Marinade (mSOL)

The assessment remains adverse until measurable research conditions are met. Marinade no longer operates the delegation mechanism that supported its earlier decentralization claims: an algorithmic rebalancer that spread stake across 400+ validators and scored decentralisation into every allocation. MIP-3, approved November 2024, retired it and moved all stake allocation to the Stake Auction Marketplace, a fixed auction that ranks validators by yield (commission plus bid) and fills top-down, with decentralisation reduced from an objective to a side constraint. Marinade’s own validators API, read 2026-08-14, shows 46 validators holding mSOL stake, the top five at 41.1% and two hosting providers (Amarutu, Allnodes) near 40% combined. This is below the previously documented 200-validator monitoring condition. The comparison has also reversed: Jito’s Steward now spreads stake in near-equal targets across the top 400 validators. The numbers weakened with the mechanism. mSOL liquid TVL fell from $1.43B in January 2025 to $181M at this review, per DefiLlama, and identifiable AMM depth is under $2M against the entry’s $25M liquidity floor. The deeper routable figure used for that floor could not be reproduced, and the review remains open. An $8M market sale broke the peg about 15% intraday on 2023-12-12 into deeper books than exist today. Important facts still stand: five years on mainnet, no exploit, no loss of staked principal from any contract failure; audits by Kudelski, Ackee, Sec3, and Neodyme on a schedule that runs through 2026; a $250k Immunefi bounty. The 2023 depeg was a liquidity event, not a protocol failure, and delayed unstake worked throughout it. The SAM sandwich-validator episode was misconduct inside the delegated set, followed by the DAO blocklisting 50+ validators under MIP-9. Growth moved to Marinade Native ($212M) and the institutional Select line. The operation is healthy, but the mSOL float is not. This is not a finding of contract failure. It is the research state of a file whose deciding argument described a mechanism that had already been replaced. The primary API’s 46 validators are those holding active mSOL stake, not the larger eligible or tracked set. Any client action or amount is a separate advisor decision.

Review triggers: events that reopen the verdict
• Reopen only after active mSOL stake is distributed across at least 200 validators for two consecutive quarters, with the top five below 20% and any one hosting provider below 20%
• Reopen only after a proposed-size mSOL exit quotes below 50 basis points and delayed unstake completes within 7 days in three monthly tests
• Reopen only while mSOL liquid TVL exceeds $250M and independently reproducible executable exit depth exceeds the $25M liquidity floor
• Reopen only after the program upgrade authority, pause powers, and Council signers and 4-of-7 threshold are reproduced from current on-chain state
• Any active-validator count below 200, mSOL/SOL discount beyond 2% for 48 hours, delayed unstake beyond 7 days, or unaudited delegation change keeps the protocol rejected

Confirmed 2026-09-25: 42 days quiet, TVL $282M (+17% in 30 days), no open item. Holds to 2027-09-26 while the watch stays quiet.

The research file

Delegation breadth and concentration

Earlier evidence described Marinade as distributing stake across 400+ validators, with 200 validators documented as a monitoring boundary. Marinade’s own validators API, validators-api.marinade.finance, read 2026-08-14, shows 46 validators with mSOL stake, out of 697 tracked, holding 2.34M SOL of liquid stake. Solana Compass separately shows 44 staked validators at epoch 1016 with 2.40M SOL. Including Marinade Native, the combined set reaches 77 validators. Unless the earlier evidence used validator set to mean something else, such as the 697 tracked or eligible bidders, the observed active set is much narrower than the claim.

Concentration inside the liquid pool is high. The top 5 validators hold 41.1% of mSOL stake. The top two, SOLGirl and Moise, are both hosted by Amarutu Technology in the Netherlands and hold 18.4% between them. Three of the top six run on Allnodes in Germany, about 22% combined. The 15% per-validator TVL cap is the only hard brake, and 15% of TVL is a wide cap for a fiduciary product.

The mechanism behind the number changed eight months before the earlier evidence. The thesis relied on an algorithmic rebalancer that weighed performance, commission, and decentralisation. That describes the pre-MIP-3 system. Since November 2024, all allocation has run through the SAM auction, ranked by yield and filled top-down, with decentralisation reduced from an objective to a constraint. The process still follows rules, but the anti-concentration feature priced into the approval is gone from the ranking formula. The claim that Marinade runs the most explicitly anti-concentration delegation strategy among major Solana LSTs is not supportable after SAM. The auction channelled enough stake to sandwich-attacking validators that the DAO had to blocklist more than 50 of them, and two hosting providers account for roughly 40% of current mSOL stake.

The Jito comparison has reversed on delegation breadth. Jito’s Stakenet Steward docs say it evaluates 1,000+ validators every 10 epochs and delegates to the top 400, num_delegation_validators equals 400, with roughly equal target allocations. By validator count and per-validator weight, JitoSOL’s distribution is now wider and flatter than mSOL’s. The remaining argument against Jito is its client-software monoculture, with the Jito client running on more than 95% of network stake, not its delegation distribution.

The mechanism

mSOL is an exchange-rate token, not a rebasing token. Docs say mSOL increases in value every epoch relative to SOL. The contract supplies the rate, and Marinade quotes APY as a 30-day simple moving average of the 14-day rate change. Deposits mint mSOL at the current rate. Rewards raise the rate rather than the balance.

Delegation no longer uses the scored algorithm described in the approval. Marinade’s original strategy scored validators on performance, commission, and decentralisation. It was a fork of the Solana Foundation’s stake-o-matic, with public code in the delegation-strategy-2 repository. Docs say that after MIP-3, approved November 2024, all stake allocation moved to the Stake Auction Marketplace. Validators bid a share of their revenue. Marinade ranks all eligible validators by max_yield, commission plus bid, and allocates stake top-down until all available stake is distributed. A bot rebalances it once per epoch. It remains algorithmic in the narrow sense, a fixed ranking with no person choosing winners, but the goal changed from decentralisation-weighted scoring to a yield-first auction with decentralisation as a side constraint. The constraints, per docs as of epoch 946, are a per-validator cap of 15% of Marinade’s TVL, no allocation that pushes a hosting provider above 30% of Solana network stake, no allocation that pushes a country above 40% of network stake, eligibility gates, and a DAO blocklist.

Since February 2024, Protected Staking Rewards has required validators to post SOL bonds. Docs say the bond compensates stakers if a validator underperforms or raises commission mid-epoch. Neodyme audited the Validator Bond program in 2024.

Marinade Native, launched 2023, is separate from mSOL. It mints no token, delegates the user’s stake accounts across the same SAM validator set, and is described in the docs as non-custodial. Marinade Select is a third, institutional line. DefiLlama tracks the liquid product and Native as separate protocols.

The unstake paths, per the docs fees-and-pricing page read 2026-08-14, work as follows. A delayed mSOL unstake deactivates at the next epoch boundary and becomes claimable after about one epoch, 2 to 3 days, for a 0.2% fee. Instant mSOL unstake is now described as a swap to SOL at market price with no protocol fee and with market price impact. An older docs page described a protocol-owned mSOL/SOL pool with a 0.1% to 9% formula fee, while the current page does not. The docs therefore do not make clear which mechanism serves a large exit today. Native unstakes free through the delayed path and instantly through a liquidity-provider marketplace at a dynamic 0.10% to 0.40% fee. Deposits carry no fee on any product. Docs say Marinade takes no cut of staking rewards and instead earns from the validator side of SAM, though a 2026 Neodyme audit covers deposit fee functionality, which conflicts with the no-deposit-fee page.

Who controls it

Docs and the Marinade blog say the main liquid-staking contract’s upgrade authority moved from a 13-party community multisig requiring 6 signatures to MNDE holders governing through Realms. Third parties, including Messari, repeat this. This review did not independently read the authority on-chain.

Governance has two levels, according to the docs. MNDE holders vote by locking MNDE on Realms with a 30-day unlock. A Council, a 4-of-7 multisig, holds Realms configuration and admin authority over various programs. A small multisig therefore holds daily admin power even though token governance holds the main upgrade authority. Signer identities could not be verified from docs.

Pause powers could not be verified. No docs page was found that states who can pause deposits, unstaking, or delegation, or whether a pause exists. For mSOL, the protocol’s program-derived address controls the pooled stake accounts. For Native and Select, docs say the design is non-custodial and users retain control of their SOL, but the pages reviewed do not state the exact split between staker and withdraw authority.

Marinade Select, launched 2025-05-21 by Marinade Labs, provides native staking across a curated, KYC-verified validator set that bans front-running and sandwiching. It has SOC 2 Type 2 compliance and custodian integrations with BitGo, Zodia, and Copper. Canary Capital’s Solana ETF, SOLC, launched 2025-11-18, stakes 100% of assets through Select with BitGo custody. Messari reports that Select TVL grew 205.5% quarter over quarter to 2.7M SOL in Q4 2025 and is the protocol’s main source of growth. The flagship is moving toward institutional and native products, and mSOL is no longer where Marinade’s growth lies.

The record

Marinade has run on mainnet since August 2021 and was the first Solana LST. The MNDE token launched November 2021 as a fair launch with no ICO. The on-chain DAO dates from April 2022.

The TVL history comes from the DefiLlama API in USD on 2026-08-14. The liquid product peaked at $1.88B on 2021-11-08, fell to $64M at end-2022 during the FTX winter, rebuilt to $1.43B in January 2025, and stands at $181M today. Marinade Native peaked at $1.21B in October 2025 and holds $212M today. JitoSOL, for scale, holds $757M today. SOL’s price explains part of the 2025-2026 fall, but mSOL has also lost share to JitoSOL and to Marinade’s own Native and Select lines. The mSOL float available for client exits is a fraction of its size near earlier review dates.

No protocol exploit was found. No source reviewed records a loss of staked principal from a Marinade contract failure in five years of operation.

Three incidents did occur. On 2023-12-12, a holder market-sold roughly $8M of mSOL into thin DEX liquidity. Third parties report an intraday gap of about 15% against SOL, with some coverage saying nearly 20%. The peg recovered quickly, but the move liquidated leveraged mSOL borrowers on marginfi and Kamino. Solend was unaffected because its oracle ignored the LST market price. Secondary-market depth, not the contract, caused the event. The 2%-for-48-hours review trigger measures duration, so the same event would not trip it. It would still hurt any client forced to exit during the move. Second came the SAM sandwiching episode of 2024-2025. After SAM made stake purchasable, validator operators said in public that yield-maximising auctions rewarded validators running sandwich attacks and sybils. Critics claimed about 2.7M SOL had flowed to questionable operators. The DAO responded with MIP-9, blocklisting first 73 proposed and then more than 50 confirmed malicious validators, using Ghostlogs and on-chain analysis. This was validator misconduct inside Marinade’s delegated set, followed by a governance blocklist. Third, in October 2023, Marinade blocked UK front-end access because of FCA promotion rules, while withdrawals remained possible through the SDK. This was a regulatory step, not a loss event.

The audit schedule, per the docs audit page, includes Kudelski Security 2021, Ackee Blockchain 2021, a Neodyme code review 2021, Neodyme and Sec3 in 2023 on a contract upgrade, Neodyme 2024 on the Validator Bond and Protected Staking Rewards programs, and Neodyme 2026 on canonical stake accounts and deposit fees, finding no issues at any severity level. The recurring Neodyme work through 2026 is a clear positive.

The Immunefi bounty has been live since 2021-12-01. It pays a $250k maximum for critical issues, a $50k minimum at 10% of affected funds, and up to $15k for high issues, in mSOL and MNDE, with no KYC. Against $181M of liquid TVL, the cap is about 0.14% of TVL. That is thin by the standard applied to StakeWise at $200k against $700M.

The chain

The Solana chain verdict is approved-with-limits with two watch items, and current readings for both have worsened. Third parties report about 795 active validators in late January 2026, down 68% from the 2,560 peak of March 2023, with roughly 900 in another mid-2026 count. Reports attribute the fall to node economics that squeeze small operators. The Nakamoto coefficient was 20 in late January 2026 against 31 in March 2023, with some mid-2026 coverage citing 19.

Marinade’s effect on those watch items is mixed and worse than earlier research assumed. SAM’s network-level constraints, a hosting provider below 30% and a country below 40% of network stake, are real brakes on chain-level concentration. The old scored strategy’s decentralisation bonus is gone. In practice, mSOL’s 2.34M SOL now sits with 46 validators, about 0.5% of network stake, so it has little power to move the chain-level Nakamoto coefficient either way. The direction matters more. A yield-first auction sends stake to the highest bidders, which favors sophisticated and often co-hosted operators. Two of the top three mSOL validators share one Netherlands hosting provider. Marinade’s marketing still names decentralisation as a goal, but the mechanism no longer seeks to maximize it. It only sets limits on concentration. Marinade neither clearly improves nor materially worsens the chain’s watch items today, and the claim that holding mSOL is a vote against concentration is now mostly a story.

The exit

Delayed unstake is the reliable path. It requires deactivation at the next epoch boundary and then a claim, takes 2 to 3 days, and costs 20 basis points, with capacity limited only by the stake pool itself. Under normal operation, that is well inside the 7-day review trigger.

Secondary depth is thin and much lower than in the earlier evidence. Per DefiLlama yields data on 2026-08-14, the largest identifiable mSOL DEX pool is Raydium WSOL-MSOL at about $674k, followed by Kamino SOL-MSOL at $610k, with Orca pairs under $200k each. Identifiable AMM pairs total under $2M. Most mSOL in DeFi sits in lending markets, Save at $17.9M and Kamino Lend at $17M. That is loop collateral, not exit depth. Aggregators, Jupiter and Sanctum’s router and reserve, draw on more liquidity than raw pool TVL suggests, but that effective depth cannot be reproduced from pool TVL today. A seven-figure market sale broke the peg 15% in December 2023, and visible pool depth today is smaller than it was then.

Instant unstake capacity remains unverified. Docs now route instant mSOL exits to market swaps, so capacity equals that secondary depth plus any amount absorbed by the liquidity-provider marketplace. No stated capacity figure was found. For any future sleeve, large exits should default to delayed unstake. Instant exit is a convenience for small amounts. The 2%-for-48-hours discount test should use aggregator quotes at trade size, not pool mid-prices.

The watch list

The next review should track readings that can be observed today. Validator count means the number of validators in the validators API with marinade_stake above zero, now 46 against a kill line of 200. Rebalancer control needs a SAM-era definition because the old kill line covered a rebalancer becoming discretionary. Observable events include eligibility or blocklist changes outside the DAO process, an increase in the 15% TVL cap, weaker hosting-provider or country constraints, or a Select-style curated set replacing the open auction for mSOL. The secondary discount test is mSOL/SOL below 0.98 for 48 hours on executable aggregator quotes at size, around 10k SOL. Moves like 2023-12-12 should also be logged when they last less than 48 hours. The unstake trigger is a queue over 7 days or delayed-unstake claims failing for an epoch.

Depth should be measured with executable aggregator quotes at the proposed size, while DEX pair TVL remains only context. Today’s pool-level reading does not prove capacity. mSOL liquid TVL is $181M and falling. A fall through about $100M would leave the $250k bounty and audit economics supporting a still-material client exposure while depth shrinks further. Concentration readings include the top-5 validator share of mSOL stake, now 41.1%, and each hosting provider’s share, Amarutu at 18.4% and Allnodes at about 22%. A single validator reaching the 15% TVL cap is an observable event. Governance triggers include changes to the Council multisig, any upgrade made with less than the DAO process, or a pause event once the review learns whether pause powers exist. Product drift is already visible in Marinade’s move from mSOL toward Native and Select. An announcement of an mSOL sunset, migration, or fee change is a hard review trigger.

Open questions

Pause powers remain unknown. No documentation was found stating who can halt deposits, unstaking, or delegation, or whether a pause mechanism exists. The claim that the DAO controls the on-chain upgrade authority rests on docs and third parties. This review did not read the program’s upgrade authority on-chain. The Council multisig is 4-of-7 per docs, but the signer identities appear to be unpublished. The pages reviewed also do not state the authority structure for Native and Select, including who holds staker authority and withdraw authority.

The current instant unstake mechanism is unresolved. Older docs describe a protocol-owned pool with a 0.1% to 9% formula fee. Current docs describe a plain market swap. Which mechanism is live and how much capacity it has remain unverified. The entry’s visible DEX pool data shows under $2M in identifiable AMM pairs. An executable aggregator quote at the proposed size and a fixed measurement method are still needed. The 2026 Neodyme audit scope mentions deposit fee functionality, while the fees page says no product charges deposit fees. This may involve a new canonical-stake-account fee path, but it remains unresolved. Coverage places the MIP-9 blocklist votes and the 50-plus validator blacklist across 2024-2025. The forum holds the exact dates.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

• Marinade Stake Auction Marketplace docs · primary · accessed 2026-08-15
  Supports: 100% SAM allocation, yield-ranked delegation, eligibility and concentration constraints
• Marinade validators API · primary · accessed 2026-08-14
  Supports: active mSOL validator count, validator stake allocation, hosting concentration
• DefiLlama Marinade liquid staking TVL · secondary · accessed 2026-08-14
  Supports: mSOL liquid TVL, historical TVL
• Jito Steward program docs · primary · accessed 2026-08-15
  Supports: peer delegation method, validator target comparison
• Marinade MIP-9 validator blocklist · primary · accessed 2026-08-15
  Supports: malicious validator blocklist, governance response, SAM incident
• SolanaFloor mSOL depeg report · secondary · accessed 2026-08-15
  Supports: December 2023 sale, mSOL discount, liquidations
• Marinade audits page · primary · accessed 2026-08-15
  Supports: audit firms, review dates, 2026 audit scope

Inherited controls

The research above describes the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The layer with the most administrative power sets the position’s effective control; that describes control, not quality or suitability.