KETJU Research

← The Register

other

Beefy

Rejected
Max sleeve
Reviewed
2026-08-14 · v1
Next review
2026-11-15
Chains
Ethereum · sovereign, Base · hybrid, Monad · crypto-backed, Arbitrum One · hybrid, Avalanche · crypto-backed, BNB Smart Chain · freezable, OP Mainnet · hybrid, Polygon PoS · hybrid, Gnosis Chain · crypto-backed

Rejected venues wait the longest for re-review; a rejection has to earn another look before the scheduled date.

Beefy is a yield aggregator that auto-compounds deposits across underlying farms, running hundreds of vaults across many chains; DefiLlama recorded about $102.7M on 2026-08-14. The breadth is the problem: deposits route across underlying venues, several on chains the registry rejects, and the mix changes without notice to us, so a client would inherit verdicts we cannot see on any given day. More fundamentally, allocation across vetted venues is the service we charge for, and outsourcing it to an automated allocator with no duty to this client forfeits both the fee and the position that justifies it. This is about which layer of the stack we occupy, not Beefy’s quality.

The research file

Mechanism

Each Beefy vault accepts a named deposit asset or LP receipt and issues mooTokens. Its strategy stakes that asset in a third-party farm, harvests reward tokens, swaps them and reinvests into more of the deposit asset. The aggregate slug spans money markets, native-token farms, LP farms and concentrated-liquidity managers rather than one economic claim.

Control and operating evidence

Strategists propose and maintain strategies; a developer multisig can schedule strategy changes after a timelock. Beefy documents per-vault testing, risk labels, public timelock monitoring and a panic function that pulls capital from a farm and removes allowances. These controls reduce operational risk but do not make future underlying allocations advisory-approved.

Exit consequences

Burning mooTokens requests the deposited asset from the current strategy. If the farm is liquid, the strategy withdraws it; panic can hold assets locally for exit. LP vaults return LP exposure unless a zap trades it, and any failed underlying, depeg, bridge or rejected chain remains embedded. Fees and swap slippage can reduce a one-asset exit.

Why the class rule decides

Beefy automates the allocation and maintenance layer this advisory program is meant to control. Depositors inherit the selected farm, reward routes, strategy upgrade and chain after deposit. The delegated-allocation class therefore decides despite Beefy now exceeding the size floor. A static, capped, single-venue vault could reopen individually.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

Inherited controls

The verdict above grades the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The least safe layer sets the position’s grade, and the position table names which one that is.

ChainVerdictGradeControl constraint
EthereumApproved sovereign No sequencer, no upgrade key, no operator who can be compelled — rule changes require social consensus.
BaseApproved · limits hybrid Coinbase — one regulated US company — operates the only sequencer, and admin keys can upgrade bridge contracts within ~7 days.
MonadApproved · limits crypto-backed the L1 has a public validator path, but its short production record, single initial client lineage, and Foundation-directed delegation keep stake and operations concentrated.
Arbitrum OneApproved · limits hybrid a single sequencer orders >99% of transactions and admin keys can upgrade bridge contracts on a ~7-day timelock.
AvalancheApproved · limits crypto-backed no party can freeze or seize C-Chain funds, but one vendor writes the only production client and Messari measured over a third of stake hosted on AWS.
BNB Smart ChainRejected freezable the validator set concentrates around one company, and the chain has been halted by decision.
OP MainnetRejected hybrid Ethereum forced inclusion limits sequencer censorship, but the Foundation and Security Council can co-sign an immediate upgrade before a client can exit.
Polygon PoSRejected hybrid a public validator set orders transactions, but a 5-of-9 multisig can instantly upgrade staking and canonical bridge contracts, while a 5-of-8 controls custom child tokens.
Gnosis ChainApproved · limits crypto-backed the chain validator path is permissionless, but its xDAI and canonical bridge exposure adds an 8-of-15 governor multisig outside the base consensus grade.
The memo is public. The watching is the product: the terminal reads your clients’ wallets against this Register and flags the events above when they fire. $49 per advisor per month, first 14 days free. Start the trial.