Surf Liquid
SurfLiquid is a non-custodial automated-yield system. Its user-owned vaults let an agent with set limits allocate funds among allowlisted DeFi venues. The 2026-08-16 survey measured about $0.19M across Base, Ethereum and Polygon, only 0.19% of the size floor. SurfLiquid is below that floor, so the individual review does not open until it clears it. The version-1 below-materiality dossier therefore decides the case before strategy, governance, or audit review: an advised-client book would overwhelm the observed exit capacity.
- TVL sustained above the retired TVL threshold for 30 days
Watched nightly: a warning on its venues or files, or a cited document that changes, reopens the memo. The first confirmation is due 2026-11-16.
The research file
Mechanism applicability
Surf creates a user-owned smart-account vault and gives an automation layer a session key with set limits. The agent may combine swaps, liquidity, staking, harvesting, and withdrawals only through registered strategies and allowlisted target contracts. Current product materials describe stablecoin, ETH, and BTC optimisation, plus lending and active-liquidity vaults. The measured balance is therefore delegated yield exposure across several venues, not a single account with a guaranteed rate.
Control and exit applicability
The user wallet remains the vault administrator and may revoke the session key. The Guardian Layer limits protocol targets, concentration, slippage, liquidity depth, simulations, and circuit breakers. Surf advertises permissionless withdrawal and no base withdrawal fee. Still, an economic exit depends on unwinding each chosen venue, bridge, or route at the available depth. It also depends on the smart-account, registry, and session-key controls working as described.
Current observation and corrected perimeter
The DefiLlama API read on 2026-08-16 classified Surf Liquid as Yield and reported approximately $0.19M: about $0.10M on Ethereum, $0.09M on Base, and $205 on Polygon, with zero currently attributed to Arbitrum. This replaces the stale Base-only record. It covers measured Surf balances, not the SURF token pool or unrelated protocols with similar names.
Why the materiality dossier decides
Surf measured only about 0.19% of the size floor. Detailed session permissions and advertised withdrawal control do not create market depth or capacity at the proposed size. Surf is below the floor, so the individual review does not open until it clears it. Reopen only after the same measured Surf adapter remains above the floor for 30 days. Then test venue concentration, role and upgrade controls, incident history, and a proposed-size atomic unwind across every active chain.
Research status
This is a capacity-unproven record for Surf Liquid, not a quality rejection or approval. Reported TVL says how big the venue is, not what the client owns, who can change the rules, or how a position exits at a proposed size. The individual review opens when the protocol clears the size floor.
Sources
The claims above trace to these. Where a number could not be independently verified, the thesis says so.
- SurfLiquid Docs — current product overview · primary · accessed 2026-08-16
Supports: user-owned vaults, yield allocation, product scope, withdrawal control - SurfLiquid Docs — smart accounts and execution · primary · accessed 2026-08-16
Supports: smart account, owner authority, gated multicall, protocol allowlist, atomic execution - SurfLiquid Docs — Guardian Layer · primary · accessed 2026-08-16
Supports: concentration limits, slippage bounds, exit simulation, circuit breakers, control boundary - SurfLiquid Docs — session-key permissions · primary · accessed 2026-08-16
Supports: scoped delegation, revocation, expiry, blocked arbitrary transfers - SurfLiquid Docs — fees and withdrawal · primary · accessed 2026-08-16
Supports: performance fee, no base withdrawal fee, network costs, bridge costs - DefiLlama — Surf Liquid survey record · secondary · accessed 2026-08-16
Supports: current TVL, Base, Ethereum, Polygon, Yield category
Inherited controls
The research above describes the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The layer with the most administrative power sets the position’s effective control; that describes control, not quality or suitability.
| Chain | Verdict | Control | Control constraint |
|---|---|---|---|
| Base | Approved with limits | Mixed control | Coinbase, one regulated US company, operates the only sequencer, and admin keys can upgrade bridge contracts within ~7 days. |
| Ethereum | Approved | No freeze key | No sequencer, no upgrade key, no operator who can be compelled. Rule changes require social consensus. |
| Polygon PoS | Rejected | Mixed control | a public validator set orders transactions, but a 5-of-9 multisig can instantly upgrade staking and canonical bridge contracts, while a 5-of-8 controls custom child tokens. |