KETJU Research

← The Register

Other

Superform

Not approved Yield aggregators are outside the approved structures
Issued
2026-08-14
Last confirmed
2026-08-14
Next check due
2026-11-15
Chains
Ethereum · No freeze key, Base · Mixed control, Arbitrum One · Mixed control, OP Mainnet · Mixed control, Polygon PoS · Mixed control, Avalanche · Governed, no freeze

Superform SuperVaults and SuperAssets route capital among third-party vaults through manager-configured hooks and cross-chain actions. The protocol API read on 2026-08-15 reported about $17.13M across ten chains, led by Ethereum and Base. Size does not change the mechanism: managers and executable hook bundles determine underlying venues, while ERC-7540 redemptions are asynchronous and depend on strategy, bridge and downstream-vault liquidity. The shared v1 delegated-allocation dossier controls.

The research file

Mechanism applicability

Superform routes deposits into external vaults, while SuperVaults execute validated hook bundles for deposits, swaps, bridges, loops and other strategy actions. SuperAssets rebalance across multiple SuperVault positions, so the depositor accepts a configurable allocation layer rather than freezing one approved exposure.

Current observation and perimeter

The DefiLlama API read on 2026-08-15 reported approximately $17.13M across Ethereum, Base, Arbitrum, OP Mainnet, Polygon, Avalanche, BNB Chain, Fantom, Linea and Blast, and classified Superform as a yield aggregator. The ten-chain perimeter and its dependencies are relevant to control and exit even though delegated allocation applies regardless of size.

Control and exit applicability

Managers and governance maintain strategy permissions, authorized actions, fees and emergency controls within the SuperVault architecture. ERC-7540 redemptions are asynchronous, with shares held in escrow while requests are queued and fulfilled. Exit depends on strategy liquidity, bridges, redemption fulfillment, PPS validation and downstream vault exits.

Why the class rule decides

The shared v1 delegated-allocation dossier controls at any size because a manager-controlled hook bundle can select, replace or compose downstream venues after the advisor chooses the wrapper. Reopen only for a named product with an immutable advisor-selected venue allowlist, enforceable per-venue and per-chain caps, continuously observable positions, no manager substitution, and a proposed-size asynchronous redemption test that includes bridge, escrow and downstream-vault delays.

Class rule

The delegated allocation class is outside the approved structures, so every protocol in it is not approved until the rule changes. The rule is about the structure, not an adverse finding about this protocol, and it is not a client instruction. The events that would reopen it are listed with the memo.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

Inherited controls

The research above describes the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The layer with the most administrative power sets the position’s effective control; that describes control, not quality or suitability.

ChainVerdictControlControl constraint
EthereumApproved No freeze key No sequencer, no upgrade key, no operator who can be compelled. Rule changes require social consensus.
BaseApproved with limits Mixed control Coinbase, one regulated US company, operates the only sequencer, and admin keys can upgrade bridge contracts within ~7 days.
Arbitrum OneApproved with limits Mixed control a single sequencer orders >99% of transactions and admin keys can upgrade bridge contracts on a ~7-day timelock.
OP MainnetRejected Mixed control Ethereum forced inclusion limits sequencer censorship, but the Foundation and Security Council can co-sign an immediate upgrade before a client can exit.
Polygon PoSRejected Mixed control a public validator set orders transactions, but a 5-of-9 multisig can instantly upgrade staking and canonical bridge contracts, while a 5-of-8 controls custom child tokens.
AvalancheApproved with limits Governed, no freeze no party can freeze or seize C-Chain funds, but one vendor writes the only production client and Messari measured over a third of stake hosted on AWS.
The memo is public. Monitoring connects the research to positions clients actually hold and flags evidence changes for advisor review. $49 per advisor per month, first 14 days free. Start the trial.