defirisk.co
rubric v1.7.0

TVL stability (CoV over 90d)

A operational history factor in the v1.7.0 rubric. Measured per protocol on a c cadence.

Methodology how we score#

What this measures
This factor calculates the coefficient of variation (standard deviation divided by mean) of daily TVL over the trailing ninety days. A low coefficient of variation indicates stable TVL; a high coefficient indicates high volatility. The metric is sourced from DeFiLlama time-series data and updated continuously. It serves as a team-health and protocol-stability proxy: abrupt TVL drops that are not explained by market conditions or announced migrations suggest hidden problems that depositors are voting against with their capital.

Why it matters
TVL volatility has a dual signal value. Rapid outflows preceding a known exploit are a leading indicator that sophisticated depositors detected risk before retail users; Euler Finance's TVL had already declined meaningfully in the weeks before the March 2023 exploit. Conversely, highly volatile TVL on a protocol with no prior incidents may indicate farming-driven mercenary capital that will exit rapidly at the first sign of stress, reducing the stability of the protocol's deposit base. Sustained TVL stability across a ninety-day window, particularly through periods of market stress, is a meaningful positive signal.

Green / Yellow / Red
Green: coefficient of variation below 0.15 over the trailing ninety days, indicating stable deposit composition. Yellow: coefficient of variation between 0.15 and 0.35, indicating moderate volatility potentially consistent with market-wide movements. Red: coefficient of variation above 0.35, or a single-day TVL drop exceeding twenty percent not explained by a known market event or announced migration.

Common gray cases
Protocols that recently launched or migrated TVL to a new version will show high volatility during the migration window; this is scored gray during the transition and re-evaluated once the migration stabilizes.

Notable historical examples
No cross-hacked incidents currently linked in database for this factor.

Measurement what to look for#

Compute the coefficient of variation (σ/μ) of daily TVL over the trailing 90 days as a proxy for operational stability.

Data & output #

Data source
DeFiLlama historical TVL API `/protocol/<slug>` daily time-series
Output format
Green / Yellow / Red
Evidence artifact
TVL daily series JSON + σ + μ + CoV ratio + window dates
Confidence signal
green = CoV <0.15 (stable); yellow = 0.15–0.35; red = >0.35 (high volatility / instability signal); gray = TVL history <90 days available

Scored protocols 0 carry this factor#

No protocols have been scored for this factor yet.

Linked hacks 5 historical incidents#

relatedVenus Protocol: Donation Attack → Supply Cap Bypass → Collateral Inflation → Recursive Borrow Loop2026-03-15 · $4M · Donation Attack → Supply Cap Bypass → Collateral Inflation → Recursive Borrow Loop · Auto-linked by C.4 triage 2026-05-07
relatedAave V3: CAPO (Correlated Asset Price Oracle) misconfigured price feed for a freshly-listed correlated asset → mispriced collateral → cascade of involuntary liquidations2026-03-12 · $862K · CAPO (Correlated Asset Price Oracle) misconfigured price feed for a freshly-listed correlated asset → mispriced collateral → cascade of involuntary liquidations · Auto-linked by C.4 triage 2026-05-07
relatedCurve LlamaLend: Empty-market donation attack on a freshly-listed lending market2026-03-02 · $240K · Empty-market donation attack on a freshly-listed lending market · Auto-linked by C.4 triage 2026-05-07
relatedBalancer V2 (Composable Stable Pools): `_upscale()` rounding-down compounded across 65+ micro-swaps2025-11-03 · $128M · `_upscale()` rounding-down compounded across 65+ micro-swaps · Auto-linked by C.4 triage 2026-05-07
relatedGMX V1: Cross-Contract Reentrancy via Order-Keeper Callback2025-07-09 · Cross-Contract Reentrancy via Order-Keeper Callback · Auto-linked by C.4 triage 2026-05-07
rubric_version v1.7.0factor RD-F-084category 5carried 0critical no