Plasma

Red · 4/100 Data confidence 81/100

Missing critical evidence: audit. The score is capped until coverage improves.

Executive summary

Plasma is a stablecoin-focused EVM-compatible Layer 1 blockchain and yield aggregator on Solana, built around the XPL native token, with a score of 4/100 (red band) reflecting severe unverified risks and immature infrastructure.

  • Security & audits: Bug bounty program exists (up to $200k critical) but launch date and public results are not verifiable as of 2026-08-29; no published security advisories or paid findings confirmed; public audit status is unverified, raising material smart-contract risk.
  • Incidents: Official X account compromised in July 2025 (treasury reportedly unaffected); separate post-launch XPL price crash and liquidation episode reported but not clearly a protocol exploit; incident response and root-cause transparency not verifiable.
  • Governance & custody: Governance structure, DAO existence, contract ownership, upgrade keys, and timelocks are not verifiable as of 2026-08-29; user wallets are non-custodial, but institutional XPL custody outsourced to Crypto.com Custody and reportedly Anchorage; no independent confirmation of on-chain admin controls.
  • Top risks: Deep Tether/USDT concentration risk (economic activity heavily dependent on USDT support); bridge dependency (LayerZero OFT) creates external protocol risk; large XPL token unlock overhang and limited circulating supply may trigger sell pressure; nascent PlasmaBFT consensus with reward-only (no slashing) model; short track record and unverified audit status limit stress resilience evidence.
  • Counterparty exposure: Yield aggregator routes deposits into external Solana DeFi (lending, DEX LPs, liquid staking); specific protocol allocations and oracle dependencies (Pyth, Switchboard) not verifiable; inherits insolvency, depeg, and oracle manipulation risks from underlying protocols.
  • Strengths: Stablecoin-native design with zero-fee USDT transfers; high-performance PlasmaBFT with fast finality; EVM compatibility for developer onboarding; Bitcoin-native bridge functionality; reported strong institutional backing (Tether, Founders Fund, Framework Ventures) but investor claims only partially verified.
  • Economic model & stress: Yield sources (external protocol rewards, incentives) and leverage use are strategy-specific and not verifiable; TVL unknown; stress scenarios (BTC <$10k, collateral depeg, counterparty insolvency, DAO fraud, negative yield) cannot be quantified due to lack of on-chain data and protocol-specific exposure breakdowns as of 2026-08-29.
  • Unverified: Mainnet launch date, circulating supply and unlock schedule, treasury addresses and reserves, detailed governance and admin key architecture, audit reports, protocol-specific collateral composition, and all stress-test loss estimates remain not verifiable as of 2026-08-29.

Score

Component Weight Raw Points Reason
security 25% 20 5.0 0 audit(s); no fresh audit; active bug bounty bonus
incidents 25% 20 5.0 2 incident(s) in 730-day window, losses $0; 0 high/critical news
verifiability 15% 64 9.6 0 onchain, 12 two-source, 4 one-source of 22 fact(s)
stability 15% 50 7.5 stability not established; 0 current depeg event(s)
adoption 10% 50 5.0 TVL unavailable; neutral context, not a safety signal
governance 10% 20 2.0 timelock in governance +15; legal enforcement/sanction -30
  • No audit of deployed contracts (−15): no audit facts recorded
  • Active regulatory enforcement (−15): legal fact mentions enforcement or sanction

Identification

protocol identification

two sources

Plasma is a stablecoin-focused EVM blockchain and yield protocol, built around the XPL native token and institutional-grade staking/restaking infrastructure on the Plasma Mainnet. ### Protocol identification

  • Name: Plasma Network / Plasma yield & payments protocol.
  • Website: plasma.to (technical docs) and plasma.org (product-facing site).
  • Docs:
  • Developer/docs portal: docs.plasma.to.
  • Additional network docs: docs.plasma.org.
  • Category: Purpose-built stablecoin and payments chain with integrated staking yield optimization (institutional restaking, EigenLayer AVS exposure).
  • Launch status/date: Public environment described as “Plasma Mainnet Beta”; precise launch date is Not verifiable as of 2026-08-29. ### Chains and network configuration Plasma operates its own EVM-compatible L1-style chain:
  • Plasma Mainnet Beta
  • Chain ID: 9745.
  • Currency symbol / native gas token: XPL.
  • Public RPC: https://rpc.plasma.to (rate-limited, not for production systems).
  • Explorer: plasmascan.to.
  • Consensus: PlasmaBFT, described as a fast HotStuff-variant proof‑of‑stake mechanism.
  • Plasma Testnet
  • Chain ID: 9746; currency symbol XPL; RPC https://testnet-rpc.plasma.to; explorer https://testnet.plasmascan.to. Multi-chain integrations (e.g., Aave v3, Veda vaults) run on Plasma as a chain, not Plasma deploying on other L1s. ### Native token & yield protocol
  • Native token: XPL (network currency and fee token).
  • Yield protocol: Binance Square describes “Plasma’s institutional-grade staking yield optimization”, integrating EigenLayer AVS yields, Plasma-native bridging rewards, and cross-chain liquidity mining; designed for custodial restaking via institutional MPC/cold wallets. ### Main contracts & verification status
  • Specific smart contract addresses for Plasma’s yield/stablecoin protocol are Not verifiable as of 2026-08-29 (would require direct explorer or on-chain queries).
  • Consequently, explorer verification status of those contracts is Not verifiable as of 2026-08-29. ### Fork lineage
  • Docs state full EVM compatibility and a custom PlasmaBFT PoS consensus, but do not explicitly label Plasma as a fork of any named chain (e.g., Ethereum, Cosmos-EVM).
  • Whether the consensus or chain codebase is a fork of another project, what was changed, and if those changes were audited is Not verifiable as of 2026-08-29.
  • No independent records of malicious-modification history in similar forks of Plasma’s codebase were found; any such history is therefore Not verifiable as of 2026-08-29.
Evidence (13)

maturity

one source

Plasma appears to be a real, live product ecosystem rather than a static landing page: its documentation site is active, includes technical docs, and exposes a public JSON-RPC API endpoint for developers. The docs also say the mainnet beta is live, with a public RPC at rpc.plasma.to, a block explorer, and a public docs URL marked live. For product maturity, the web evidence suggests a reasonably developed developer portal, but not enough to verify end-user deposit/withdrawal functionality or whether the consumer app flow is fully operational, because those claims are only described in docs and partner material rather than independently tested here. The site architecture includes multiple docs sections and an API-oriented surface, which is more mature than a simple marketing landing page. I did not find reliable evidence of broken links, fake metrics, or obvious template-site signs in the available results, so those issues are Not verifiable as of 2026-08-29. I also did not find an independently verifiable open API catalog beyond the documented JSON-RPC/public endpoint and relayer API references, so the safest conclusion is that Plasma has developer-facing APIs, but a broader public open API is Not verifiable as of 2026-08-29.

Evidence (5)

Security

bug bounty

unverified

Plasma has an active bug bounty program for its smart contract code, administered by Ellipsis Labs. The GitHub security page does not state a launch date, and I could not verify the start date from the available sources; therefore the start date is Not verifiable as of 2026-08-29. The published parameters are:

  • Critical: direct theft of funds, permanent freezing of funds, or protocol insolvency; up to $200,000.
  • High: bypassing the frontrun-prevention mechanism within the same leader window or temporary freezing of user funds; up to $25,000.
  • Medium: theft of rent, loss of data, or unintended reuse of sequence numbers; up to $10,000.
  • Low: griefing or temporary denial of service; up to $5,000. Scope includes the smart contract code, with case-by-case review for bugs in plasma-sdk and other non-contract code. Out of scope are issues already exploited by the reporter, UI bugs, vulnerabilities requiring validator execution, vulnerabilities requiring privileged keys/credentials, and MEV vectors the team already knows about. As for results, the security page says there aren’t any published security advisories, and I did not find any public disclosure of paid findings or aggregate payout totals in the available sources. That means the public results are Not verifiable as of 2026-08-29.
Evidence (2)

counterparty risks

two sources

Plasma is a yield aggregator on Solana that routes deposits into external DeFi protocols and strategies, so counterparty risk is primarily protocol dependencies, oracles, and Solana infra rather than centralized custodians. ### 1. External protocol dependencies Plasma strategies currently focus on Solana DeFi (e.g. lending, liquid staking, DEX LPs). Specific protocol allocations are Not verifiable as of [2026-08-29] due to absence of independent, up-to-date breakdowns by strategy. This implies:

  • Lending/Leverage protocols: exposure to insolvency or bad‑debt events if collateral liquidation fails or oracle manipulation occurs.
  • DEX & LP strategies: impermanent loss and possible route-level MEV/sandwich attacks; smart contract failure of underlying DEX.
  • Liquid staking tokens (LSTs) on Solana: depeg risk if the validator set performs poorly or a slashing event hits the staking protocol. ### 2. Oracles & price manipulation Most Solana DeFi uses Pyth and Switchboard for pricing; Plasma inherits these oracle risks indirectly via the protocols it allocates to.
  • A severe oracle misprice can cause under‑collateralized borrowing, protocol bad debt, or forced liquidations.
  • Concentrated liquidity / thin markets on Solana can amplify price manipulation, especially for small-cap tokens. ### 3. Bridges & cross‑chain risk Plasma appears native to Solana; I found no credible evidence of Ethereum or other L1/L2 deployments or cross‑chain vaults. Cross‑chain exposure (bridged assets, cross‑chain strategies) is Not verifiable as of [2026-08-29]. If strategies hold bridged assets (e.g., USDC via Wormhole or other bridges on Solana), Plasma inherits:
  • Bridge smart contract risk (past Wormhole exploit on Solana shows material precedent).
  • Governance/guardian failure for trusted bridge models. ### 4. Custodians, CEX/MM, and RWA exposure No evidence of Plasma using centralized custodians, CeFi yield, CEX market makers, or RWA issuer/SPV structures; all visible messaging is DeFi‑native on Solana. These exposures are Not verifiable as of [2026-08-29] and should be confirmed directly with the team. ### 5. Stablecoin & LST/restaking exposure Strategy-level asset composition (USDC/USDT/other stables; LSTs; restaking) is Not verifiable as of [2026-08-29]. Key scenario risks:
  • Stablecoin depeg/issuer freeze → loss of value in vaults; protocol may be unable to unwind positions.
  • LST depeg or slashing → permanent capital loss in LST‑heavy strategies. ### 6. Systemic & infra Plasma is fully dependent on Solana network liveness, finality, and congestion; prolonged downtime or halts can trap deposits or block liquidations. Solana cluster or validator-level incidents directly affect strategy execution and user withdrawals.
Evidence (5)

crypto custody

two sources

Custody appears to be organized in two layers. For institutional holdings, Plasma announced a partnership with Crypto.com Custody to store the native XPL token in regulated cold vaults, with liquidity services attached. Separately, Plasma’s terms state that its interface and network are *non-custodial* for user wallets: Plasma says it does not custody user assets, cannot access or regenerate private keys, and cannot seize, freeze, or transfer assets held in a user’s digital wallet. Plasma also says it plans to apply for MiCA CASP authorization to custody and exchange assets for users, and to seek EMI authorization for fiat on/off-ramping and wallet functionality. That suggests a future regulated custody stack for its own payments product, but it is not the same as current on-chain verification. There is also a reported transfer of XPL tokens to Anchorage for custody in November 2025, but this comes from secondary reporting rather than a primary Plasma disclosure in the results provided, so it is not fully verifiable here. In short: user wallets are non-custodial, while institutional/token custody has been outsourced to regulated third-party custodians such as Crypto.com Custody, with Anchorage reported as another custody venue for XPL.

Evidence (5)

incident

unverified

Plasma has one web-documented security incident since launch: its official X account was taken over by external attackers around July 11, 2025; the team said the compromise happened through the X platform management backend, and that treasury assets were not affected.

Date
2025-07-11
Cause
frontend_infra_hack
Loss Usd
0
Evidence (1)

incident

unverified

A separate web result describes a post-launch XPL price crash and liquidation episode, but it is not clearly a protocol exploit and does not establish a direct protocol loss or incident response by Plasma itself.

Date
2025-09-28
Cause
liquidity_issue
Loss Usd
None
Evidence (1)

key management

two sources

For Plasma, I could not verify a project-specific key management design from the available results. The most relevant Plasma-linked material I found is an embedded-wallet explainer that describes Privy’s key abstraction model: keys are split into shares, one share is held in an AWS Nitro Enclave, the other is tied to the user’s authentication credential, and the private key is reconstructed only briefly inside isolated hardware for signing before being destroyed. That is a wallet/key custody model, not evidence that Plasma itself organizes protocol-level key management that way. The only directly relevant organizational guidance in the results is NIST’s key-management best-practices framework, which says key management should have defined roles and responsibilities, including an executive-level owner, key generation/acquisition, secure distribution, cryptoperiod management, inventory, and emergency revocation procedures. But I could not confirm that Plasma publishes a comparable internal policy or architecture. So, the correct answer is: Not verifiable as of 2026-08-29. If you want, I can next look for Plasma’s own docs, audits, or governance material for any explicit statements on custody, MPC, multisig, HSMs, or administrative key roles.

Evidence (3)

smart-contract

two sources

Plasma is primarily a stablecoin‑focused L1 chain, not a single yield protocol with a clearly scoped set of DeFi smart contracts, and current public information does not expose a unified “Plasma yield protocol” contract system similar to Aave or Lido. As a result, smart‑contract and admin risk for “Plasma” must be understood as (i) core chain contracts plus (ii) ecosystem dApps deployed on Plasma, rather than one protocol with a single admin model. Because on‑chain tooling is unavailable in this run, all contract‑level specifics are Not verifiable as of 2026‑08‑29. ### 1. Contract types and verification

  • Plasma exposes a list of protocol and ecosystem contracts (e.g., CREATE2 Factory, lending factory/resolver, Uniswap v3 limit order registry) with addresses and explorer links for Plasma Mainnet/Testnet.
  • The chain’s explorer plasmascan.to supports Etherscan‑compatible source verification, with a green checkmark and “Contract” tab showing verified Solidity source when available.
  • Many ecosystem contracts (Uniswap v3, LI.FI, lending) are likely standard EVM contracts ported from Ethereum, but this is inference; concrete verification status per address is Not verifiable as of 2026‑08‑29. ### 2. Upgradeability & admin roles
  • Docs emphasize protocol‑operated stablecoin contracts integrated into the execution layer, written in standard Solidity. This implies some module‑level governance or operator, but specific owner/admin addresses, proxy patterns (UUPS/Transparent), and role hierarchies are Not verifiable as of 2026‑08‑29.
  • There is no public documentation detailing:
  • proxy admin contracts or upgrade mechanisms for core modules;
  • existence of timelock contracts, delay parameters, or on‑chain governance flows;
  • emergency pause, withdrawal, fee, oracle, or strategy management functions. All remain Not verifiable as of 2026‑08‑29. ### 3. User exit and worst‑case key compromise
  • As an EVM L1, user exit from dApps depends on each application’s own smart‑contract design (e.g., AMMs, lending markets, bridges) rather than a single Plasma protocol. For any given yield product on Plasma, the ability to withdraw without admin actions is application‑specific and Not verifiable as of 2026‑08‑29.
  • General risk patterns, assuming typical EVM DeFi:
  • If admins control pause/upgrade on lending or vault contracts, key compromise can let an attacker freeze withdrawals, drain collateral via malicious upgrades, or alter fee/oracle parameters.
  • If admin roles are renounced and contracts are immutable, users face lower governance/key risk but higher rigidity in responding to exploits. Concrete status (renounced vs. active admins) for Plasma ecosystem contracts is Not verifiable as of 2026‑08‑29. ### 4. Architecture map (high‑level)
  • Base layer: Plasma L1 (PlasmaBFT consensus, Bitcoin‑anchored checkpoints, EVM execution).
  • Protocol‑operated modules: stablecoin‑native contracts (zero‑fee USDT transfers, custom gas token paymaster).
  • Ecosystem DeFi: Uniswap v3, lending factory/resolver, LI.FI, and other dApps deployed as standard EVM contracts on Plasma. Without direct on‑chain inspection and per‑contract documentation, a detailed admin/upgradeability diagram and quantified rug/freeze risk for “Plasma yield protocol” are Not verifiable as of 2026‑08‑29.
Evidence (10)

Live security feed

No verified protocol news in the last 12 months.

Team & Reputation

general reputation

two sources

Plasma’s reputation appears mixed-to-cautious: it is portrayed by several crypto sources as a well-backed stablecoin-focused Layer 1 with investors such as Tether, Founders Fund, Framework Ventures, and Nomura, but also as a very new network with elevated execution, concentration, and token-price risks. Independent risk writeups flag deep Tether dependency, a nascent track record, and unverified public audit status as core concerns. Sentiment in the sources I found is also mixed to negative, with one risk site describing mostly negative community sentiment and another noting a sharp XPL drawdown after launch. On the founders/investors side, the project is widely described as having strong institutional backing, but the specific founder/investor claims in the results are mostly from secondary sources rather than primary disclosures, so I would treat them as *partially verified* rather than fully confirmed from the supplied evidence. For audits, I did not find a publicly accessible, primary auditor report in the provided results; the strongest available statement is that public audit status is not verifiable from these sources. For fraud/rug/insolvency allegations, I found no direct allegation or enforcement finding in the supplied sources. The main criticisms instead focus on protocol design and market risks: validator centralization, bridge exposure, token unlock overhang, and dependence on Tether/USDT liquidity. On legal/regulatory matters, one source says Plasma has taken early compliance steps in Europe, including a VASP-licensed entity in Italy and efforts toward MiCA/CASP authorization, but this is not the same as regulatory approval or a clean bill of health. I found no sanctions record in the supplied results. The main unresolved concerns are the protocol’s short operating history, concentration in a single stablecoin ecosystem, and lack of independently verifiable public audit documentation.

Evidence (4)

Economy

model

one source

Plasma is a yield‑generating protocol that routes user deposits into external DeFi strategies on major L1/L2s; all economic details below are based on analytics/protocol docs and not on-chain verified. Not verifiable as of 2026‑08‑29. ## Strategy & Assets

  • Assets in: Users deposit blue‑chip tokens (e.g., ETH, stablecoins) into Plasma vaults that then deploy capital into external DeFi venues (lending markets, DEX LPs, staking). Exact supported assets and per‑vault strategies vary by product and chain.
  • Yield source: Yield comes from external protocol rewards (lending interest, trading fees, staking rewards, incentive tokens), plus any Plasma‑level incentives if present.
  • Organic vs. subsidized: To the extent APY is funded by third‑party emissions or Plasma’s own token incentives, yield is partly subsidized rather than purely organic. Not verifiable as of 2026‑08‑29.
  • Market‑neutral vs directional: Strategies exposing users to price movement of deposited or reward tokens are directional; any hedged/delta‑neutral products would need explicit confirmation per vault. Not verifiable as of 2026‑08‑29. ## Leverage, Restaking & External Exposure
  • Vaults typically interact with external lending/DEX/staking protocols, implying smart contract and protocol‑level exposure beyond Plasma itself.
  • Use of leverage (looping borrow‑and‑stake) or restaking is strategy‑specific and not globally documented. Not verifiable as of 2026‑08‑29. ## Lock‑ups, Withdrawals, Fees
  • Lock‑ups: Some strategies may have soft lock‑ups or withdrawal queues tied to underlying protocol liquidity; others may be instant subject to on‑chain settlement. Not verifiable as of 2026‑08‑29.
  • Withdrawal mechanics: Users withdraw from Plasma vaults, unwinding positions and realizing accrued yield as vault shares or underlying tokens.
  • Fees: Protocol‑level performance and/or management fees are taken at vault level; structure and rates vary by product. Exact fee schedule is not independently verified. Not verifiable as of 2026‑08‑29. ## Protocol Revenue & Collateral Model
  • Protocol revenue: Plasma earns fee income from vaults (e.g., performance/management fees) and potentially a share of external rewards.
  • Collateral: User deposits in vaults function as the economic collateral backing strategies; risk depends on underlying protocol health and Plasma’s risk controls. ## TVL & APY
  • TVL total/by product/by chain: Independent aggregators (e.g., DeFiLlama) list Plasma TVL by product/chain, but numbers cannot be validated against raw on‑chain data. Not verifiable as of 2026‑08‑29.
  • Trend: Apparent TVL growth/decline over time in analytics dashboards is aggregator interpretation, not on‑chain verified.
  • APY history/volatility: APYs per vault vary with external yields and incentives; historical volatility and sustainability are not independently quantifiable without Dune or explorer‑level position data. Not verifiable as of 2026‑08‑29.
Evidence (2)

reserves

two sources

Not verifiable as of 2026-08-29. The available search results do not identify Plasma’s treasury/reserve wallets, custody structure, reserve policy, attestations, or on-chain balances, and the results returned are unrelated plasma-blood pages or price/listing pages rather than treasury disclosures for the DeFi protocol. I also could not confirm any Dune-based on-chain reserve figures, so no size/composition breakdown can be stated confidently. If you want, I can next check the protocol’s docs, governance, audits, and independent media for any treasury addresses or attestations, but on-chain verification remains unavailable in this run.

Evidence (3)

Stress scenarios

stress scenario - bitcoin price falls below $10000

two sources

For Plasma, a Bitcoin drop below $10,000 is a severe macro stress scenario that would most likely hit the protocol through *risk-off selling, thinner liquidity, and lower user activity* rather than through any Bitcoin-specific on-chain failure. The web results provided do not contain verifiable, protocol-specific evidence that Plasma has a BTC-pegged collateral structure or an automatic solvency trigger tied to Bitcoin’s price, so those channels are Not verifiable as of 2026-08-29. What can be said with the available sources is limited: the market is already treating Plasma as a high-beta crypto asset, and several external commentaries discuss XPL as vulnerable to broader macro shocks, token unlock pressure, and weak risk sentiment. That implies that if BTC were to break below $10,000, Plasma would likely face *secondary stress* from reduced speculative demand and broader crypto deleveraging. In practical terms, the stress path would likely look like this:

  • Initial shock: Bitcoin crash accelerates portfolio de-risking across crypto markets.
  • Liquidity effect: bid depth in smaller assets like XPL typically worsens faster than in BTC, increasing slippage.
  • Protocol impact: if Plasma relies on new inflows, collateral growth, or active usage, those metrics would likely weaken materially; however, the magnitude is Not verifiable as of 2026-08-29.
  • Tail risk: if Plasma has any BTC-linked incentive, treasury, or settlement exposure, the impact could be more direct, but no provided source confirms such exposure. Not verifiable as of 2026-08-29. The key risk finding is therefore indirect contagion, not confirmed balance-sheet impairment: a BTC sub-$10k event would likely compress Plasma’s token price and activity through market structure channels, while any claim of direct protocol insolvency remains unverified with the sources available.
Evidence (7)

stress scenario - largest collateral depegs 20%,

unverified

Not verifiable as of 2026-08-29. The available sources do not identify Plasma’s specific lending/collateral markets, collateral composition, or the size of the largest collateral position, so a 20% depeg stress test on the largest collateral cannot be quantified reliably from the provided evidence. Plasma’s own educational material explains that depegs can trigger liquidation, widening haircuts, and run dynamics under stress, but it does not provide protocol-specific exposure data needed for an institutionally defensible loss estimate. The only protocol-adjacent exposure detail in the results is a third-party report stating that xUSD collateral was used across several lending venues, including Plasma, and that the largest Plasma exposure mentioned there was an $84 million USDT loan collateralized by xUSD; however, this does not establish Plasma’s own total collateral stack or the broader system’s largest collateral on Plasma. Because no on-chain verification is available in this run, the stress outcome remains not verifiable. If you want, I can still provide a *framework* for the 20% depeg shock calculation once you supply the largest collateral asset, its value, and the liquidation parameters.

Evidence (2)

stress scenario - top counterparty insolvent — each with expected loss path, who absorbs it, compensation, and the impact path through the smart contracts;

unverified

Plasma’s published risk disclosure says that in *extreme market scenarios* the Insurance Vault may be depleted, and if the protocol becomes insolvent, socialized loss mechanisms may trigger, reducing the value of user holdings to cover system debt. Based on that disclosure, the expected loss path in a top-counterparty-insolvent stress would be: a counterparty loss first consumes protocol protection capital, then any remaining shortfall is pushed to users through socialized loss; the loss is borne by protocol users rather than external creditors. The compensation mechanism is therefore *internal* rather than a third-party bailout: users are compensated only to the extent the Insurance Vault and any other available protocol resources can absorb the loss; once exhausted, compensation becomes partial and holdings are haircut. The impact path through the smart contracts, as described publicly, is not fully verifiable from the available sources as of 2026-08-29; the precise contract-level flow, trigger conditions, and liquidation sequence are Not verifiable as of 2026-08-29.

Evidence (1)

stress scenario - committed fraud by the DAO or owners

two sources

Not verifiable as of 2026-08-29. The provided search results do not identify the specific *Plasma* protocol at plasma.to, nor do they contain independent evidence that its DAO or owners committed fraud. The results only provide general background on DAO fraud risks and Plasma-style fraud proofs, which is not sufficient to attribute misconduct to this protocol. For a stress scenario, the most relevant generic failure mode for a DAO-controlled DeFi protocol is governance or treasury abuse: insiders could potentially misappropriate treasury assets, alter parameters to their benefit, or conceal insolvency if they control governance or admin keys. That is a general risk model, not a verified allegation about Plasma. Because this run cannot use Dune or other on-chain verification, any claim about treasury movements, admin control, or fraudulent behavior by Plasma’s DAO/owners remains Not verifiable as of 2026-08-29.

Evidence (6)

stress scenario - primary yield source negative 30d,

two sources

This looks not verifiable as stated because the search results do not identify the Plasma DeFi protocol or any 30-day primary yield source data; they mostly return unrelated scientific results about physical plasma and plasma donation. Therefore, I cannot confirm whether the protocol’s primary yield source was negative over the last 30 days. For a stress scenario write-up, the safest conclusion is: Not verifiable as of 2026-08-29. The only defensible statement from the provided evidence is that the search set contains no protocol-level, on-chain, or analytics source for Plasma’s yield composition or 30-day performance. If you want, I can help structure a stress-note template for Plasma using whatever protocol disclosures, dashboards, or chain data you can provide.

Evidence (3)

Governance & Legal

governance

one source

Available information on Plasma’s governance is fragmentary and largely marketing‑style; critical aspects such as contract ownership, timelocks, and treasury control are Not verifiable as of 2026-08-29 due to lack of on-chain tooling in this run and limited independent documentation. ### 1. Governance structure & control

  • Plasma presents itself as a restaking / yield aggregation protocol operating on multiple chains, but there is no clear, independent description of a formal DAO, governance token, or proposal process in third‑party sources.
  • No credible analytics or audit platforms (DefiLlama, L2Beat, Token Terminal, major security firms) provide a detailed governance breakdown for Plasma.
  • Key questions — who controls core contracts, upgrade keys, frontends, or treasury contracts — are Not verifiable as of 2026-08-29. Any claims made solely on the official site/docs would be “unverified marketing claim”. ### 2. Governance token, voting process, DAO reality
  • I could not find a widely‑tracked governance token (with voting power, on‑chain proposals, or Snapshot/Aragon/Tally pages) tied unambiguously to this Plasma protocol.
  • No public record of:
  • On‑chain or off‑chain governance proposals or voting history.
  • DAO‑style frameworks (e.g., SafeSnap, Governor Bravo) in independent tools.
  • Therefore whether a DAO exists at all, or is merely symbolic, is Not verifiable as of 2026-08-29. ### 3. Ownership concentration & timelocks
  • Without Dune and with no verified token governance traces in major explorers/trackers, voting concentration, top token holders, and timelock configurations for governance or upgrade contracts are Not verifiable as of 2026-08-29. ### 4. Multisig(s) and signers
  • I did not find reliable third‑party descriptions of any multisig address(es) for Plasma’s core contracts, treasury, or admin keys, nor their signer count, threshold, or identities.
  • Independence of signers (team vs VC vs community) is therefore Not verifiable as of 2026-08-29. ### 5. Legal entity, ToS, and jurisdiction
  • Open‑web and corporate registry searches did not surface a clearly associated corporate entity (LLC, foundation, etc.) with confirmed linkage (matching team, contracts, or official disclosures).
  • I could not reliably locate a Terms of Service or legal notice hosted under plasma.to that is cited or mirrored by independent sources; any such document, if present only on the site, would be an unverified marketing claim. Net assessment: from independent data, Plasma should be treated as a black‑box / opaque‑governance protocol: who controls upgrades, funds, and frontend is not independently knowable under the current constraints, and there is no verifiable evidence of a functioning, binding DAO as of 2026‑08‑29.
Evidence (2)

legal & regulatory

unverified

Plasma appears to be a Cayman Islands-based operator: its Terms of Service state the service is operated by Plasma, an exempted company with limited liability incorporated under the laws of the Cayman Islands, and related card/reward terms also reference Cayman law and Cayman arbitration. Its legal/compliance posture is explicit: access to Ramp Services and the Plasma One Card is subject to KYC/AML verification, the company may disclose registration, KYC, wallet, device, and transaction data in response to legal process or sanctions inquiries, and use is prohibited for users, entities, and wallet addresses tied to comprehensively sanctioned or high-risk jurisdictions. For data protection, Plasma’s privacy policy says user inquiries about privacy rights can be directed to the privacy contact listed on the policy page, but the more detailed legal treatment in the Terms indicates broad data collection and disclosure rights for compliance and fraud prevention. This supports a risk view that the platform is designed to operate with significant compliance controls rather than as an anonymous, permissionless system. On classification, Plasma’s own materials describe it as a Layer 1 blockchain purpose-built for stablecoin payments, with separate content discussing payment stablecoins, compliance, and regulatory alignment; however, these are protocol-authored descriptions and should be treated as *unverified marketing claims* absent independent legal classification. The same docs also emphasize confidential payments and selective disclosure, which may reduce public traceability but do not eliminate legal or enforcement risk. I found no independent court case, regulator action, or sanctions designation specific to this protocol in the gathered material, so those items are Not verifiable as of 2026-08-29. The main legal risk is therefore structural: Cayman-governed centralized service terms, mandatory KYC/AML for key products, jurisdictional exclusions, and broad disclosure rights create a materially different risk profile than a purely decentralized protocol.

Evidence (5)

Stability

stability

two sources

The stablecoin Plasma highlights for its payments flow is USDT. Based on the provided sources, USDT has depegged before; the clearest documented episode in these results is May 12, 2022, when it fell to about $0.945 on some exchanges, which is about a 5.5% depeg from $1.00. The same source says it recovered within 24 hours. I do not have a verifiable count of how many times the stablecoin used by Plasma has depegged, because the results only clearly document that one USDT event and do not provide a complete, protocol-specific history. Not verifiable as of 2026-08-29.

Evidence (3)

Risks & Strengths

risks

one source

Plasma appears to face five main risks: Tether concentration risk, bridge dependency, token unlock / sell-pressure risk, nascent consensus/security risk, and short-track-record / unverified-audit risk. The strongest concern is that Plasma’s economic activity is reported to depend heavily on USDT/USDT0, so any change in Tether support could materially reduce usage and TVL. Plasma also depends on bridged stablecoin infrastructure (LayerZero OFT), which creates an external protocol dependency if messaging or bridge security fails. Another material risk is XPL token overhang: Hindenburg reports large upcoming unlocks and limited circulating supply, which could create selling pressure and weaken validator economics. A fourth risk is consensus/security maturity: PlasmaBFT is described as a relatively new production system, with a reward-only slashing model that may provide weaker deterrence than stake-slashing designs. Finally, the protocol’s short operating history and the report’s note of unverified public audit status mean there is limited evidence of long-run resilience under stress. I could not independently verify on-chain TVL, unlock schedules, or audit status from the available web results, so those points remain Not verifiable as of 2026-08-29.

Evidence (2)

strengths

two sources

Plasma’s top strengths are: stablecoin-native design (built specifically for USDT and payment flows), zero-fee USDT transfers (a strong user and liquidity acquisition wedge), high performance via PlasmaBFT with fast finality and high throughput, EVM compatibility for easy developer onboarding, and Bitcoin-native functionality through a trust-minimized BTC bridge. A further strength is the reported integrated infrastructure and liquidity support, including partner-enabled on/offramps and a claimed ~$2B in USDT available at launch, though that liquidity figure comes from protocol-facing material and should be treated as an unverified marketing claim until independently confirmed.

Evidence (3)

Methodology & Limitations

  • On-chain metrics: not verifiable — Dune phase 2 is not enabled.
  • 3 of 24 fact categories not yet collected.
  • Fact verifiability: 12 two independent sources, 4 one source, 6 unverified.
  • Oldest fact verification date: 2026-08-29.