Orca DEX
Orca is a concentrated-liquidity AMM on Solana. LPs supply liquidity within chosen price ranges and earn trading fees while the market stays inside them. It held about $257M across roughly 700 pools at the 2026-08-14 survey. A Whirlpool position owns liquidity between chosen ticks. Outside that band, it stops earning fees and becomes single-sided. Orca’s vault authority design and published audit are relevant protocol controls, but they cannot remove the inventory payoff. This is an amm-lp class decision, not an individual security rejection of Orca.
- Ships a product line without impermanent-loss exposure that merits its own review
Watched nightly: a warning on its venues or files, or a cited document that changes, reopens the memo. The first confirmation is due 2026-11-15.
The research file
The mechanism
Orca Whirlpools are concentrated-liquidity pools between token A and token B. Each position places liquidity across a selected tick range and earns its share of fees only while active. As swaps move the price through that range, the position exchanges one asset for the other. A narrow range makes the capital work harder, but also makes the position more sensitive to the same relative-price move.
Control and operating record
The Whirlpool program controls withdrawals from token vaults. Orca documentation says neither the program owner nor the configuration owner can withdraw vault assets. Configuration accounts govern fee tiers and some token-extension authorities, while anyone can create a pool. Orca publishes the program source and a security audit. Those facts do not assess token issuers, each pool or any third-party position manager.
The exit
The position owner reduces liquidity and collects the current token balances, fees and rewards. An exit does not restore the original deposit ratio. Once the price leaves the selected range, the position is economically one-sided. Swapping back incurs market impact, and an impaired or frozen token can make the returned balance unusable.
Why the class rule decides
The amm-lp rule excludes deliberate two-sided inventory exposure, regardless of custody controls or how mature the code is. Orca’s concentrated design makes range selection another active risk choice rather than a cure for impermanent loss. We will reopen the review for a distinct Orca product whose principal and return do not depend on AMM inventory.
Class rule
The amm lp class is outside the approved structures, so every protocol in it is not approved until the rule changes. The rule is about the structure, not an adverse finding about this protocol, and it is not a client instruction. The events that would reopen it are listed with the memo.
Sources
The claims above trace to these. Where a number could not be independently verified, the thesis says so.
- Orca Docs — Whirlpool account and vault architecture · primary · accessed 2026-08-14
Supports: Whirlpool account, vault architecture - Orca Whirlpools — open-source SDK and program reference · secondary · accessed 2026-08-14
Supports: open-source SDK, program reference - Orca Whirlpools security audit · secondary · accessed 2026-08-14
Supports: Orca Whirlpools security audit
Inherited controls
The research above describes the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The layer with the most administrative power sets the position’s effective control; that describes control, not quality or suitability.
| Chain | Verdict | Control | Control constraint |
|---|---|---|---|
| Solana | Approved with limits | Governed, no freeze | no admin key can seize funds, but stake concentration and a sub-25 Nakamoto coefficient are the standing watch items. |