Veda

Red · 16/100 Data confidence 85/100

Missing critical evidence: incident. The score is capped until coverage improves.

Executive summary

Veda is a DeFi vault infrastructure protocol for institutions operating on Ethereum and Plasma, scoring 29/100 (red band) due to unverified contract deployment, missing economic data, and high downstream protocol dependency.

  • Security: Veda lists a "Full Architecture" audit by Macro covering core contracts (BoringVault, Teller, Accountant, Queue, Solver), but critical/high/medium findings, fix status, and bytecode-match confirmation for deployed addresses are not verifiable as of 2026-08-29. An active $1 million bug bounty program on Immunefi launched January 2026, but reward scope, severity bands, and payout results are not verifiable.
  • Custody & governance: Non-custodial smart-contract vault custody with funds held in BoringVault; strategy deployments constrained by Merkle-proof allowlist enforced by Manager contract. Admin keys use role-based access, MFA, timelocks, and cryptographically secured devices, but exact key hierarchy, threshold schemes, and signer distribution are not verifiable as of 2026-08-29.
  • Top risks: Smart contract bugs affecting large TVL simultaneously; curator/principal-agent risk from discretionary capital allocation; downstream DeFi contagion from protocols like Aave, Morpho, Pendle; cross-chain/bridge risk across Ethereum and Plasma; market/liquidity risk from volatility, peg instability, and strategy underperformance.
  • Economic model & TVL: Marketed as institutional yield protocol using derivatives (options), lending markets, and basis trades, with $97.7M TVL. Exact vault contracts, asset mix per product, per-chain deployment, lock-up durations, fee structure, and organic vs. subsidized yield are not verifiable as of 2026-08-29.
  • Founders & maturity: Founded by Sun Raghupathi (ex-Sommelier, ~$100M prior TVL), Joseph Terrigno, and Stephanie Vaughan; raised $18M led by CoinFund. Functional product with documented APIs and integration endpoints, but live on-chain activity, launch date, and main contract addresses are not verifiable as of 2026-08-29.
  • Stress scenarios: Largest collateral asset composition, chain-specific exposure, and 30-day yield attribution are not verifiable, preventing quantified stress loss estimates for BTC crash, collateral depeg, or negative yield scenarios as of 2026-08-29.
  • Unverified: No confirmed fraud allegations, but no independent verification of deployed contract addresses, reserve composition, treasury balances, or whether audit covered all production contracts.

Score

Component Weight Raw Points Reason
security 25% 20 5.0 0 audit(s); no fresh audit; active bug bounty bonus
incidents 25% 50 12.5 0 incident(s) in 730-day window, losses $0; 0 high/critical news
verifiability 15% 80 12.0 0 onchain, 16 two-source, 3 one-source of 22 fact(s)
stability 15% 50 7.5 stability not established; 0 current depeg event(s)
adoption 10% 50 5.0 TVL bucket 7; neutral context, not a safety signal
governance 10% 40 4.0 verified governance +20; timelock in governance +15; legal enforcement/sanction -30
  • No audit of deployed contracts (−15): no audit facts recorded
  • Active regulatory enforcement (−15): legal fact mentions enforcement or sanction

Identification

protocol identification

two sources

Veda is a DeFi vault infrastructure protocol for institutions; its official site is veda.tech and its docs are docs.veda.tech. The protocol describes support for Ethereum and Plasma; the Plasma docs say Veda is using a pre-deposit vault on Ethereum mainnet to bridge liquidity to Plasma. A native token is not evidenced in the gathered sources, so it is Not verifiable as of 2026-08-29. The public material available here does not provide a reliable launch date; the strongest timeline clue is the docs/ GitHub activity showing Veda docs and contract-execution material in late 2023, but that is not a launch confirmation. Main contract addresses are Not verifiable as of 2026-08-29 from this run because I cannot do the required on-chain/explorer cross-checks now; the only address-like data surfaced was a VEDA token page on Ethplorer, which may be a namesake and is not sufficient to attribute to this protocol. Fork lineage is also Not verifiable as of 2026-08-29 from the gathered sources: I found no confirmed upstream fork relationship, audited diff, or malicious-modification history for Veda itself. For risk analysis, the key point is that Veda appears to be an institutional vault layer rather than a standalone token protocol, but the contract identity and lineage remain unconfirmed in this pass.

Evidence (7)

maturity

one source

Veda appears to be a real, functional product rather than a pure landing page: its documentation describes concrete deposit and withdrawal flows through on-chain contracts (Teller, BoringVault, BoringQueue), including instant and queued withdrawals, which indicates active app functionality rather than a static brochure. The docs also list a deployed Plasma vault and show chain-specific deployment material, which supports multi-chain product maturity, but Ethereum- and Plasma-specific live usage metrics are not verifiable here. The documentation quality looks solid: there is a dedicated docs site with integration pages, API references, and deployment pages, which is a maturity positive. There are also signs of a real developer surface area: the docs explicitly mention an open API for the VEDA platform and separate API endpoints, and a third-party integration doc says Veda is served through Privy’s standard earn API with deposit, withdraw, position, vault-details, and webhooks endpoints. That is enough to say an open API exists. I did not verify live deposits/withdrawals from on-chain data in this run, so that part is Not verifiable as of 2026-08-29. I also did not confirm broken links, fake metrics, or template-site artifacts from an independent crawl, so those are Not verifiable as of 2026-08-29. Based on the available evidence, the strongest read is: functional vault product, documented APIs, and reasonably mature docs/UX, but live-chain activity and any dashboard integrity checks remain unverified.

Evidence (4)

Security

audit

unverified

Veda’s audit page lists a “Full Architecture” initial audit covering the core Boring Vault architecture, including BoringVault, Teller, Accountant, Queue, Solver, and decoder/sanitizer contracts. The page links the report as “A-4” on Macro’s audit library. The page does not expose the report text in the search result, so critical/high/medium counts, fix status, and whether every deployed contract is covered are not verifiable from the provided material. The Plasma/Veda materials also state that deposits into Plasma’s sale vaults used Veda’s audited contracts, but a bytecode-match confirmation for deployed addresses is not verifiable as of 2026-08-29.

Auditor
0xMacro
Report Date
2025-01-21
Scope
Full Architecture; core Boring Vault architecture (BoringVault, Teller, Accountant, Queue, Solver, decoder/sanitizer contracts)
Evidence (1)

bug bounty

two sources

Veda does appear to have an active bug bounty program on Immunefi. Immunefi lists it as “Live Since 21 January 2026” and says the program was last updated on 18 August 2026. Immunefi’s X announcement also says Veda/@veda_labs launched a $1 million bug bounty program covering its smart contracts on 26 January 2026. Parameters: Immunefi states that a PoC (proof of concept) demonstrating impact is required and must comply with Immunefi’s PoC guidelines and rules. The search result set does not include the full reward scope, severity bands, asset coverage, or excluded issue categories, so those specifics are Not verifiable as of 2026-08-29 from the provided sources. Results: No disclosed bounty payouts, accepted submissions, or incident-resolution results are shown in the provided sources, so program results are Not verifiable as of 2026-08-29. Veda’s own docs also mention that its vaults are part of multiple ongoing bug bounty programs operated by integration partners, which is consistent with an active security bounty posture, but the program details should be treated as partner-program context rather than the primary source for bounty terms.

Evidence (3)

counterparty risks

two sources

Veda’s core risk lies in its role as a vault abstraction layer on top of many external DeFi protocols, stablecoins, LSTs/restaking systems, bridges, and RWAs; failures in these underlying components can directly impair Veda vaults. Not verifiable as of 2026-08-30 for on-chain positions and exact exposures. 1. External DeFi protocol dependencies Veda vaults route capital into staking, lending, LP, and perp strategies across “leading DeFi protocols like Aave, Balancer, Uniswap, Gearbox, Fluid, Euler, and Morpho” for Lido-related vaults, and similar venues for Ether.fi Liquid and other partners. • Counterparty risk: smart contract failure, oracle issues, insolvency or bad debt events at each integrated protocol. • Strategy risk: principal‑protected basis trades and leveraged stETH/ETH LP positions introduce leverage and funding/liquidity dependencies. 2. LST & restaking exposure Veda is a preferred vault provider for Ether.fi, handling eETH/eBTC/eUSD and restaking‑based yields. • Restaking risk: slashing, AVS failure, rehypothecation chains and governance failures at Ether.fi and upstream staking layers. • Lido Earn GGV vault allocates stETH/wstETH across protocols, adding LST depeg and validator slashing risk. 3. Stablecoin & RWA exposure Vaults can target USD‑denominated, market‑neutral strategies through stablecoins in Ether.fi Liquid and other yield products. • Stablecoin risk: depeg, reserve mismanagement, regulatory actions against issuers. • RWA risk: where partners or issuers wrap real‑world assets via Veda-powered vaults, SPV/issuer insolvency or legal enforcement events can impair vault value; concrete RWA issuers are not independently confirmed. Not verifiable as of 2026-08-30. 4. Bridges, cross‑chain & Plasma/Sonic dependency Veda is described as multi-chain, with integrations across EVM chains and expansion beyond Ethereum (Plasma/Sonic, Solana). • Bridge risk: assets for products like scUSD/scETH are deposited into Ethereum BoringVaults while circulating on Sonic, implying cross‑chain messaging/bridge reliance. Bridge failure or exploit can cause synthetic asset depeg versus underlying vault value. • Chain risk: execution, censorship or rollup failure on integrated L2s and Plasma‑linked environments. 5. Oracles & price manipulation Strategies using perps, leveraged LPs, and basis trades depend on robust price feeds and funding rates. • Oracle risk: manipulation on thin‑liquidity venues, faulty off‑chain feeds, or misconfigured TWAPs could produce mispricing, forced liquidations or bad hedges. 6. Custodians, CEX/MM & governance Documentation emphasizes non‑custodial vaults and on-chain constraints, but any use of centralized exchanges or off‑chain MM desks by vault managers is not clearly documented and remains “Not verifiable as of 2026-08-30”. This includes potential exposure to CEX failure, rehypothecation, or MM credit risk if such integrations exist. Callout – data gaps & marketing claims • Exact chain breakdown (Ethereum vs Plasma, Sonic, other L2s), TVL per chain, and protocol-level concentration are Not verifiable as of 2026-08-30. • Statements about “secure cross‑chain operations” and “battle‑tested ~$3B BoringVaults” come from Veda’s own materials and are therefore unverified marketing claims.

Evidence (14)

crypto custody

unverified

Veda organizes custody as non-custodial, onchain smart-contract vault custody rather than centralized key custody. Its docs say vault funds sit in the BoringVault contract, while deposits/withdrawals are handled by the Teller and strategy deployments are constrained by a Merkle-proof allowlist enforced by the Manager; funds remain onchain throughout deposit, deployment, and withdrawal flows. Veda also states that users receive vault share/receipt tokens that represent their claim on the assets, and that only depositors can withdraw or transfer their assets, not Veda or the enterprise partner.

Evidence (2)

key management

unverified

Veda’s key management appears to be split between onchain vault controls and offchain operational controls. Onchain, the protocol says vault actions are restricted to pre-approved operations verified against a Merkle root, with timelocks for some receipt-token and withdrawal functions, which limits what any single operator key can do. Offchain, Veda says it uses role-based access control, multi-factor authentication, segregated production/non-production environments, secure secrets and key management practices, no external dependencies for signing vault configuration transactions, direct confirmation from initiators before signing, sensitive roles behind timelocks, and admin keys held in cryptographically secured devices. The practical model is therefore non-custodial for user assets, while administrative control is protected by layered operational key controls rather than by a single hot wallet or custodian. Not verifiable as of 2026-08-29 for the exact key hierarchy, signer distribution, threshold schemes, or whether Ethereum and Plasma use distinct admin key sets; the available sources do not specify those details.

Evidence (3)

Live security feed

No verified protocol news in the last 12 months.

Team & Reputation

founders

two sources

Veda appears to be a real operating company, not a pure web front: it has a public corporate presence, a staffed LinkedIn page listing New York, New York and 20 Jay St, Brooklyn as locations, and third-party coverage of a funding round led by CoinFund. Its founders are publicly identified as Sun Raghupathi, Joseph Terrigno, and Stephanie Vaughan; Veda’s own site and press coverage also list a broader team including legal and growth leadership. Founder background and credibility: Sun Raghupathi is public-facing as co-founder/CEO in interviews, and he says he previously worked at Sommelier and built vault infrastructure that scaled to roughly $100M TVL before Veda. Veda’s site says Sun has Columbia University research background and Joseph Terrigno is a Columbia graduate and former data scientist. These are self-asserted or company-asserted credentials unless independently verified elsewhere. Prior projects/outcomes: The most material prior project surfaced is Sommelier / Sommelier Finance; in interviews Sun says the team started there and built core smart-contract infrastructure and strategies, reaching about $100M TVL. Veda also says its cofounders previously founded Seven Seas, described as an early vault curator operating at scale. I did not find independent evidence in the provided results about Seven Seas’ outcomes, hacks, or failure history, so that part is Not verifiable as of 2026-08-29. Public vs anon: The key executives are public, not anonymous, and Veda is actively doing media interviews and investor PR. I found no sign of anon founders in the provided results. Reality check / risk flags: The strongest evidence of substance is the combination of named founders, investor-backed fundraising, public interviews, and a physical-office claim. The weakest point is that much of the detailed biography on Veda’s own site is unverified marketing claim unless independently corroborated. I found no independent evidence of hacks, regulatory actions, or an offshore structure in the provided results; those are Not verifiable as of 2026-08-29.

Evidence (6)

general reputation

two sources

Veda appears to have a generally positive reputation as an institutional DeFi vault infrastructure provider: its own materials describe it as the leading onchain vault provider, and a 2025 financing announcement says it raised $18M led by CoinFund to build institutional-grade yield products. Independent risk coverage from Hindenrank rates it B on risk, citing a strong track record and minimal core code, but also flags systemic scale risk, curator principal-agent risk, and dependence on downstream DeFi protocols. There are no obvious fraud, rug-pull, insolvency, sanctions, or regulatory-enforcement allegations in the provided results, and no unresolved legal case is evident from these sources; however, that is not verifiable as of 2026-08-29 from the available evidence. The main criticism is structural rather than accusatory: concentration of TVL and reliance on a shared vault codebase could make any undiscovered vulnerability widely impactful.

Evidence (5)

Economy

TVL: $97.7M

model

one source

Veda appears to be an institutional‑leaning yield protocol focused on tokenized strategies and structured products, but almost all hard economic data is missing or conflicting. Key metrics are therefore "Not verifiable as of 2026‑08‑29". ## Strategy & Assets

  • Veda positioning: described as an onchain asset‑management / yield platform offering structured yield strategies (options‑style and rate strategies) for stablecoins and blue‑chip assets.
  • Likely core assets: major stablecoins (USDC/USDT/DAI) and ETH‑denominated assets, used in options and lending/borrowing strategies.
  • Exact vault/strategy contracts, asset mix per product, and per‑chain deployment: Not verifiable as of 2026‑08‑29. ## Yield Source & Risk Profile
  • Yield is marketed as coming from derivatives (options), lending markets, and basis trades, implying a mix of market‑neutral (carry, basis) and directional option strategies.
  • Degree of organic vs subsidized yield (token incentives, rebates) cannot be confirmed from independent analytics: Not verifiable as of 2026‑08‑29.
  • No reliable evidence of leverage‑looping or restaking integrations; any mention of “delta‑neutral” or “risk‑managed” strategies is an unverified marketing claim. ## Lock‑ups, Withdrawals, Fees
  • Product pages suggest vault‑style deposits with strategy‑level terms (e.g., fixed cycle or epoch‑based strategies), implying that withdrawals may be limited to strategy end or with notice.
  • Precise lock‑up durations, early exit penalties, gates/limits (caps per vault), and detailed withdrawal mechanics: Not verifiable as of 2026‑08‑29.
  • Fee structure (management vs performance, protocol take‑rate) is not documented in independent sources; all fee descriptions found on Veda’s own materials are unverified marketing claims. ## Collateral, TVL & Revenue
  • Collateral appears to be user‑deposited stablecoins/ETH‑like assets into vaults; use of rehypothecation, cross‑margin, or rehypothecated collateral in external protocols: Not verifiable as of 2026‑08‑29.
  • TVL by chain (Ethereum, Plasma), by product, and trend: no reliable dashboards on DeFiLlama or other aggregators specifically tied to a confirmed Veda contract set; Not verifiable as of 2026‑08‑29.
  • Protocol revenue (fees collected, PnL share) and historical APY/volatility cannot be cross‑checked vs on‑chain or independent analytics and are therefore Not verifiable as of 2026‑08‑29. ## Critical Data Gaps > Due to missing Dune MCP access and absence of chain‑verified contract mappings, all hard economic metrics (TVL, APY, revenue, per‑chain exposure) are Not verifiable as of 2026‑08‑29, and any detailed performance or sustainability claims should be treated as unverified marketing claims.
Evidence (2)

reserves

two sources

Veda’s reserves/treasury are not fully verifiable from the provided web results. The most concrete protocol-level fact is that Veda’s funds are custodied in the BoringVault central contract, which holds assets, mints/burns share tokens, and executes management calls under surrounding module rules. Veda also advertises operational controls such as address whitelists, deposit permissions, and curator roles, but this is a protocol control statement rather than a treasury attestation. For size / on-chain balances / Dune, there is Not verifiable as of 2026-08-29 because Dune MCP is unavailable in this run and the web results do not provide a raw on-chain balance breakdown. Defillama/OAK only provide TVL estimates, not a treasury or reserve balance sheet. For addresses, the results do not expose a canonical treasury wallet list, reserve multisig, or signer set. The only specific custody address class identified is the BoringVault contract itself as the custody layer for vault funds. For composition, the sources indicate Veda is a modular vault protocol that can allocate capital across network-specific vault strategies, but they do not provide a reserve asset composition schedule for the treasury/reserve itself. For control / custody, the documentation says the BoringVault is the central custodian and external modules enforce the rules governing allocation and management actions. That implies control is module-based rather than a simple single-wallet treasury model, but the exact admin/control addresses are Not verifiable as of 2026-08-29 from the available evidence. For reserve policy / attestations, the provided sources do not include a treasury policy document, proof-of-reserves, or third-party attestation. The tokenomics page mentions a 5% “Reserve,” but it is about the VedaToken allocation and is an unverified marketing claim for the protocol treasury unless independently corroborated.

Evidence (6)

tokenomics

one source

I cannot reliably analyze Veda’s tokenomics based on currently available information. The main issue is *protocol identification*: web search returns multiple unrelated results for “Veda” on Ethereum and other ecosystems (including wallets, AI-related projects, and non‑DeFi apps), but none can be confidently matched to a DeFi yield protocol named Veda with chains explicitly listed as Ethereum and Plasma as of the current date. Because of this name collision and missing contract-level attribution, every requested datapoint below is Not verifiable as of 2026-08-30:

  • Native token name/ticker and contract address – Not verifiable as of 2026-08-30.
  • Total vs. circulating supply; market cap and FDV – Not verifiable as of 2026-08-30.
  • Token utility and governance role – Not verifiable as of 2026-08-30.
  • Revenue share, buybacks, burns, staking rewards – Not verifiable as of 2026-08-30.
  • Emissions schedule; unlock schedule; whether unlocks happened on-chain – Not verifiable as of 2026-08-30.
  • Allocations to team/investors/treasury/community – Not verifiable as of 2026-08-30.
  • Top-holder concentration and insider wallets – Not verifiable as of 2026-08-30.
  • Mint/blacklist/fee-switch functions and controllers – Not verifiable as of 2026-08-30.
  • DEX liquidity depth and main listings on Ethereum or Plasma – Not verifiable as of 2026-08-30. Given the institutional risk-analysis framing, the absence of:
  • auditable token contracts that can be clearly tied to this Veda protocol, and
  • independent analytics (DefiLlama, Token Terminal, major explorers with tagged contracts) is itself a material risk finding:
  • The protocol either has no widely recognized native token yet, or
  • It is too small/ill‑documented to appear in major analytics and explorer-tagged datasets, or
  • The public branding (“Veda”, “veda”) does not uniquely identify its contracts, creating high room for phishing and misattribution. To proceed with proper tokenomics due diligence, you would need at minimum:
  • A confirmed token contract address on Ethereum (and any Plasma deployment), ideally from multiple independent sources (explorer tags, audits, analytics).
  • Any audit report or technical docs that describe token roles (governance, fees, rewards). Without that, institutional‑grade tokenomics risk analysis cannot be performed and the protocol should be treated as insufficiently transparent from a token perspective.
Evidence (2)

Stress scenarios

stress scenario - bitcoin price falls below $10000

two sources

Veda’s disclosed materials describe it as a multi-chain DeFi vault infrastructure that sits above lending, DEX, and staking protocols, so a Bitcoin drop below $10,000 would primarily matter only if it triggers broader crypto market stress rather than any BTC-specific dependency in Veda’s core design. Based on the available sources, there is no verifiable disclosure of Veda holding direct Bitcoin exposure, BTC-backed collateral, or a BTC-linked treasury, so a BTC crash cannot be translated into a protocol-specific loss estimate from the evidence provided. Not verifiable as of 2026-08-29. The most plausible stress transmission channel is indirect contagion: a sharp BTC selloff could pressure Ethereum and other DeFi collateral values, increase volatility, and raise withdrawal demand across vault products that depend on downstream protocols for yield. The risk analysis source explicitly flags Veda’s dependency on external DeFi protocols and notes that losses in downstream protocols can propagate into Veda-curated vaults through correlated exposures and liquidity stress. That means the relevant question is not BTC price in isolation, but whether the crash causes liquidations, exploit losses, or redemption pressure in the specific strategies Veda powers. The key unresolved items are Veda’s chain-by-chain exposure on Ethereum and Plasma, the composition of each vault’s assets, and whether any vaults use BTC-correlated strategies or bridged assets. None of that is verifiable from the provided sources, so any quantitative stress result would be speculative. Not verifiable as of 2026-08-29.

Evidence (3)

stress scenario - largest collateral depegs 20%,

two sources

A 20% depeg in the largest collateral asset for Veda is Not verifiable as of 2026-08-29 from the available sources. The search results identify Veda as a vault infrastructure protocol and mention large deposits/TVL, but they do not disclose the protocol’s current collateral composition, per-chain exposure on Ethereum vs. Plasma, or which asset is the largest collateral bucket, so a stress estimate cannot be stated with evidence. What can be said from the available material is limited to qualitative risk context: Veda powers institutional vault products across networks, and third-party coverage claims significant platform scale, but those claims are not sufficient to quantify a 20% depeg loss on the largest collateral position. If you want a concrete stress number, the missing inputs are: the latest collateral breakdown by asset and chain, the haircut/LTV applied to each asset, and whether the stress should be modeled at the vault level or across all Veda-managed products. Without those, any numeric loss estimate would be speculative.

Evidence (7)

stress scenario - top counterparty insolvent — each with expected loss path, who absorbs it, compensation, and the impact path through the smart contracts;

two sources

Veda’s publicly documented risk model says the core stress path is downstream DeFi counterparty failure: curator-managed vault capital is deployed into external protocols, and an exploit or governance failure there can pass losses straight through to vault depositors. For Ethereum and Plasma, the loss path is not verifiable from the available sources as a chain-specific, contract-level waterfall; the public materials only support a general vault-to-depositors transmission model, so the exact smart-contract impact path is Not verifiable as of 2026-08-29. Expected loss path: if a top counterparty becomes insolvent, Veda vaults first absorb the mark-to-market or realized loss in the affected strategy, then any redemption shortfall propagates to vault shares. If losses are severe, liquidity stress can create withdrawal pressure and correlated outflows across other Veda-powered vaults using the same infrastructure or curator set. Who absorbs it: the immediate economic burden falls on vault depositors / share holders in the impacted vaults, because the strategy loss is inherited at the vault level. There is no source-supported evidence that Veda itself contractually guarantees principal or that a dedicated insurance fund automatically covers these losses; that compensation mechanism is Not verifiable as of 2026-08-29. Compensation: the only explicitly documented compensation-like mechanism found is the Immunefi bug bounty, which pays researchers for reported vulnerabilities; it is not a depositor compensation fund and does not reimburse users for insolvency losses. No source provided a protocol-level backstop, treasury rescue, or liquidation waterfall for counterparty insolvency, so that is Not verifiable as of 2026-08-29. Impact through the smart contracts: the available documentation identifies Veda as a vault primitive with curation, accounting, and automation, plus risk controls such as stress testing and liquidation-cascade analysis, but it does not expose the exact contract sequence for an insolvency event. Therefore the precise on-chain path across BoringVault/strategy contracts, share accounting, and any emergency controls is Not verifiable as of 2026-08-29.

Evidence (4)

stress scenario - committed fraud by the DAO or owners

two sources

For Veda, I could not verify any public evidence that the DAO or its owners committed fraud on Ethereum or Plasma. Based on the available web results, the strongest source is Veda’s own security documentation, which describes a constrained vault design with only deposit/withdraw functions, pre-registered actions, and delayed withdrawals, but this is an *unverified marketing claim* unless corroborated by independent on-chain or third-party evidence. I also did not find any independent audit, regulator, court filing, or credible media report in the provided results alleging fraud by Veda’s DAO or owners. The only other results are generic DAO-fraud explainers or unrelated DAO incidents, which do not establish wrongdoing by Veda. Stress-scenario assessment:

  • Committed fraud by DAO/owners: Not verifiable as of 2026-08-29.
  • Material risk vector to monitor: principal-agent / curator abuse in a vault-manager model, because curators can influence asset allocation across integrated DeFi strategies.
  • Evidence status: no confirmed chain-specific fraud allegation for Veda was identifiable in the supplied sources. If you want, I can next assess Veda’s *non-fraud* stress scenarios, such as curator misuse, downstream protocol contagion, or governance capture.
Evidence (3)

stress scenario - primary yield source negative 30d,

two sources

For Veda, a negative 30-day primary yield source is not verifiable as of 2026-08-29 from the available web results. The results indicate that Veda is a cross-chain vault protocol and that some Plasma saving vault deposits are routed to Aave lending markets as the primary yield source, but they do not provide an independently verifiable 30-day yield time series or chain-separated yield attribution for Ethereum and Plasma. What can be stated from the available sources is that Veda’s yield model depends on external DeFi protocols, so if the primary source turns negative, the protocol inherits downstream risk rather than generating isolated yield. The Plasma vault analysis explicitly says the primary source is Aave lending yield and notes that withdrawals can face delays during high utilization, but it does not confirm a negative 30-day outcome. Because Dune/on-chain verification is unavailable in this run, the on-chain exposure split and whether the primary yield source is actually negative over the last 30 days remain Not verifiable as of 2026-08-29.

Evidence (4)

Governance & Legal

governance

two sources

Veda does not appear to have a clearly documented, token-holder DAO governing core protocol control; the strongest available evidence points to team-operated multisig administration rather than a broad on-chain DAO. Public material says Veda vault/admin functions are controlled by a 4/6 multisig split between Veda and partner contributors, with key roles such as proposer/executor/canceller assigned through timelock/role-based controls; another public source describes the admin as a multisig with members from the Veda team and partner team, and says strategists are constrained by admin-approved whitelists/merkle roots. For proposal process, I could not verify a formal, public governance forum or token-vote workflow for Veda itself. The evidence available is consistent with *operational governance* by the team/multisig, not a materially independent DAO; therefore the DAO appears largely *symbolic or absent* for day-to-day protocol control. For timelock, public discussion references timelocks in a role-based system, but I could not verify the exact contract, delay duration, or whether all privileged actions are timelocked. Not verifiable as of 2026-08-30. For multisig signers/threshold/independence, the threshold is reported as 4/6 and the signer set is described as split between Veda and partner contributors, implying partial independence but not full external decentralization. Exact signer identities were not verifiable as of 2026-08-30. For funds/contracts/frontend control, public sources support that the admin multisig can change vault modules, whitelists, and related controls, which implies control over deployed contracts and strategy permissions. I could not verify separate frontend control, treasury custody arrangements, or whether a distinct company owns the UI. Not verifiable as of 2026-08-30. For company/legal entity, I could not verify Veda’s controlling legal entity, jurisdiction, registration number, directors, or terms of service from the available sources. Not verifiable as of 2026-08-30. Conflict note: a public Veda/partner governance description implies meaningful shared control, but the absence of a token-vote DAO or independently verifiable governance process means the practical control locus is still the multisig/operator team, not a decentralized community DAO.

Evidence (4)

legal & regulatory

two sources

Veda appears to be operated by Digital Artisan Labs LLC, and its terms state the agreement is governed by New York law and that the interface is deemed based in New York, New York. The terms also impose restrictions relevant to compliance and risk: users must not be sanctioned persons, must not use VPNs or anonymization tools to evade restrictions, and must comply with applicable sanctions, export-control, securities, banking, AML, and privacy laws. The privacy policy says Veda is operated by Digital Artisan Labs LLC and provides for account/content deletion requests, but the available material does not let me verify deeper data-protection architecture, retention practices beyond that, or whether a separate legal entity structure exists beyond the LLC reference. The docs also describe Veda as a DeFi vault primitive, and a 2026 compliance blog says it is non-custodial infrastructure that can let regulated entities enforce their own KYC/sanctions controls and create permissioned vaults, but this is best treated as a protocol-side claim rather than independently verified legal status. I found no verifiable public evidence in the gathered material of court cases, sanctions actions, or regulator enforcement specifically against this Veda protocol. I also found no explicit KYC mandate at the protocol level in the terms; instead, the materials indicate KYC/allowlisting may be optional for partner-controlled vaults, while users remain responsible for determining whether participation complies with their own jurisdiction’s financial regulations. Overall legal structure vs. actual risk: the apparent U.S.-based LLC and New York governing law may reduce ambiguity for the interface operator, but it does not eliminate regulatory exposure from DeFi activity, sanctions screening, or local securities/AML rules for users and any regulated counterparties.

Evidence (5)

Stability

stability

two sources

I could not verify a Veda-specific stablecoin depeg history from the provided sources. The search results only describe depegs in general stablecoin markets, not which stablecoin Veda used on Ethereum or Plasma, so the question is not verifiable as of 2026-08-29. If you want, I can next help identify Veda’s stablecoin exposure by chain and then check whether that specific token ever depegged, but that would require a verifiable protocol-asset source or on-chain analysis that is not available in the current results.

Evidence (3)

Risks & Strengths

risks

two sources

Veda’s top protocol risks are: smart contract risk, economic/market risk, curator or manager discretion risk, downstream protocol contagion risk, and cross-chain / bridge risk. Veda’s own docs explicitly say DeFi users face smart contract and market risks, including liquidity, peg stability, price, protocol health, and upgrade-related changes that can create new exposures. Third-party assessments add that Veda’s curator model creates principal-agent risk because curators allocate capital on behalf of depositors, and that the vaults depend on external protocols such as Aave, Morpho, and Pendle, so an exploit or governance failure upstream can hit Veda users directly. Because Veda also operates across Ethereum and Plasma, any cross-chain messaging or bridge dependency increases the blast radius of operational or security failures across deployments. In practical terms, the five risks are:

  • Smart contract bug / upgrade risk: a flaw in core vault contracts could affect large amounts of TVL simultaneously.
  • Market / liquidity risk: losses can arise from volatility, liquidity shortages, peg instability, or strategy underperformance.
  • Curator / principal-agent risk: strategy curators may make poor allocation decisions, be compromised, or act misaligned with depositors.
  • Downstream DeFi contagion risk: Veda inherits the risk of the protocols it allocates into, so external exploits can propagate losses.
  • Cross-chain / bridge risk: multi-chain deployments can add messaging, settlement, and operational risk between Ethereum and Plasma. Not verifiable as of 2026-08-29: on-chain TVL, contract-level exposure by chain, and whether Plasma-specific deployments materially change the risk mix, because raw on-chain verification is unavailable in this run.
Evidence (5)

strengths

two sources

Veda’s top strengths are: multi-chain, multi-protocol coverage across ecosystems like Ethereum and Plasma, which lets partners access diverse yield sources without lock-in; non-custodial, trust-minimized design, with user funds kept in audited smart contracts and visible onchain; composable infrastructure that plugs into lending, DEXs, staking, and other DeFi primitives; flexible strategy execution, including arbitrarily complex, offchain-assisted vault strategies with dynamically allocated capital; and verifiable constraints / security controls, where vault actions are limited to a whitelisted set and can be viewed onchain, helping reduce risk and improve transparency.

Evidence (2)

Methodology & Limitations

  • On-chain metrics: not verifiable — Dune phase 2 is not enabled.
  • 2 of 24 fact categories not yet collected.
  • Fact verifiability: 16 two independent sources, 3 one source, 3 unverified.
  • Oldest fact verification date: 2026-08-29.