regulated service.

Not verifiable as of 2026-08-29 for Orca DEX’s stablecoin(s) specifically. The provided search results mention a Solana stablecoin incident where USX fell to $0.80 on Orca and Raydium due to a liquidity drain, but they do not establish that USX was the stablecoin used by Orca as a protocol-level dependency, nor do they provide a complete history of all stablecoins traded on Orca to count total depeg events. If you mean the USX incident, that was one documented depeg event in the result set, with the last reported low at $0.80, implying an approximate 20% depeg from $1.00.

For Orca DEX on Solana, the top 5 risks are: 1) Smart contract risk despite audits, because any non-custodial DEX can still contain exploitable bugs; 2) Liquidity-provider impermanent loss, especially in concentrated liquidity positions that can move out of range during fast price changes; 3) Solana network dependency, since outages or congestion can prevent swaps and timely LP rebalancing; 4) Token and market risk, including fake/malicious tokens, thin pools, and high slippage on volatile assets; 5) Governance / protocol-parameter risk, where ORCA token volatility and changing governance controls can affect incentives and revenue mechanics. These risks are the most consistently cited across independent reviews and safety analyses, while Orca’s own site states it has been audited by multiple firms and has had no known exploits, which lowers but does not eliminate protocol risk.

Orca DEX’s top strengths are: 1) user-friendly trading experience with a clean, beginner-friendly interface; 2) capital-efficient liquidity via its Whirlpools concentrated-liquidity design; 3) low-cost, fast execution enabled by Solana’s high-throughput, low-fee environment; 4) strong ecosystem maturity and trust as an established Solana protocol with years of operation; and 5) broad functionality including swaps, pool creation, LP rewards, and routing across liquidity sources. Several independent reviews also highlight Orca’s security track record and zero-hack history as a notable advantage, although those claims are secondary to the core product strengths above.