Lazy

Lazy issues lazyUSD from one Ethereum USDC vault while multisig operators deploy capital across delta-neutral basis, options-arbitrage and gamma-scalping positions at Hyperliquid, Lighter, Derive, Rysk, Pendle and HyperLend. The client owns one vault share while the operator selects, sizes and unwinds those venue exposures. That continuing manager authority is more fundamental than the approximately $1.00M measured on 2026-08-16, so the version-1 delegated-allocation dossier rejects Lazy at zero. Formal invariant tests do not cover operator performance, venue failure, negative funding or strategy loss.

Review triggers: events that reopen the verdict
• Enforces an immutable client-specific allowlist and client-specific venue constraints covering every basis, option, Pendle and lending position, with operator authority, holdings, debt and realized losses independently observable
• Demonstrates a proposed-size stressed USDC withdrawal through the queue and every active venue without new subscriptions, operator substitution or discretionary override

Watched nightly: a warning on its venues or files, or a cited document that changes, reopens the memo. The first confirmation is due 2026-11-15.

The research file

Mechanism and class applicability

USDC deposits mint lazyUSD, an ERC-4626-style vault share whose USDC value is intended to increase as the vault earns. Lazy describes three concurrently managed strategies: spot versus short-perpetual basis yield, cross-venue options arbitrage, and delta-hedged gamma scalping. The live backing page maps positions across Hyperliquid, Lighter, Derive, Rysk, Pendle and HyperLend. The user selects none of those positions after deposit, so the claim directly satisfies delegated allocation.

Current observation and look-through perimeter

The DefiLlama API read on 2026-08-16 classified Lazy as Yield and reported approximately $1.00M on Ethereum. Its adapter reads totalAssets from vault 0xd53B68fB4eb907c3c1E348CD7d7bEDE34f763805 and describes the strategy as delta-neutral across Ethereum, Solana and Hyperliquid; the record is marked double-counted because venue assets can also appear elsewhere. Ethereum is the receipt and survey chain, while the strategy look-through extends to the disclosed external venues and their settlement dependencies.

Control, security and exit applicability

Lazy calls the vault semi-custodial: multisig operators must return capital from active positions to satisfy withdrawals. Its security page says no traditional third-party audit has been engaged; published Halmos properties cover specified on-chain invariants, not omitted properties, off-chain operator behavior or external venue contracts. Withdrawals enter a queue with a stated seven-day notice target, so an instruction is not proof of an executable proposed-size USDC exit under venue downtime or loss.

Why the class rule decides

The vault can replace and resize derivatives, option, Pendle and lending exposure without a new client decision. Transparency into current backing does not give the advisor an immutable approved-venue allowlist or client-specific venue constraint. The shared version-1 delegated-allocation dossier therefore decides before the separate size problem. Reopen only if a client-specific immutable policy limits every strategy and venue to approved claims and caps, authorities, debt and realized losses are independently observable, and a proposed-size queued withdrawal clears every active venue without manager substitution.

Class rule

The delegated allocation class is outside the approved structures, so every protocol in it is not approved until the rule changes. The rule is about the structure, not an adverse finding about this protocol, and it is not a client instruction. The events that would reopen it are listed with the memo.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

• Lazy — vault, strategy and withdrawal documentation · primary · accessed 2026-08-16
  Supports: lazyUSD, USDC deposit, delta-neutral strategy, operators, seven-day withdrawal, fees
• Lazy — live strategy backing · primary · accessed 2026-08-16
  Supports: Hyperliquid, Lighter, Derive, Rysk, Pendle, HyperLend, positions, debt
• Lazy — formal verification and residual risks · primary · accessed 2026-08-16
  Supports: Halmos invariants, no traditional audit, semi-custodial, multisig operators, venue risk, negative funding
• Lazy — public vault implementation and invariant tests · primary · accessed 2026-08-16
  Supports: vault source, withdrawal queue, operator roles, formal tests, contract implementation
• DefiLlama adapter — Lazy vault methodology · secondary · accessed 2026-08-16
  Supports: vault address, totalAssets, Ethereum receipt, Solana and Hyperliquid look-through, double counting
• DefiLlama — Lazy survey record · secondary · accessed 2026-08-16
  Supports: current TVL, Ethereum, Yield category, survey observation

Inherited controls

The research above describes the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The layer with the most administrative power sets the position’s effective control; that describes control, not quality or suitability.