defirisk.co
rubric v1.7.0

TVL stability (CoV over 90d)

A operational history factor in the v1.7.0 rubric. Measured per protocol on a c cadence.

Methodology how we score #

**What this measures** This factor calculates the coefficient of variation (standard deviation divided by mean) of daily TVL over the trailing ninety days. A low coefficient of variation indicates stable TVL; a high coefficient indicates high volatility. The metric is sourced from DeFiLlama time-series data and updated continuously. It serves as a team-health and protocol-stability proxy: abrupt TVL drops that are not explained by market conditions or announced migrations suggest hidden problems that depositors are voting against with their capital.

**Why it matters** TVL volatility has a dual signal value. Rapid outflows preceding a known exploit are a leading indicator that sophisticated depositors detected risk before retail users; Euler Finance's TVL had already declined meaningfully in the weeks before the March 2023 exploit. Conversely, highly volatile TVL on a protocol with no prior incidents may indicate farming-driven mercenary capital that will exit rapidly at the first sign of stress, reducing the stability of the protocol's deposit base. Sustained TVL stability across a ninety-day window, particularly through periods of market stress, is a meaningful positive signal.

**Green / Yellow / Red** Green: coefficient of variation below 0.15 over the trailing ninety days, indicating stable deposit composition. Yellow: coefficient of variation between 0.15 and 0.35, indicating moderate volatility potentially consistent with market-wide movements. Red: coefficient of variation above 0.35, or a single-day TVL drop exceeding twenty percent not explained by a known market event or announced migration.

**Common gray cases** Protocols that recently launched or migrated TVL to a new version will show high volatility during the migration window; this is scored gray during the transition and re-evaluated once the migration stabilizes.

**Notable historical examples** No cross-hacked incidents currently linked in database for this factor.

Measurement what to look for #

Compute the coefficient of variation (σ/μ) of daily TVL over the trailing 90 days as a proxy for operational stability.

Data & output #

Data source
DeFiLlama historical TVL API `/protocol/<slug>` daily time-series
Output format
Green / Yellow / Red
Evidence artifact
TVL daily series JSON + σ + μ + CoV ratio + window dates
Confidence signal
green = CoV <0.15 (stable); yellow = 0.15–0.35; red = >0.35 (high volatility / instability signal); gray = TVL history <90 days available

Scored protocols 80 carry this factor #

Protocol RD-F-084
Aave v3 ethereum red Across Protocol ethereum gray Aerodrome Finance base yellow Axelar Network ethereum green Babylon Protocol bitcoin yellow Balancer (v2 + v3) ethereum red Beefy Finance ethereum green BENQI avalanche green BlackRock USD Institutional Digital Liquidity Fund (BUIDL) ethereum yellow Cap (cUSD / stcUSD) ethereum yellow Centrifuge ethereum yellow Chainlink CCIP ethereum gray Circle USYC binance yellow Compound V3 (Comet) ethereum green Concrete ethereum yellow Convex Finance ethereum green crvUSD (Curve Stablecoin) ethereum yellow Curve Finance ethereum yellow deBridge ethereum gray Dolomite ethereum yellow dYdX v4 (dYdX Chain) dydx yellow EigenLayer ethereum yellow Ethena ethereum yellow ether.fi ethereum yellow Euler V2 ethereum yellow Falcon Finance ethereum green Fluid ethereum yellow Frax Finance ethereum green GMX v2 (GMX Synthetics) arbitrum not_assessed Hyperlane ethereum green Hyperliquid arbitrum yellow Jito solana yellow Jupiter solana yellow Jupiter Perpetual Exchange solana yellow JustLend DAO tron gray Kamino Lend solana yellow Kinetiq hyperliquid green Lido ethereum green Liquid Collective (LsETH) ethereum yellow Liquity V1 + V2 (LUSD / BOLD) ethereum green Lista DAO bsc green Lombard Finance ethereum yellow M^0 ethereum yellow Maple Finance ethereum yellow Marinade Finance solana green Meteora solana green mETH Protocol ethereum yellow Midas ethereum yellow Morpho V1 (Morpho Blue + MetaMorpho) ethereum yellow Multipli ethereum gray Ondo Finance ethereum gray OpenEden ethereum yellow Orca solana green PancakeSwap bsc yellow Pendle Finance ethereum yellow Polymarket polygon yellow QuickSwap polygon yellow Raydium solana yellow Rocket Pool ethereum yellow Sanctum solana green Save (formerly Solend) solana green Sky Lending (formerly MakerDAO) ethereum yellow Spark Protocol ethereum yellow Spiko stellar green Stake DAO ethereum green StakeWise v3 ethereum green Stargate Finance ethereum gray stHYPE (Valantis Labs) hyperliquid yellow SUNSwap (sun.io) tron green Superstate ethereum yellow Sushi (SushiSwap) — v2 + v3 + Trident + BentoBox/Kashi + SushiXSwap ethereum yellow Symbiotic ethereum green Synapse Protocol ethereum red Uniswap (v2 + v3) ethereum green USDD (Decentralized USD) tron yellow Usual (USD0 / bUSD0 / USUAL) ethereum yellow Veda (BoringVault) ethereum green Venus Protocol bsc yellow Wormhole ethereum gray Yearn Finance ethereum yellow

Linked hacks 5 historical incidents #

relatedVenus Protocol — Donation Attack → Supply Cap Bypass → Collateral Inflation → Recursive Borrow Loop2026-03-15 · $4M · Donation Attack → Supply Cap Bypass → Collateral Inflation → Recursive Borrow Loop · Auto-linked by C.4 triage 2026-05-07
relatedAave V3 — CAPO (Correlated Asset Price Oracle) misconfigured price feed for a freshly-listed correlated asset → mispriced collateral → cascade of involuntary liquidations2026-03-12 · $862K · CAPO (Correlated Asset Price Oracle) misconfigured price feed for a freshly-listed correlated asset → mispriced collateral → cascade of involuntary liquidations · Auto-linked by C.4 triage 2026-05-07
relatedCurve LlamaLend — Empty-market donation attack on a freshly-listed lending market2026-03-02 · $240K · Empty-market donation attack on a freshly-listed lending market · Auto-linked by C.4 triage 2026-05-07
relatedBalancer V2 (Composable Stable Pools) — `_upscale()` rounding-down compounded across 65+ micro-swaps2025-11-03 · $128M · `_upscale()` rounding-down compounded across 65+ micro-swaps · Auto-linked by C.4 triage 2026-05-07
relatedGMX V1 — Cross-Contract Reentrancy via Order-Keeper Callback2025-07-09 · Cross-Contract Reentrancy via Order-Keeper Callback · Auto-linked by C.4 triage 2026-05-07
rubric_version v1.7.0 factor RD-F-084 category 5 carried 80 critical no