Clearstar
The research assessment is adverse because Clearstar’s own published due-diligence standard describes its vault structure as grounds for rejection. Clearstar runs curated Morpho vaults, plus positions on Euler, Flare, Upshift, IPOR, OpenEden, and Spectra, across eleven chains, holding roughly $183M. Every Clearstar Morpho vault checked in this review shares one owner address and one curator address. A direct on-chain code check on Base confirms both are plain externally-owned accounts, not multisigs. A single key controls risk parameters and admin functions across an eleven-chain, $183M curator. Clearstar’s published due-diligence framework, which it uses to score third-party protocols, lists ”unclear admin rights, unverified multisigs, unknown signers, EOA admin keys” as a red flag. That description matches its own vaults’ control structure, which is not among the protocols it has published a report on. Its legal disclosures are also internally inconsistent. Marketing describes Clearstar as ”a Swiss risk curation firm” founded in 2022, but its Terms of Service name the website operator as NovaFusion S.A., a Panamanian company that licenses IP from a separately referenced ”Clearstar Labs AG.” This review could not independently verify that company as a registered Swiss entity. Clearstar’s Legal Notice states plainly that it ”will be refined… as the company legal framework evolves.”
- Vault admin authority moves to a disclosed multisig with named signers and a threshold, replacing the single EOA control confirmed in this review
- A consistent, complete legal-entity disclosure is published, resolving the Swiss-branding-versus-Panama-operator inconsistency
- The cause of the October 2025 to February 2026 TVL swings is identified and confirmed
- Clearstar publishes a due-diligence report on its own curated vaults using its own stated methodology
Confirmed 2026-09-25: 37 days quiet, TVL $241M (+15% in 30 days), no open item. Holds to 2027-09-26 while the watch stays quiet.
The research file
Mechanism and TVL composition
A depositor holds an ERC-4626 Morpho-style vault share that represents a claim on the underlying lending markets where Clearstar places funds. A direct query of Morpho’s own API finds 28 Clearstar-branded vaults, but only five hold meaningful balances. Together, they hold roughly $7M, a small fraction of the roughly $183M that DefiLlama tracks under the Clearstar curator entity. Most tracked value is on Base (roughly $77M) and Flare (roughly $59M). It sits outside the positions this review could verify directly through Morpho’s API, on venues (Flare, Upshift, IPOR, OpenEden, Spectra) that this review could not independently check for the same control questions. The Morpho vaults use standard liquidity-gated exits, with no Clearstar-specific lockup disclosed. This review did not verify redemption terms on the non-Morpho venues.
Single-key control, confirmed on-chain
Every Clearstar Morpho vault checked shares one owner address and one curator address across every chain. A separate vault pair uses a different but similar pair of single-EOA addresses. A direct `eth_getCode` call for both addresses on Base returned empty bytecode, confirming that they are plain externally-owned accounts rather than a Gnosis Safe or another multisig contract. One private key therefore controls risk parameters and admin functions for the vaults this review could verify. Clearstar publishes a due-diligence method on its own site and uses it to score the admin structures of other protocols. That method flags this exact pattern, unverified multisigs, unknown signers, and EOA admin keys, as grounds for rejection.
Legal structure inconsistency
Clearstar’s About page markets a Swiss origin story and a 2022 founding. Its Terms of Service, however, name the operator as NovaFusion S.A., a company incorporated in the Republic of Panama and registered in the Panamanian mercantile registry. The Terms make Panama the exclusive governing law and jurisdiction. They also name a separate company, ”Clearstar Labs AG,” as the IP owner that licenses the platform to NovaFusion. This review found no independent confirmation that the Swiss company is registered. The Legal Notice page, last updated June 2026, states that it ”is a general disclosure for operational use and will be refined with jurisdiction-specific language as the company legal framework evolves.” That statement admits the disclosure is provisional, not complete.
Track record and unexplained TVL swings
DefiLlama began tracking Clearstar in May 2025, roughly three years after its claimed 2022 founding. No tracked activity or TVL is evident before then. DefiLlama lists zero audits and no recorded hacks or funding rounds for Clearstar. TVL on Base and Ethereum each fell roughly 57% between October 2025 and early 2026 before recovering. This review could not tie that swing to a specific cause. It remains an open, unexplained data point rather than a confirmed incident, which is consistent with how this registry has treated similar unexplained swings elsewhere in this batch.
Comparison and decision
K3 Capital was already rejected in this batch for total entity opacity. Clearstar discloses more, including an operator name and a claimed jurisdiction, but its disclosure contradicts itself and admits that it is incomplete. That is another form of opacity, not a resolution. Clearstar has published four genuinely rigorous due-diligence reports on third-party protocols. Each report candidly flags serious structural issues in the protocol reviewed, which is real evidence of research skill. None covers Clearstar’s own curated vaults, however, so no public self-audit of the firm’s own book can be weighed against the on-chain control findings above.
Sources
The claims above trace to these. Where a number could not be independently verified, the thesis says so.
- DefiLlama — Clearstar protocol data · secondary · accessed 2026-08-19
Supports: TVL by chain and history, zero audits and zero hacks fields - Clearstar — Terms of Service · primary · accessed 2026-08-19
Supports: NovaFusion S.A. Panama operating entity, Clearstar Labs AG IP licensing reference, Panama governing law - Clearstar — Legal Notice · primary · accessed 2026-08-19
Supports: admission that legal disclosure is provisional and incomplete - Clearstar — due diligence framework · primary · accessed 2026-08-19
Supports: published red-flag criteria including EOA admin keys and unverified multisigs - Morpho — GraphQL vault query for Clearstar-curated vaults · primary · accessed 2026-08-19
Supports: shared owner and curator addresses across vaults, vault-level balances
Inherited controls
The research above describes the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The layer with the most administrative power sets the position’s effective control; that describes control, not quality or suitability.
| Chain | Verdict | Control | Control constraint |
|---|---|---|---|
| Base | Approved with limits | Mixed control | Coinbase, one regulated US company, operates the only sequencer, and admin keys can upgrade bridge contracts within ~7 days. |
| Flare | Approved with limits | Governed, no freeze | consensus entry is permissionless, but the Foundation monopolizes governance proposals and manually executes some approved changes. |
| Ethereum | Approved | No freeze key | No sequencer, no upgrade key, no operator who can be compelled. Rule changes require social consensus. |
| Monad | Approved with limits | Governed, no freeze | the L1 has a public validator path, but its short production record, single initial client lineage, and Foundation-directed delegation keep stake and operations concentrated. |
| Hyperliquid / HyperEVM | Rejected | Issuer can freeze | a 21-validator permissioned set operates both the chain and its bridge. One compromise reaches both. |
| Starknet | Approved with limits | Mixed control | validity proofs and a regular exit window constrain control, but permissioned proposers and an instant emergency Security Council remain live dependencies. |
| Arbitrum One | Approved with limits | Mixed control | a single sequencer orders >99% of transactions and admin keys can upgrade bridge contracts on a ~7-day timelock. |
| Polygon PoS | Rejected | Mixed control | a public validator set orders transactions, but a 5-of-9 multisig can instantly upgrade staking and canonical bridge contracts, while a 5-of-8 controls custom child tokens. |