AFI Protocol

Rejected venues wait the longest for re-review; a rejection has to earn another look before the scheduled date.

REJECTED ON TOTAL OPERATOR OPACITY. AFI Protocol runs an ERC-4626 vault, afiUSD, layering stablecoin lending, Pendle principal-token accumulation, and leveraged PT loops, plus a second, currently institutional-only vault backed by a separate entity’s tokenized real-world assets. No operating entity name appears anywhere in AFI’s own Terms of Use, custody framework, or KYC policy — the closest thing to a legal disclosure is that the Terms are governed by the law of Nevis, with no arbitration clause and no named counterparty. No team member, founder, or investor identity was found in any source this review could access. Access to the flagship vault currently requires an invite code obtained through Telegram, an unusual gate for a product marketed as permissionless. A critical-severity finding in AFI’s primary token contract was identified in an August 2025 Cantina audit and is reported resolved, but the combination of an anonymous team and an offshore legal wrapper with no disclosed principal is independently disqualifying regardless of that remediation.

Kill criteria: the events that revoke this verdict
• A named operating entity and jurisdiction of incorporation are disclosed
• Team, founder, and investor identities are publicly disclosed
• The invite-code access gate is removed or explained, resolving the tension with the product’s permissionless marketing claim
• The afi-rwaUSDi vault’s custody, redemption, and eligibility terms are publicly documented once it reopens beyond institutional-only access

The research file

Mechanism

The afiUSD vault accepts stablecoin deposits and allocates across stablecoin lending on Aave, Euler, and Morpho Blue, purchasing discounted Pendle Principal Tokens held to maturity, and leveraged PT-collateralized loops within capped loan-to-value bands, with yield accruing into the vault’s exchange rate rather than a rebase. A second vault, afi-rwaUSDi, mints against rwaUSDi, a token issued by a separate entity, Multipli, backed by market-neutral funds, private credit, and other real-world assets — this vault’s public deposits are currently closed, with access institutional-only and no public redemption terms disclosed. Both vaults enforce a stated invariant that circulating receipt-token supply can never exceed attested reserves.

No named operator, no named team

AFI’s Terms of Use name no operating company anywhere in the document; governing law is set to Nevis, with exclusive Nevis court jurisdiction and no arbitration clause — a jurisdiction choice common to anonymous or minimally-disclosed offshore projects. No founder, team member, or investor was named in AFI’s documentation, website, or any source this review could reach; the GitHub organization name, ”Artificial-Financial-Intelligence,” was found but individual contributors were not confirmed. This is a materially weaker disclosure posture than comparable competitors in this same product category typically carry.

Access and eligibility

Despite marketing itself as permissionless, the afiUSD vault currently requires an invite code obtained via Telegram to onboard — a real access gate distinct from KYC. Formal identity verification is stated to apply only to fiat on/off-ramps, advisory tools, and institutional counterparties, not to base smart-contract interaction. AFI’s KYC policy lists standard OFAC-sanctioned and FATF-flagged jurisdictions plus certain US states with strict crypto licensing regimes as restricted, but states no blanket US-person exclusion — a narrower restriction than several peers in this batch, though still layered on top of the invite-code gate.

Control and the resolved critical finding

Custody is non-custodial by design; privileged administrative functions are gated by a multisig described as ”geographically distributed, institutionally vetted signers” with a stated 3-of-5 threshold example, though no signer identities are disclosed. An emergency pause function exists that can halt affected contracts, resuming only through an undefined ”review and governance process.” A Cantina audit dated 2025-08-01 found one critical-severity issue in the afiUSD contracts alongside medium and low findings, reported as resolved and re-verified; a subsequent Quantstamp audit of the Proof-of-Reserve vault contracts found one high and one medium finding, also reported resolved.

Track record and decision

DefiLlama’s earliest tracked datapoint for AFI Protocol is 2025-12-14, with current tracked TVL in the $175-225M range depending on snapshot timing. Withdrawal from afiUSD carries a 72-hour cooldown ”to allow strategy unwinding,” with the withdrawal fee currently set to zero but described as programmable and therefore changeable by the admin multisig. In comparison against other Pendle-and-lending yield-optimizer vaults, AFI’s underlying strategy is not unusual; what disqualifies it is the combination of an undisclosed operator, an anonymous team, an offshore no-arbitration jurisdiction, and an invite-gated front door layered onto a ”permissionless” marketing claim.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

• AFI Protocol documentation — afiUSD vault and strategy analysis · primary · accessed 2026-08-19
  Supports: vault mechanism, lending, Pendle PT, and leveraged PT loop strategies, 72-hour withdrawal cooldown
• AFI Protocol — Terms of Use · primary · accessed 2026-08-19
  Supports: Nevis governing law, no named operating entity, no arbitration clause
• AFI Protocol — KYC policy · primary · accessed 2026-08-19
  Supports: restricted jurisdiction list, scope of KYC applicability
• AFI Protocol — audits and bug bounty · primary · accessed 2026-08-19
  Supports: Cantina critical finding and resolution, Quantstamp audit findings
• DefiLlama — AFI Protocol protocol data · secondary · accessed 2026-08-19
  Supports: TVL history, chain breakdown

Inherited controls

The verdict above grades the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The least safe layer sets the position’s grade, and the position table names which one that is.