AFI Protocol

AFI Protocol receives an adverse research assessment because its operator is entirely hidden. AFI runs an ERC-4626 vault, afiUSD, that combines stablecoin lending, Pendle principal-token accumulation, and leveraged PT loops. It also runs a second, currently institutional-only vault backed by tokenized real-world assets from a separate entity. AFI’s own Terms of Use, custody framework, and KYC policy do not name an operating entity. The closest thing to a legal disclosure is that Nevis law governs the Terms, which include no arbitration clause and name no counterparty. This review found no team member, founder, or investor identity in any source it could access. The flagship vault currently requires an invite code obtained through Telegram, an unusual gate for a product sold as permissionless. An August 2025 Cantina audit found a critical-severity issue in AFI’s main token contract and reports that AFI fixed it. Even after that fix, the anonymous team and offshore legal wrapper with no disclosed principal each provide enough reason to reject it.

Review triggers: events that reopen the verdict
• A named operating entity and jurisdiction of incorporation are disclosed
• Team, founder, and investor identities are publicly disclosed
• The invite-code access gate is removed or explained, resolving the tension with the product’s permissionless marketing claim
• The afi-rwaUSDi vault’s custody, redemption, and eligibility terms are publicly documented once it reopens beyond institutional-only access

Confirmed 2026-09-25: 37 days quiet, no open item. Holds to 2027-09-26 while the watch stays quiet.

The research file

Mechanism

The afiUSD vault accepts stablecoin deposits and allocates them among stablecoin lending on Aave, Euler, and Morpho Blue; discounted Pendle Principal Tokens held to maturity; and leveraged loops using PT as collateral within capped loan-to-value bands. Yield accrues through the vault’s exchange rate rather than through a rebase. A second vault, afi-rwaUSDi, mints against rwaUSDi, a token from a separate entity, Multipli, backed by market-neutral funds, private credit, and other real-world assets. Public deposits into this vault are currently closed. Access is institutional-only, and no public redemption terms are disclosed. Both vaults enforce a stated rule that the circulating receipt-token supply can never exceed attested reserves.

No named operator, no named team

AFI’s Terms of Use do not name an operating company anywhere in the document. They set Nevis law and exclusive Nevis court jurisdiction, with no arbitration clause. Anonymous or lightly disclosed offshore projects commonly choose this type of jurisdiction. AFI’s documentation, website, and every source this review could reach named no founder, team member, or investor. The review found the GitHub organization name, ”Artificial-Financial-Intelligence,” but could not confirm any individual contributors. AFI discloses much less than similar competitors in the same product category usually do.

Access and eligibility

Although AFI markets itself as permissionless, the afiUSD vault currently requires an invite code obtained through Telegram before a user can join. This is a real access gate, distinct from KYC. AFI states that formal identity checks apply only to fiat on/off-ramps, advisory tools, and institutional counterparties, not to basic smart-contract use. Its KYC policy restricts standard OFAC-sanctioned and FATF-flagged jurisdictions, plus certain US states with strict crypto licensing regimes, but states no blanket US-person exclusion. That restriction is narrower than those of several peers in this batch, though users still face the invite-code gate.

Control and the resolved critical finding

The system is non-custodial by design. A multisig controls privileged administrative functions. AFI describes its members as ”geographically distributed, institutionally vetted signers” and gives a 3-of-5 threshold as an example, but does not disclose any signer identities. An emergency pause can halt affected contracts. Operations resume only through an undefined ”review and governance process.” A Cantina audit dated 2025-08-01 found one critical-severity issue in the afiUSD contracts, along with medium and low findings. It reports that AFI fixed them and that Cantina verified the fixes. A later Quantstamp audit of the Proof-of-Reserve vault contracts found one high and one medium issue, which it also reports as fixed.

Track record and decision

DefiLlama’s earliest tracked datapoint for AFI Protocol is 2025-12-14. Current tracked TVL is in the $175-225M range, depending on the snapshot time. Withdrawing from afiUSD requires a 72-hour cooldown ”to allow strategy unwinding.” The withdrawal fee is currently zero, but AFI describes it as programmable, so the admin multisig can change it. Compared with other yield-optimizer vaults that use Pendle and lending, AFI’s underlying strategy is not unusual. The reasons to reject it are its undisclosed operator, anonymous team, offshore jurisdiction with no arbitration, and invite-gated front door paired with a ”permissionless” marketing claim.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

• AFI Protocol documentation — afiUSD vault and strategy analysis · primary · accessed 2026-08-19
  Supports: vault mechanism, lending, Pendle PT, and leveraged PT loop strategies, 72-hour withdrawal cooldown
• AFI Protocol — Terms of Use · primary · accessed 2026-08-19
  Supports: Nevis governing law, no named operating entity, no arbitration clause
• AFI Protocol — KYC policy · primary · accessed 2026-08-19
  Supports: restricted jurisdiction list, scope of KYC applicability
• AFI Protocol — audits and bug bounty · primary · accessed 2026-08-19
  Supports: Cantina critical finding and resolution, Quantstamp audit findings
• DefiLlama — AFI Protocol protocol data · secondary · accessed 2026-08-19
  Supports: TVL history, chain breakdown

Inherited controls

The research above describes the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The layer with the most administrative power sets the position’s effective control; that describes control, not quality or suitability.