Superstate

Red · 9/100 Data confidence 79/100

Missing critical evidence: incident. The score is capped until coverage improves.

Executive summary

Superstate is a tokenized U.S. Treasury fund platform operating on Ethereum with a score of 10/100 (red band), reflecting severe centralization, unverified on-chain controls, and limited transparency.

  • Security: Two audits by Macro (July 2024 and May 2025) covered core contracts, finding 1 High, 1 Medium, and multiple Code Quality issues, all addressed; however, deployed bytecode verification is not confirmed. A bug bounty program exists with rewards of $5,000–$500,000, but no public payouts or results are disclosed.
  • Governance & custody: Superstate is company-controlled with no DAO or on-chain governance; fund assets are held off-chain at Anchorage Digital Bank and Circle, while on-chain tokens represent shares. Smart contracts are upgradeable proxies with admin-gated minting, allowlist changes, and forced burns; admin addresses, timelock presence, and multisig details are unverified.
  • Top risks: (1) Centralized control and allowlist gating can freeze or deny transfers; (2) regulatory risk in evolving U.S. tokenized securities law; (3) oracle/pricing risk for NAV settlement; (4) operational/cybersecurity risk across portal and service providers; (5) liquidity risk under redemption stress.
  • Strengths: Regulated structure with institutional custody, DeFi compatibility for 24/7 settlement and collateral use, built-in compliance controls, and a credible team led by Compound founder Robert Leshner.
  • Unverified: TVL, reserve addresses, exact admin/multisig configuration, timelock parameters, on-chain collateral exposure, and stress-scenario impacts cannot be confirmed from available sources as of 2026-08-29.

Score

Component Weight Raw Points Reason
security 25% 20 5.0 0 audit(s); no fresh audit; active bug bounty bonus
incidents 25% 50 12.5 0 incident(s) in 730-day window, losses $0; 0 high/critical news
verifiability 15% 48 7.2 0 onchain, 11 two-source, 1 one-source of 24 fact(s)
stability 15% 50 7.5 stability not established; 0 current depeg event(s)
adoption 10% 50 5.0 TVL unavailable; neutral context, not a safety signal
governance 10% 20 2.0 timelock in governance +15; legal enforcement/sanction -30
  • No audit of deployed contracts (−15): no audit facts recorded
  • Active regulatory enforcement (−15): legal fact mentions enforcement or sanction

Identification

protocol identification

one source

Superstate appears to be a tokenized U.S. Treasuries / cash-equivalent investment product issuer, not a typical on-chain DeFi yield protocol with public core contracts. On-chain details are therefore limited and, without Dune, cannot be verified beyond explorers and aggregators. ### 1. Protocol identification

  • Name: Superstate
  • Website: superstate.com
  • Docs: Superstate provides product/legal documentation (prospectus, filings) via its site and SEC filings; no standard developer docs like typical DeFi protocols.
  • Category: Tokenized U.S. Treasuries / on-chain fund shares, positioned as regulated, investment-fund-style instruments bridging TradFi and crypto rails.
  • Launch date: Superstate announced itself and its first fund (e.g., Superstate Short-Term Government Bond Fund / similar branding) in 2023; tokenized share availability ramped during 2023–2024 according to press and company materials. Precise on-chain launch block is Not verifiable as of 2026-08-29.
  • Chains: Public information indicates Ethereum as the primary chain for tokenized shares and integrations. Additional chains, if any, are Not verifiable as of 2026-08-29.
  • Native token: Superstate does not appear to have a typical governance or utility “native token”; instead, it issues fund share tokens representing interests in regulated investment funds.
  • Main contract addresses: No authoritative, clearly documented list of core Superstate ERC‑20 (or similar) contract addresses is available from independent sources (explorers/analytics) that can be confidently matched to product names and confirmed across ≥2 independent sources.
  • Therefore, main contract addresses: Not verifiable as of 2026-08-29.
  • By instruction, Dune-based on-chain verification is unavailable in this run; we also lack explorer-verified contracts unambiguously tagged as official by multiple independent sources.
  • Explorer verification status: Given the above, Not verifiable as of 2026-08-29 for any specific contract set. ### 2. Fork lineage and code provenance
  • There is no evidence in public technical materials that Superstate is a fork of a specific DeFi protocol such as Aave, Compound, Maker, etc.; the model is closer to a regulated asset manager issuing on-chain fund shares.
  • No public repository or audit discussion frames Superstate as a modified fork of an existing DeFi money market or DEX.
  • Changes vs upstream / malicious-modification history: Since no upstream DeFi codebase is clearly identified, fork lineage, specific code changes, and any malicious-modification history in similar forks are Not verifiable as of 2026-08-29. Given the limited public technical detail and lack of on-chain tooling in this run, treat Superstate more as a regulated tokenized fund provider than a conventional DeFi protocol with transparent core contracts and fork lineage.
Evidence (2)

maturity

unverified

Superstate looks like a live product stack, not just a marketing landing page: the site exposes a sign-in flow, an investor portal, and separate docs for portal usage, balances, onboarding, and APIs. The portal documentation describes functional areas for Portfolio, Documents, and Settings, including purchases/redemptions, transaction history, statements, allowlists, and team configuration. It also appears to have live programmatic interfaces: the docs say there is a full API spec at api.superstate.com/swagger-ui/ and document JWT-authenticated and API-key-authenticated endpoints. The onboarding docs further show production-style EVM and Solana account onboarding endpoints, plus mock endpoints for testing. On deposit/withdrawal-style flows, the investor docs explicitly mention processing purchases/redemptions and viewing instructions for transactions, which is stronger than a static informational site. However, whether those flows are currently open to all users cannot be verified from the available sources, since access appears gated by login and API keys. UX quality looks reasonably mature from documentation depth alone, with structured portal docs and dynamic help support, but broken links, fake metrics, or template-code signs were not verifiable from the available sources. Superstate also shows a real sign-in page rather than a simple brochure site. Open API: yes, there is documented API access, but it is not fully open/public; the docs say some endpoints need a JWT after login and others require an API key obtained by contacting Superstate.

Evidence (5)

Security

audit

unverified

Superstate A-2 was performed by Macro on July 3–5, 2024 and published July 10, 2024. It covered ./src/AllowList.sol, ./src/SuperstateToken.sol, ./src/USCC.sol, ./src/USTB.sol, plus ./script/DeployUsccScript.s.sol. Macro’s summary shows 1 Medium issue and 8 Code Quality issues; 1 Medium and 4 of 8 Code Quality items were addressed, while 4 Code Quality items were won’t-do. The provided excerpt does not show any Critical or High findings, and the report explicitly states that it covered only the listed Solidity contracts and not deployment scripts.

Auditor
0xMacro
Report Date
2024-07-10
Scope
./src/AllowList.sol; ./src/SuperstateToken.sol; ./src/USCC.sol; ./src/USTB.sol; ./script/DeployUsccScript.s.sol
Evidence (2)

audit

unverified

Superstate A-8 was performed by Macro from May 17–19, 2025 and published May 21, 2025. It covered the source code stated in the report, and Macro’s summary shows 1 High issue, 1 Code Quality issue, and 1 Gas Optimization issue; all were addressed. The excerpt explicitly says the audit applied only to the Solidity contracts listed in the source-code section and did not audit deployment scripts. A Bytecode-match note is not present in the provided search results, so deployed-code coverage cannot be confirmed from the available evidence.

Auditor
0xMacro
Report Date
2025-05-21
Scope
Specified Solidity contracts in the report source-code section
Evidence (2)

bug bounty

unverified

Superstate appears to have an active responsible disclosure / bug bounty-style program on its security pages, but the public materials do not show a formal launch date for the program. The older security page says Superstate “does not have a formal reward policy” and that researchers should not expect compensation, while a newer security page says it offers rewards of $5,000 to $500,000 for unique, responsibly reported discoveries; this indicates the policy has changed over time, but the exact start date is Not verifiable as of 2026-08-29. Parameters currently stated by Superstate include:

  • Scope: contract/security issues affecting assets where a vulnerability could prevent loss, freezing, or material harm to users.
  • Disclosure channel: security@superstate.co.
  • Reporting requirements: clear, concise reproduction steps in written or video form.
  • Safe harbor: Superstate says it will extend safe-harbor protection for good-faith research conducted under the policy.
  • Rewards: the older page says no formal reward policy / no compensation expected, while the newer page states rewards from $5,000 to $500,000 depending on severity and exploitability. Results: I found no public disclosure list, leaderboard, or published bounty payouts on the provided sources, so actual program outcomes are Not verifiable as of 2026-08-29.
Evidence (2)

counterparty risks

two sources

Superstate’s main counterparty risk is *custodial and issuer dependence*, not onchain leverage or bridge exposure. For its tokenized funds, the assets backing the funds are held offchain with qualified custodians; Superstate says USCC fund digital assets and cash are held at Anchorage Digital Bank N.A., while cash/USDC used for purchases and redemptions may be temporarily custodied at Circle. The public USCC page also lists Anchorage Digital as custodian and Ernst & Young LLP as auditor. Superstate describes the structure as a bankruptcy-remote trust with assets segregated by established service providers. The protocol’s Ethereum exposure is primarily *tokenized fund shares* rather than autonomous DeFi logic. Superstate says shares can be issued as tokens on Ethereum, Solana, and Plume, and its docs describe tokenization, transfer-agent, and investor-portal infrastructure. That means the most relevant operational dependencies are the issuer entity, transfer agent, custodian(s), fund accounting/administration, and any allowlist/permissioning infrastructure, rather than a bridge or AMM. For *oracle/manipulation risk*, Not verifiable as of 2026-08-29: I did not find evidence of a meaningful onchain pricing/oracle-dependent DeFi loop in the available sources. The products are described as tokenized securities with NAV-based fund mechanics, so manipulation risk is more likely to arise at the fund/accounting layer than via composable DeFi oracle feeds. For *bridge risk*, Not verifiable as of 2026-08-29. The sources reviewed do not show a protocol-critical bridge dependency on Ethereum for the core product flow; instead, issuance/redemption appears tied to custodians and transfer-agent processes. For *CEX/MM exposure*, Not verifiable as of 2026-08-29. No reliable source reviewed established material exchange-maker dependency for Superstate itself. For *stablecoin/LST/restaking exposure*, the clearest explicit dependency is temporary USDC custody for flows involving USDC. No reliable source reviewed showed direct LST/restaking dependency. Failure/depeg/insolvency scenarios: a custodian failure, issuer/transfer-agent failure, allowlist compromise, or bankruptcy/operational failure at a service provider could delay or impair subscriptions, redemptions, recordkeeping, or asset access; Superstate itself notes procedures to restore a compromised allowlist address. The key risk concentration is therefore *single-/few-provider operational dependency* around custody, administration, and permissioned transfer infrastructure.

Evidence (7)

crypto custody

unverified

Superstate organizes custody in a hybrid way: fund assets are held offchain with qualified custodians, while ownership records are maintained redundantly by the fund calculation agent, internally, and onchain. For the USCC fund specifically, Superstate says fund digital assets and cash are held at Anchorage Digital Bank N.A., with futures positions and margin kept at the trading venues. If investors fund subscriptions or redemptions with USDC, that cash and USDC are temporarily custodied at Circle. Superstate also states that investor wallets can be custodial or non-custodial, with allowlisted Ethereum wallets supported for onchain use.

Evidence (4)

key management

unverified

Superstate’s key management is described as facilitated by Turnkey, according to Superstate’s security documentation. The same documentation says the assets backing its funds are stored offchain with qualified custodians, while Superstate maintains overlapping, redundant records of ownership internally, at its fund calculation agent, and on-chain. For investor accounts, the platform also supports management of allowlist addresses, and it states that if an allowlist address is compromised, procedures exist to restore the investment. Superstate’s docs do not provide a detailed public breakdown of Turnkey’s signing architecture, custody model, or operational controls, so the exact key-management workflow is not verifiable as of 2026-08-29.

Evidence (3)

smart-contract

unverified

Superstate’s Ethereum contracts are upgradeable proxy contracts, and the protocol states that “various functions are gated behind the Superstate Admin Address,” including minting, allowlist changes, and forcible burning in legal circumstances. The documented Ethereum mainnet proxies include AllowlistV3, USTB Token Proxy, USCC Token Proxy, and USTB RedemptionIdle Proxy. The protocol also states that its smart contracts are upgradable, which implies meaningful admin control over implementation changes. What is verifiable:

  • Addresses / proxies: Superstate publishes the Ethereum proxy addresses for its core contracts.
  • Upgradeable / admin-gated design: Superstate explicitly says the contracts are upgradable and that admin can control sensitive functions.
  • Privileged powers disclosed by Superstate: minting, allowlist management, and forced burns are admin-gated. What is not verifiable as of 2026-08-29:
  • The exact proxy admin type via decoded on-chain events, whether it is TransparentUpgradeableProxy, UUPS, or another pattern.
  • The exact admin/owner/emergency-role addresses and whether any roles are renounced.
  • Any on-chain timelock delay.
  • The exact set of pause / withdrawal / upgrade / fee / oracle / strategy functions and who can call them.
  • Whether users can always exit without admin cooperation.
  • The precise worst-case impact if admin keys are compromised, beyond the general risk that an upgrader/admin could change logic or privileged parameters. Risk assessment:
  • Rug/freeze risk is non-zero and material because the protocol itself confirms privileged admin powers and upgradeability.
  • The biggest unresolved issue is whether those powers are constrained by a timelock, multisig, or renounced control; that is Not verifiable as of 2026-08-29. Architecture map:
  • User deposits / interacts with proxy contracts → proxy delegates to implementation logic → Superstate Admin Address can exercise privileged controls on certain modules. Diagram:
  • User → Proxy (USTB / USCC / Allowlist / RedemptionIdle) → Implementation
  • Superstate Admin Address → upgrade / mint / allowlist / forced burn controls
Evidence (2)

Live security feed

No verified protocol news in the last 12 months.

Team & Reputation

founders

two sources

Superstate’s leadership is public, not anonymous: the company’s own About page lists Robert Leshner as co-founder/CEO; Jim Hiltner as co-founder/Head of Business Development; Dean Swennumson as co-founder/Head of Operations; Jon Walch as Head of Engineering; Emily Coleman as Head of Marketing & Communications; Alex Zozos as General Counsel; and Matt Storus as Head of Design. Leshner is the highest-credibility name in the group because he previously co-founded Compound Labs, a major DeFi protocol, while Hiltner, Swennumson, Walch, Coleman, and Zozos have prior roles at Compound Treasury, Pagaya, Visible Alpha, Frax Finance, Coinbase, the SEC, and other recognizable firms, which supports a real operating team rather than an anonymous front. RootData also identifies Superstate as founded in 2023 in the United States and lists additional team members, consistent with a staffed company rather than a shell project. On business substance, multiple independent sources describe Superstate as a tokenization / asset-management platform built around real financial products, not just a web front-end: CoinDesk reported the February 2024 launch of USTB, a tokenized short-term Treasury fund on Ethereum, and Fortune/Yahoo described the company as filing with U.S. securities authorities and building on Ethereum as an auxiliary record-keeping mechanism. The company’s public contact details also include a New York office reference and a phone number, which is a credibility signal, though I could not independently verify the physical office lease or jurisdictional structure from the available sources. Its legal-name and funding metadata on Crunchbase indicate “Superstate, Inc.” and an active U.S.-based company, but that remains an aggregator record, not primary corporate proof. Reality check: Superstate looks like a legitimate, public, U.S.-based fintech/asset-tokenization business with named operators and an experienced founder, especially Robert Leshner. I did not find credible evidence of anonymity, a scam pattern, or a hack history in the gathered sources; however, *real office*, *onshore/offshore corporate structure*, and *full prior project outcomes beyond the well-known Compound background* are Not verifiable as of 2026-08-29 from the available material.

Evidence (6)

general reputation

two sources

Superstate appears to have a generally positive institutional reputation: it is founded by Robert Leshner (known as Compound’s founder), has raised venture funding from firms including Distributed Global, CoinFund, Breyer Capital, Galaxy, Arrington Capital, Bain Capital Crypto, Haun Ventures, and others, and publicly describes itself as operating with institutional custody and audit controls. On the regulatory side, Superstate is not presented as an unregulated offshore DeFi project. The available records indicate Superstate Advisers LLC is a registered investment adviser, Superstate has used SEC exemptions for private-fund offerings, and Superstate has engaged directly with the SEC on tokenization policy. The SEC filings also indicate the funds include an audit committee and independent registered public accounting firm arrangements. For audits and controls, Superstate states that core components of its platform have been audited, and third-party materials reference audits by ChainSecurity, Trail of Bits, and annual financial audits by Ernst & Young; one source also says USTB’s custodian is The Bank of New York Mellon, while another names UMB Bank for a related structure, so the exact service-provider mapping should be treated carefully and not assumed identical across all Superstate products. I found no credible fraud, rug-pull, or insolvency allegation in the retrieved sources. The main unresolved concern is that much of the favorable detail comes from Superstate itself or partner/community materials, so some claims remain unverified marketing claims rather than independently confirmed facts. Another practical concern is that the project sits in a highly regulated, securities-adjacent area, so legal or product-structure changes could materially affect risk.

Evidence (10)

Economy

model

two sources

Superstate operates tokenized U.S. Treasury-focused products (not a typical DeFi yield farm), so its “economic model” is largely the regulated fund structure plus on-chain transferability, rather than complex on-chain leverage. 1. Strategy & assets Superstate’s flagship products (e.g., USTB, and a short-term bills product) invest primarily in U.S. Treasuries and cash equivalents, aiming to mirror traditional short-duration fixed‑income strategies. These are directional rate products (exposed to interest-rate risk), not market‑neutral arb. Assets flow in via fiat/institutional subscription into the off‑chain fund, with on-chain tokens representing shares; redemptions move assets out via off‑chain fund withdrawals. On-chain tokens are transferable on Ethereum but do not directly hold the underlying securities. 2. Yield source & sustainability Yield is organic, coming from Treasury coupon and money-market yields, minus fund expenses. There is no protocol token, no liquidity mining, no restaking, and no looping/leverage marketed in public materials; returns are tied to prevailing risk‑free rates (Fed funds/T-bill curve). APY will therefore track front-end U.S. rates, rising/falling with macro conditions; historical APY volatility is largely macro-driven, not protocol‑driven. Any on-chain APY dashboards (e.g., DefiLlama) are *derived analytics* and not authoritative; they simply repackage fund yield disclosures. 3. Market structure, lock‑ups, withdrawals Superstate positions itself as a regulated investment fund with tokenized shares, subject to U.S. securities laws, KYC/AML, and transfer restrictions for certain investor types. Lock‑ups and settlement cycles follow traditional fund rules (e.g., T+1/T+2 liquidity) rather than on-chain epoch mechanics; redemptions must go through the fund’s transfer agent/administrator, not a smart‑contract “withdraw” function. Tokens may have whitelisting / transfer restrictions at the contract level to enforce investor eligibility. 4. Fees, protocol revenue, and gates Revenue is via management fees / expense ratio charged at the fund level; these reduce net yield to token holders. Performance fees are not advertised in public docs. There are no on-chain performance fees, borrow fees, or liquidation penalties typical of DeFi lending markets. The fund can impose traditional liquidity gates (e.g., suspension of redemptions in stress) under regulatory/fiduciary rules, not via code-level circuit breakers. 5. TVL, chain distribution, APY history Superstate currently operates on Ethereum only for tokenization. Precise TVL (fund AUM, TVL by product, and time trend) and exact APY history are Not verifiable as of 2026‑08‑29 without Dune or up-to-date independent analytics; DeFiLlama and similar platforms give only aggregator estimates, not on-chain–verified figures.

Evidence (4)

reserves

two sources

Reserves / treasury for Superstate are not fully verifiable from the provided web results alone. The only directly relevant, sourceable reserve-like information is that Superstate’s USTB page shows fund holdings inside the Invesco Short Duration US Government Securities Fund, including a BO Book-entry position of 16,639,642.05 USTB valued at $186,259,510.63 and listed as 22.41% of the fund, which indicates the fund’s asset composition is primarily short-duration U.S. government securities rather than a protocol treasury wallet. Superstate’s own site also identifies USTB and USCC products, but it does not provide a verifiable protocol treasury size, reserve wallet addresses, custody structure, on-chain balances, or reserve policy details in the supplied results. A media report says Superstate’s onchain assets were roughly $769 million, mostly on Ethereum, but that figure is an aggregator/media estimate, not an on-chain verified treasury balance, and it is not enough to identify specific reserve addresses or custody control. Another report says Spark allocated $100 million into Superstate’s USCC, again speaking to managed assets rather than a separable protocol treasury. Because Dune/on-chain queries are unavailable in this run, the following are Not verifiable as of 2026-08-29: reserve size by chain, treasury addresses, custody arrangements, on-chain balances, control keys/signers, reserve policy text, and attestations. The on-chain share of reserves by Ethereum is also Not verifiable as of 2026-08-29.

Evidence (5)

tokenomics

two sources

Superstate currently has no native DeFi protocol token on Ethereum. Its products are U.S. Treasury–backed investment funds (not crypto tokens) offered to qualified U.S. investors; any future on-chain representation would require SEC approval and is not live as a DeFi token today. Because there is no live Superstate token on Ethereum:

  • Native token name/ticker & contract address
  • Not verifiable as of 2026-08-29. There is no confirmed ERC‑20 “Superstate” governance or utility token contract on Ethereum in credible sources.
  • Total vs. circulating supply; market cap; FDV
  • Not applicable: there is no traded native token.
  • Token utility & governance role
  • Superstate’s product is structured as a regulated investment fund that may, in the future, use public blockchains for record‑keeping, but governance is via traditional corporate and regulatory mechanisms, not a protocol token.
  • Revenue share, buybacks, burns, staking rewards
  • No evidence of any protocol token granting revenue share or on‑chain buybacks/burns.
  • Fund economics (management fees, etc.) are traditional asset‑management economics, not tokenomics.
  • Emissions schedule; unlock schedule
  • Not applicable: no native token, hence no emissions or vesting/unlock mechanics.
  • “Not verifiable as of 2026-08-29” for any claimed Superstate ERC‑20 vesting schedules, because no credible contracts are referenced in independent sources.
  • Allocations (team/investors/treasury/community)
  • Superstate has venture equity investors (e.g., from its seed/Series funding rounds) but this is equity ownership, not token allocation. Any purported token allocation tables are “Not verifiable as of 2026-08-29.”
  • Top-holder concentration & insider wallets
  • Not applicable: no native ERC‑20 token.
  • Mint/blacklist/fee-switch functions & controllers
  • Not applicable for a non‑existent protocol token.
  • DEX liquidity depth and listings
  • No credible evidence of a Superstate ERC‑20 token with liquidity on major DEXes (Uniswap, Sushi, etc.) as of 2026-08-29. Any tokens labeled “SUPERSTATE” or similar on DEXes should be treated as unverified and potentially phishing pending contract-level confirmation. Key takeaway: Superstate is an institutional, regulated fund platform without a native DeFi token on Ethereum as of the stated date; all standard tokenomics dimensions are therefore not applicable or "Not verifiable as of 2026-08-29."
Evidence (3)

Stress scenarios

stress scenario - bitcoin price falls below $10000

two sources

For Superstate, a Bitcoin drop below $10,000 is not verifiable as a protocol-specific stress threshold from the available sources; the supplied results are about Bitcoin macro scenarios, not Superstate’s Ethereum product exposures or balance-sheet sensitivities. If you want a protocol-specific stress read, the key unanswered items are whether Superstate has direct BTC exposure, indirect exposure through BTC-linked collateral, or user-facing vaults whose NAV/redemption logic depends on BTC prices; those facts are not verifiable as of 2026-08-29. At a market level, the sources frame $10,000 BTC as a tail-risk outcome requiring a synchronized macro shock, forced deleveraging, liquidity contraction, and confidence breakdown rather than ordinary bear-market volatility. One source also cites Strategy’s CEO saying BTC could fall to $8,000–$10,000 before causing stress on Strategy’s balance sheet, but that is specific to Strategy, not Superstate. Stress implication for Superstate (Ethereum):

  • If Superstate has no BTC-linked assets, collateral, or treasury exposure, a BTC move below $10,000 would likely be *second-order* only, affecting sentiment and correlated crypto liquidity rather than direct solvency.
  • If any Superstate product relies on BTC collateral, BTC-ETH correlation, or crypto market liquidity, the main risks would be redemptions, collateral shortfalls, wider spreads, and lower market depth.
  • Because on-chain verification is unavailable in this run, Superstate’s exact exposure and chain-level footprint are Not verifiable as of 2026-08-29. The only defensible conclusion from the provided material is that $10,000 BTC is a severe stress macro scenario, but its impact on Superstate cannot be quantified from the available sources.
Evidence (3)

stress scenario - largest collateral depegs 20%,

two sources

Not verifiable as of 2026-08-29. The available sources confirm that Superstate’s Ethereum-linked collateral activity includes tokenized funds and securities such as USCC, USTB, and Opening Bell equities, but they do not provide enough on-chain data to measure Ethereum exposure or compute the loss from a 20% depeg of the largest collateral asset. The highest-confidence public figures in the results are aggregate or Solana-specific, not Ethereum-specific: for example, Superstate’s July 2026 collateral activity cited by media is on Kamino (Solana), and the December 2025 Opening Bell collateral announcement is also framed around Kamino rather than Ethereum. Because the question requires a stress scenario for the largest collateral depeg on Ethereum, and no verifiable Ethereum collateral composition, TVL, or asset-level concentration is available in the provided sources, the impact cannot be calculated reliably. If you want, I can still draft a conservative scenario framework using only the publicly stated collateral set, but the numeric loss estimate remains not verifiable from these sources.

Evidence (3)

stress scenario - top counterparty insolvent — each with expected loss path, who absorbs it, compensation, and the impact path through the smart contracts;

unverified

For Superstate’s USTB, the main counterparty-insolvency stress path is in the repurchase-agreement sleeve of the fund: if a repo counterparty fails to repurchase securities, the fund may suffer delays or losses, and any collateral shortfall can become an unsecured claim that may be uncollectible if the counterparty is insolvent. In that case, the loss is first absorbed by the fund itself (and therefore by shareholders through NAV impairment), not by the blockchain or token holders via an onchain insurance mechanism; I found no verifiable evidence of a dedicated loss-guarantee pool, backstop, or compensation fund. The smart-contract layer is a transfer/issuance/redemption rail, not the economic counterparty to the repo trade. Superstate states that its smart contracts are upgradable and gated by a Superstate admin address, and that they are used to facilitate issuance, transfer, and redemption of tokenized shares. So the insolvency impact path is indirect: repo default hurts the fund’s asset value offchain, then the token price/NAV and redemption capacity reflect that damage; a smart-contract failure could separately disrupt issuance, transfers, or redemptions, but that is a different risk channel. Compensation: the only explicit compensation path I found is ordinary fund-level recovery from collateral, bankruptcy claims, or other legal recovery efforts; if those recoveries are insufficient, the shortfall remains a loss to the fund/shareholders. Not verifiable as of 2026-08-30: whether any specific operational reserve, insurance, or sponsor support would be used to make investors whole in this scenario.

Evidence (3)

stress scenario - committed fraud by the DAO or owners

two sources

Not verifiable as of 2026-08-29. I found no reliable evidence in the provided sources that Superstate’s DAO or owners committed fraud. The available Superstate materials only describe the protocol’s tokenization and onchain securities products, not any fraud allegation or finding. The only fraud-related source is about The DAO in 2016, which is a different project and cannot be attributed to Superstate. For a stress scenario, the prudent risk view is: if fraud by governance participants or owners were alleged, the impact could include loss of investor confidence, regulatory scrutiny, potential civil claims, and a forced pause in tokenization or transfer-agent operations. However, those are scenario effects, not verified facts about Superstate.

Evidence (7)

stress scenario - primary yield source negative 30d,

unverified

For Superstate on Ethereum, a negative 30d primary yield source is not verifiable as of 2026-08-29. Superstate’s own USTB page shows a 30-Day yield of 3.53%, and its USCC page shows a 30-Day yield of 4.36%, so the directly published yield figures are positive rather than negative. Superstate’s documentation for USCC also says 30-day yield reflects NAV change including realized and unrealized income, but the provided sources do not show a negative 30-day yield for the protocol’s primary yield source.

Evidence (3)

Governance & Legal

governance

unverified

Superstate appears to be a company-controlled, off-chain governed tokenized U.S. Treasury fund structure, not a decentralized protocol or DAO. On-chain governance, timelocks, multisigs, and voting concentration are Not verifiable as of 2026-08-29 because no contract/governance details are exposed via Dune in this run. ### 1. Governance model & control

  • Superstate markets itself as a provider of tokenized U.S. Treasury funds for institutions, operating under a traditional investment management/regulatory framework, not as a DAO.
  • Governance of investment decisions, product design, and risk management is therefore exercised by the Superstate corporate entity and its board/management, not token holders.
  • There is no evidence of an on-chain proposal system, token voting, or protocol-parameter governance comparable to DeFi DAOs. Given the tool constraints, the following are Not verifiable as of 2026-08-29:
  • Smart contract ownership (EOA vs multisig, upgradeability, admin roles).
  • Timelock presence and parameters.
  • Multisig signer addresses, threshold, or independence.
  • Any DAO token, voting power distribution, or concentration. ### 2. Corporate entity & jurisdiction
  • Public materials indicate Superstate operates as a U.S.-based investment adviser/asset manager focusing on regulated tokenized funds backed by Treasuries.
  • Exact legal entity name, registration number, and list of directors/officers are Not verifiable as of 2026-08-29 without direct access to SEC/FINRA/State registries or corporate filings.
  • Any governance rights for investors are likely defined in subscription documents, PPM, and Terms of Service, under U.S. securities/investment law, not through smart contracts. These documents are Not verifiable as of 2026-08-29. ### 3. Contracts, frontend, and funds control Based on typical tokenized fund structures (inference, not directly sourced):
  • Frontend: controlled by the Superstate company (domain, infrastructure, UX). Unverified marketing claim without technical confirmation.
  • Fund assets (Treasuries, cash): held with regulated custodians/administrators under traditional finance arrangements; ultimate control via fund governing documents and company management.
  • On-chain tokens likely represent claims on the off-chain fund; redemption/transfer rules, freezes, or blacklists, if any, are embedded in contract logic controlled by the issuer. Exact powers are Not verifiable as of 2026-08-29. ### 4. DAO status
  • There is no independent evidence of a functioning Superstate DAO with binding on-chain control over contracts or funds.
  • Governance is best characterized as centralized, company-led, with investors governed by KYC/off-chain legal agreements rather than token voting.
Evidence (1)

legal & regulatory

two sources

Superstate operates as a tokenized private fund / RWA vehicle, not a permissionless DeFi protocol, with on‑chain ERC‑20 tokens representing interests in off‑chain Delaware statutory trusts holding U.S. government securities. Legal entities & registrations

  • The core operating entity is Superstate Inc., a Delaware corporation, which has filed Form D with the SEC for private offerings under Regulation D.
  • A separate Delaware statutory trust, Superstate Asset Trust, issues the Superstate Short Duration U.S. Government Securities Fund (USTB) as a series of the trust.
  • Superstate Inc. is disclosed as an investment adviser in the SEC’s IAPD and as an Exempt Reporting Adviser for the fund.
  • Superstate Services LLC is reported as a registered SEC transfer agent handling blockchain‑integrated share records. Fund / token legal structure and classification
  • USTB is a private fund organized as a Delaware statutory trust and classified as a partnership for U.S. federal income tax, with interests represented by a permissioned ERC‑20 token on Ethereum.
  • The fund is exempt from Investment Company Act registration under Section 3(c)(7) and is offered under Reg D 506(c), with a filed Form D.
  • Investors hold interests in the trust, which is legally separate from Superstate Inc., designed to be bankruptcy‑remote and with inter‑series liability protection.
  • The fund explicitly states it is not a registered 1940 Act fund and therefore does not benefit from the governance, custody, and affiliate transaction protections of registered mutual funds. Investor eligibility, KYC/AML, and transfer restrictions
  • USTB is only offered to U.S. Qualified Purchasers under Section 2(a)(51) of the Investment Company Act, implying high net‑worth / institutional thresholds.
  • Participation occurs through a permissioned system on top of Ethereum: wallets must be allowlisted against off‑chain identity records, and only approved wallets can transact.
  • The transfer system allows the operator to enforce transfer restrictions, freeze shares, and burn/re‑mint tokens (e.g., if a wallet is compromised), meaning full smart‑contract‑level control over secondary transfers.
  • KYC/AML is therefore effectively off‑chain and centralized, with on‑chain transfers contingent on prior identity verification and approval. Regulatory posture, enforcement, and risk
  • As of the latest data, there are no publicly reported SEC enforcement actions, sanctions listings, or court cases specifically targeting Superstate; absence of evidence does not imply regulatory endorsement.
  • Use of a private 3(c)(7) exempt fund structure means investors rely heavily on disclosure and manager fiduciary duties, not 1940 Act protections.
  • For integrations, the main risk is that the token is legally a security interest in a private fund, subject to Reg D transfer and eligibility restrictions, so routing it through permissionless DeFi primitives or non‑KYC users would likely conflict with its legal design and could be blocked via allowlist controls. On‑chain verification of Superstate’s Ethereum token contracts, holders, or flows is Not verifiable as of 2026-08-29 due to lack of direct on‑chain data access in this context.
Evidence (11)

Stability

stability

two sources

For Superstate on Ethereum, I could not verify which stablecoin the protocol used from the provided sources alone, and I also could not verify any historical depeg events for that coin. As of 2026-08-29, the answer is Not verifiable. If you meant a specific Superstate product token or wrapper, please provide the token symbol or contract address; otherwise I cannot responsibly count depegs, identify the last one, or compute the depeg percentage without risking a namesake mismatch. The available search results are general stablecoin depeg references and do not tie any particular stablecoin to Superstate.

Evidence (3)

Risks & Strengths

risks

unverified

For Superstate (Ethereum), the top 5 risks are: 1) Centralized control / allowlist gating — redemption, transfer, or access can be constrained by Superstate’s transfer-agent and KYC/qualified-purchaser controls, creating freeze/deny risk for holders. 2) Regulatory risk — U.S. tokenized securities and stablecoin-linked operations sit in an evolving legal environment; the issuer itself warns that changing laws could affect availability, functionality, or cost. 3) Oracle / pricing risk — the protocol uses pricing/oracle infrastructure for NAV and settlement, and divergence or failure can misprice shares or disrupt accounting. 4) Operational / cybersecurity risk — portal, service providers, and blockchain rails can suffer cyberattacks, system failures, consensus issues, or processing delays, affecting availability and integrity. 5) Liquidity / market stress risk — large or rapid redemptions may force asset sales at unfavorable prices, while reserve assets or stablecoins may not always redeem 1:1 under stress.

Evidence (4)

strengths

unverified

Superstate’s top strengths are its regulated tokenization model, DeFi compatibility, built-in compliance controls, institutional-grade structure, and broad product scope across tokenized funds and equities. It positions tokenized shares as the same legal shares as traditional markets, while enabling 24/7 onchain access, instant settlement where available, and direct use in DeFi workflows.

  • Regulated, legally grounded tokenization: Superstate emphasizes that its tokenized shares are the same shares that trade on traditional exchanges, not derivatives or wrappers, which is a strong differentiator for institutional adoption.
  • DeFi-native utility: Its products are designed for onchain settlement, peer-to-peer transfer, and integration with lending protocols, DAOs, automated investors, and collateral systems.
  • Compliance infrastructure: The platform includes token-level permissioning, allowlisted wallets, and programmatic transfer restrictions, which supports regulated distribution while preserving onchain functionality.
  • Institutional operating model: Superstate highlights a bankruptcy-remote trust structure, established service providers, and support for USDC or bank-wire minting and redemption, which can reduce operational friction for professional allocators.
  • Expanding product and distribution roadmap: Superstate is building both yield-bearing funds and company-issued equities, and its Industry Council suggests active institutional engagement around product design and adoption.
Evidence (4)

Methodology & Limitations

  • On-chain metrics: not verifiable — Dune phase 2 is not enabled.
  • 1 of 24 fact categories not yet collected.
  • Fact verifiability: 11 two independent sources, 1 one source, 12 unverified.
  • Oldest fact verification date: 2026-08-29.