KETJU Research

← The Register

other

AUTOfinance

Rejected
Max sleeve
Reviewed
2026-08-14 · v1
Next review
2026-11-15
Chains
Ethereum · sovereign, Base · hybrid, Arbitrum One · hybrid, Monad · crypto-backed, Plasma · freezable

Rejected venues wait the longest for re-review; a rejection has to earn another look before the scheduled date.

AUTOfinance routes deposits through Autopools that move liquidity across integrated DeFi venues automatically. A depositor receives an Autopool share while strategy and solver logic can exchange idle assets and LP positions among registered destinations after the deposit; the client cannot enforce Ketju’s approved-venue list or per-venue limits. The DefiLlama API read on 2026-08-15 reported about $34.7M across Ethereum, Base, Sonic, Arbitrum, Monad and Plasma, but size is not the durable v1 decision. Delegated allocation controls, with AMM-LP and staking look-through.

The research file

Mechanism and class applicability

An AUTOfinance depositor selects an Autopool, supplies an asset and receives a yield-bearing ERC-4626-style receipt share. The Autopool monitors a curated set of destinations and rebalances idle assets into LP positions or swaps one destination LP position for another when its assigned strategy accepts a solver proposal. Rewards are compounded and can be redeployed somewhere other than their source. Because underlying venue exposure and weights change after the client deposits and the holder cannot enforce a client-specific approved-venue list, the v1 delegated-allocation dossier applies directly.

Current observation and look-through

The DefiLlama protocol API read on 2026-08-15 reported approximately $34.7M of AUTOfinance TVL across Ethereum, Base, Sonic, Arbitrum, Monad and Plasma, still below $100M but no longer disposed of by size because a more fundamental rule applies. Current documentation identifies destination implementations for Balancer LPs, Aura-staked Balancer LPs, Curve LPs staked in Convex and Maverick boosted positions. A share therefore inherits each destination’s contracts, assets, incentives, staking dependencies and AMM inventory loss in addition to allocator-layer risk.

Control and strategy applicability

Each Autopool has a Strategy that decides whether a proposed rebalance meets configurable return, slippage and swap-cost tests; a permissioned keeper collects rewards and debt reporting revalues LP holdings at least daily. System registries enumerate Autopools and destination templates and vaults. The security design centralizes roles in an AccessController, permits local or system-wide pauses, and leaves SystemRegistry ownership for multisig and eventual governor control. These constraints may bound execution, but they do not give an advised holder authority to freeze portfolio exposures to Ketju-approved destinations.

Loss and exit applicability

Rebalancing incurs explicit swap cost and slippage, and destination LPs retain their underlying impermanent-loss and integration risks. AUTOfinance says deposits have no ordinary lock or cooldown and a holder may request withdrawal in a selected asset, but the system may need to burn destination LP units and swap the resulting tokens back to the base or requested asset. Receipt tokens must first be unstaked, price impact depends on destination liquidity, and global or local pause powers can suspend operations. “Withdraw anytime” therefore does not guarantee the displayed NAV or low-slippage proceeds under stress.

Why the shared dossier decides

The v1 delegated-allocation rule rejects AUTOfinance because the advisor cannot pin the client to a stable set of individually approved venues and limits while autonomous logic moves capital among destinations. A direct position preserves explicit venue selection and kill criteria; a truly non-discretionary wrapper could be reviewed separately. Reopen only if the product enforces an immutable or client-specific allowlist and caps, and position-level holdings, LP inventory, debt, realized losses and executable withdrawal liquidity are continuously independently verifiable.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

Inherited controls

The verdict above grades the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The least safe layer sets the position’s grade, and the position table names which one that is.

ChainVerdictGradeControl constraint
EthereumApproved sovereign No sequencer, no upgrade key, no operator who can be compelled — rule changes require social consensus.
BaseApproved · limits hybrid Coinbase — one regulated US company — operates the only sequencer, and admin keys can upgrade bridge contracts within ~7 days.
Arbitrum OneApproved · limits hybrid a single sequencer orders >99% of transactions and admin keys can upgrade bridge contracts on a ~7-day timelock.
MonadApproved · limits crypto-backed the L1 has a public validator path, but its short production record, single initial client lineage, and Foundation-directed delegation keep stake and operations concentrated.
PlasmaRejected freezable the production validator committee is permissioned and the public docs still describe decentralization as a phased future rollout with no fixed access timeline.
The memo is public. The watching is the product: the terminal reads your clients’ wallets against this Register and flags the events above when they fire. $49 per advisor per month, first 14 days free. Start the trial.