DeFi Saver

Approved for: positions on Ethereum, Arbitrum One, OP Mainnet, Base. The limits are in the memo below.

The assessment is favorable with conditions because DeFi Saver is a dependency, not a position. DeFi Saver is not itself an allocation. DefiLlama’s tracked figure is the total value of client positions on Maker/Sky, Aave, Compound, Spark, Liquity, and other already-evaluated protocols that currently have an active DeFi Saver automation subscription, including Boost, Repay, stop-loss, or take-profit. The underlying exposure and its verdict come from the protocol where the base position sits. This entry evaluates only the added trust risk from the automation layer. DeFi Saver discloses that layer clearly. DFS Solutions Limited Partnership, a named British Virgin Islands entity, operates the product. The platform is non-custodial and runs pre-approved recipes against a user’s own smart wallet instead of pooling funds. A split 2-of-3 and 3-of-5 multisig structure with 1-to-7-day timelocks governs contract upgrades. Six independent audits have run since 2021, and an active Immunefi bug bounty pays up to $350,000. The platform’s own Terms of Service exclude US persons only from its separate Hyperliquid perpetuals-trading feature, not from the core CDP-automation product covered here. The conditions account for the added bot-execution authority on top of the base protocol to which a client is exposed. This approval expressly excludes the Hyperliquid perpetuals feature.

Review triggers: events that reopen the verdict
• Admin and Owner multisig signer identities are publicly disclosed
• Twelve consecutive months with no bot-execution, recipe, or smart-wallet compromise
• This approval does not extend to the Hyperliquid perpetuals feature unless that feature’s own US-person exclusion is independently reassessed
• The underlying protocol a client’s automated position sits on remains itself approved in this registry; this entry does not substitute for that separate evaluation

Reaffirmed 2026-09-26: 0 days quiet, no open item. Holds to 2026-12-28 while the watch stays quiet.

The research file

Mechanism and what the tracked figure represents

DefiLlama’s ”Defi Saver Asset Management” listing and its sibling ”Defi Saver” listing report near-identical TVL because both describe the same underlying automation base, not two separate products. The figure is the total value of all positions across Maker/Sky, Aave, Compound, Spark, Liquity, and other lending or CDP protocols that are currently subscribed to a DeFi Saver automation strategy. Users build or select ”recipes,” which are bundled transaction sequences, and subscribe a position to a strategy with trigger conditions based on price, collateral ratio, or time. Keeper bots monitor the position and run the recipe once a trigger fires. Every operation runs from the user’s own smart wallet, a Safe by default, which the user owns and controls at all times.

Legal structure and eligibility

The operating entity is DFS Solutions Limited Partnership, a British Virgin Islands limited partnership. The Terms of Service, last updated 2026-05-21, apply BVI law and name BVI courts as the forum. Product development is credited to Decenter, an Ethereum-focused R&D incubator now focused entirely on DeFi Saver, though this review did not independently confirm Decenter’s jurisdiction. Access is permissionless with no KYC gate. The Terms set a narrow restriction for the platform’s Hyperliquid perpetuals-trading feature and bar only users in the United States and Ontario, Canada from that specific feature. The core lending-automation product does not have the same restriction. Standard OFAC/UN/EU sanctions-list and sanctioned-jurisdiction exclusions apply across the platform, with screening through Chainalysis.

Control

Core contracts sit behind a DFSRegistry with split administrative roles. A 2-of-3 ”Admin” multisig activates upgrades, while a 3-of-5 ”Owner” multisig starts them. Changes to non-action core contracts carry a 7-day timelock. Changes to action contracts carry a 1-day timelock. Automation contract upgrades carry a 24-hour timelock. The Owner multisig keeps an emergency self-destruct power on certain contracts to halt execution. The documentation states that the contracts subject to self-destruction hold no client funds. This emergency-pause design therefore creates no custodial risk even when used. No source this review could access disclosed the identities of the specific multisig signers.

Track record

The product traces to roughly 2018 and has integrated Maker, Compound, Aave, and other protocols over its multi-year history. The earliest independent audits date to March 2021, from Dedaub and ConsenSys Diligence, and continued through 2024, from Dedaub and Optimum, across recipe, strategy, and wallet-upgrade contracts. An active Immunefi bug bounty pays up to $350,000 for a critical smart-contract vulnerability. This review found no protocol-level exploit or fund loss. The search was not exhaustive, but it included a direct check of an incident tracker.

Comparison and decision

This registry has rejected pure-infrastructure entries with no directly investable client product, including SSV Network, Obol, and M0. DeFi Saver differs from them in kind because a client’s own smart wallet, not a downstream provider, is automated, and the client keeps control of that wallet throughout. This registry has also rejected curators and allocators as a category. DeFi Saver provides much stronger disclosure than those entries on every point: a named entity, a disclosed multisig structure with timelocks, a multi-year audit history, and an active bounty. The approval is narrow. It covers only the automation layer, not exposure to the underlying protocol, and excludes the Hyperliquid perpetuals feature that the platform’s own terms treat differently.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

• DeFi Saver — Terms of Service · primary · accessed 2026-08-19
  Supports: DFS Solutions Limited Partnership BVI entity, BVI governing law, Hyperliquid-feature-only US and Ontario exclusion, sanctions screening
• DeFi Saver documentation — recipes, strategies, and automation · primary · accessed 2026-08-19
  Supports: non-custodial smart-wallet architecture, bot-executed recipe mechanism
• DeFi Saver documentation — admin, access control, and pause mechanics · primary · accessed 2026-09-15
  Supports: 2-of-3 Admin and 3-of-5 Owner multisig split, timelock durations, self-destruct pause design
• DeFi Saver documentation — audit history · primary · accessed 2026-09-15
  Supports: Dedaub, ConsenSys Diligence, and Optimum audit list, audit dates
• Immunefi — DeFi Saver bug bounty program · primary · accessed 2026-08-19
  Supports: active bug bounty, up to $350,000 critical payout
• DefiLlama — Defi Saver Asset Management protocol data · secondary · accessed 2026-08-19
  Supports: TVL methodology as aggregate automated-position value

Inherited controls

The research above describes the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The layer with the most administrative power sets the position’s effective control; that describes control, not quality or suitability.