KETJU Research

← The Register

Other

D2 Finance

Not approved Yield aggregators are outside the approved structures
Issued
2026-08-14
Last confirmed
2026-08-14
Next check due
2026-11-15
Chains
Arbitrum One · Mixed control, Hyperliquid / HyperEVM · Issuer can freeze, Base · Mixed control

D2 Finance runs tokenized derivatives strategies through non-custodial vaults on Arbitrum, Hyperliquid L1, Base and Berachain. A vault share delegates ongoing position selection and execution to designated traders operating within strategy-contract limits; the client cannot preserve an advisor-approved set of venues and exposures through each epoch. The DefiLlama API read on 2026-08-15 reported about $27.9M, but size is not the deciding v1 rule. Delegated allocation controls, with actively managed derivatives and integrated-protocol look-through.

The research file

Mechanism and class applicability

Each D2 strategy uses a user-facing ERC-4626 vault, a strategy or Trader contract defining allowed tokens, spenders, modules and functions, and a Trader OMS through which the designated investment team actively trades. Depositors receive a vault share, while the trader changes options, relative-value, hedging and other derivative positions during an epoch. Smart-contract limits constrain the mandate but do not make the portfolio static or let an individual client enforce Ketju’s venue and exposure limits. The v1 delegated-allocation dossier therefore applies.

Current observation and derivatives look-through

The DefiLlama protocol API read on 2026-08-15 reported approximately $27.9M of D2 Finance TVL across Arbitrum, Hyperliquid L1, Base and Berachain. The current product site describes a tokenized onchain multi-strategy fund spanning volatility arbitrage, relative value, dynamic hedging, event-driven positions and structured products. D2 states that its standard contracts limit trader actions, but the share still inherits every selected derivative, venue, oracle, liquidity source, collateral and integration as the managed book changes.

Control and assurance applicability

D2 identifies the vault owner as a default 4-of-7 multisig that can start epochs, set whitelists or blacklists and deposit caps, and manage executor roles; bespoke vault ownership can differ. The executor is separate and trades only through pre-approved assets, protocols and functions. Positions and trades are onchain and D2 publishes audits and periodic reporting, yet authorized traders still choose timing, sizing, hedges and unwind within the mandate. Those controls improve observability without giving the advised holder a client-specific enforceable allocation policy.

Loss and exit applicability

Epochs separate funding, trading and withdrawal. During the trading phase users may not deposit or withdraw and the trader may take custody of vault funds; after positions unwind, capital returns to the vault plus or minus P&L and fees. D2 says flagship strategies generally return funds within 72 hours of expiry, while tactical strategies may trade up to 30 days past expiry. Options, volatility, concentration, market-liquidity and third-party protocol risks can therefore alter both NAV and timing, and published APR is explicitly non-guaranteed with possible total loss.

Why the shared dossier decides

The v1 delegated-allocation rule rejects D2 because the advisor cannot pin the client to static approved positions and limits while professional traders continuously reposition the derivative book. Direct, individually approved positions retain explicit exposure and exit rules; immutable modules alone do not remove manager discretion inside them. Reopen only if a product becomes non-discretionary with client-compatible immutable limits, and live positions, Greeks, collateral, leverage, venue concentration, realized losses and executable unwind liquidity are continuously independently verifiable.

Class rule

The delegated allocation class is outside the approved structures, so every protocol in it is not approved until the rule changes. The rule is about the structure, not an adverse finding about this protocol, and it is not a client instruction. The events that would reopen it are listed with the memo.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

Inherited controls

The research above describes the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The layer with the most administrative power sets the position’s effective control; that describes control, not quality or suitability.

ChainVerdictControlControl constraint
Arbitrum OneApproved with limits Mixed control a single sequencer orders >99% of transactions and admin keys can upgrade bridge contracts on a ~7-day timelock.
Hyperliquid / HyperEVMRejected Issuer can freeze a 21-validator permissioned set operates both the chain and its bridge. One compromise reaches both.
BaseApproved with limits Mixed control Coinbase, one regulated US company, operates the only sequencer, and admin keys can upgrade bridge contracts within ~7 days.
The memo is public. Monitoring connects the research to positions clients actually hold and flags evidence changes for advisor review. $49 per advisor per month, first 14 days free. Start the trial.