Derive V2

Our research assessment is favorable with conditions. Derive’s Terms identify Lyra Technologies Corp. as the interface operator and define US residents, citizens, entities, agents, and persons organized under US law as Restricted Persons. The protocol itself is a self-custodial options, perpetuals, and spot risk engine on an OP Stack application chain, with margin and liquidation rules checked on chain, a Security Module for insolvent debt, published Sigma Prime audits, on-chain DAO governance with timelocks, and a live Immunefi bounty. Those are meaningful strengths. Some control remains centralized: Derive Trading Co. operates the order book, a whitelisted sequencer controls contract deployment, governance sets risk parameters, and fast withdrawals through the custom Socket bridge have global daily limits. None is the reason for a research-only status today. The product’s own terms make it legally unavailable to the clients this registry serves.

Review triggers: events that reopen the verdict
• Derive publishes terms permitting this registry’s United States client population to trade or hold positions through the application
• Derive or a named affiliate obtains and publishes the registration or exemption governing its options and perpetuals offering to United States clients
• The centralized matcher, sequencer, or custom bridge is unavailable for more than one hour or prevents a proposed-size exit
• Any protocol-fund exploit, Security Module shortfall, or accepted audit behavior produces a realized client loss
• The deployer whitelist or governance timelock is bypassed for a production contract change

Confirmed 2026-09-25: 37 days quiet, TVL $189M (+18% in 30 days), no open item. Holds to 2027-09-26 while the watch stays quiet.

The research file

Mechanism and return source

Derive V2 groups collateral, spot assets, options, and perpetual positions inside ERC-721 subaccounts. Each subaccount subscribes to a Risk Manager that calculates portfolio margin and determines whether it can be liquidated; Asset contracts set the properties of each instrument. Margin, clearing, liquidation, and settlement execute on Derive Chain, an OP Stack rollup, while Derive Trading Co. operates a centralized limit order book that matches signed orders. Part of the fees goes to a Security Module reserved to pay insolvent debt. A client position is therefore direct options or perpetual PnL, or collateral supporting it, rather than passive protocol yield, and can lose the full posted margin through ordinary market movement without any incident.

Categorical eligibility bar and legal identity

The current Terms say the Derive Protocol is governed by Derive DAO and the hosted application, off-chain order book, and wallet infrastructure are operated by Lyra Technologies Corp. They define a Restricted Person broadly enough to include US residents, citizens, agents, companies, trusts, partnerships, estates, and entities incorporated or governed under US law, alongside Australia, Canada, Panama and sanctioned jurisdictions. Separate airdrop terms identify Lyra Technologies Corp. as a Panama-incorporated company, while also treating Panama-linked users as restricted under the general terms. Whatever the reason for that structure, the US language is clear and rules out an advisor-directed allocation through the application.

Governance, control, and oracle surface

DRV holders stake into stDRV for proposal and voting power. Passed on-chain proposals wait in short or long timelock executors depending on whether they change protocol, treasury, token, or meta-governance state; a community multisig guardian can cancel a proposal before execution. The technical design limits parameters to fixed deployment-time ranges and says changes such as new markets can take up to a week. The chain nevertheless retains a deployer whitelist enforced through the sequencer and administered after DAO approval, and the exchange’s centralized matcher must remain available. Price and volatility inputs used in portfolio margin are also key oracle dependencies even when the final solvency check occurs on chain.

Security and incident record

Derive publishes Sigma Prime assessments for the core protocol and has operated an Immunefi program since 2021, updated in January 2026, with a maximum critical award of $50,000 or 10% of directly affected funds. The public audit-response log records that a critical pre-deployment finding, draining funds by liquidating an account during an asset transfer, was fixed, while another self-trading behavior was accepted as intended because of the maintenance-to-insolvency buffer. No exploit affecting protocol or tokenholder funds was identified through the reviewed incident sources as of this cutoff. The record is a strength, but the modest bounty cap relative to roughly $128M of current TVL and the accepted design behaviors still require monitoring and do not prove that future portfolio-margin loss cannot occur.

Chain perimeter, exit, and comparison

Derive settles on its own chain, but DefiLlama attributes current collateral across Hyperliquid L1, Base, Ethereum, OP Mainnet, Arbitrum, and zero-balance historical Blast and Mode paths; the registry uses those exact feed names so a rejection cannot silently miss an observation. The custom bridge uses Socket contracts and L1/L2 messaging. Fast withdrawals typically take minutes but are subject to global daily caps; the standard OP Stack path provides the slower alternative that requires less trust. Compared with Extended, Derive offers clearer DAO timelocks and a modular on-chain risk engine but relies on an OP sequencer and custom bridge instead of Starknet validity settlement. Both use centralized matching, and both categorically exclude US clients. The correct alternative for this mandate is no unregistered offshore derivatives allocation.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

• Derive — Terms of Use · primary · accessed 2026-08-19
  Supports: Lyra Technologies Corp. interface role, broad United States Restricted Person definition, DAO and application distinction
• Derive documentation — protocol overview · primary · accessed 2026-08-19
  Supports: subaccounts, managers, and assets, Security Module, on-chain margin calculations, Sigma Prime audit claim
• Derive documentation — governance · primary · accessed 2026-08-19
  Supports: stDRV voting, short and long timelocks, community multisig guardian
• Derive documentation — chain · primary · accessed 2026-08-19
  Supports: OP Stack chain ID 957, sequencer-enforced deployer whitelist, DAO approval process
• Derive — technical overview of V2 · primary · accessed 2026-08-19
  Supports: portfolio-margin architecture, parameter ranges and change timing, oracle dependency, verified integrations
• Derive Help Center — bridge and withdrawal timing · primary · accessed 2026-08-19
  Supports: Socket custom bridge, fast-withdrawal daily limits, source-chain timing
• Immunefi — Derive bug bounty · secondary · accessed 2026-08-19
  Supports: $50,000 maximum bounty, protocol scope, January 2026 update
• DefiLlama — Derive V2 protocol data · secondary · accessed 2026-08-19
  Supports: seven-chain feed perimeter, current TVL, derivatives classification

Inherited controls

The research above describes the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The layer with the most administrative power sets the position’s effective control; that describes control, not quality or suitability.