KETJU Research

← The Register

stable-lending

Curve LlamaLend

Rejected
Max sleeve
Reviewed
2026-08-14 · v1
Next review
2026-11-15
Chains
Ethereum · sovereign, OP Mainnet · hybrid, Arbitrum One · hybrid

Rejected venues wait the longest for re-review; a rejection has to earn another look before the scheduled date.

LlamaLend is Curve’s isolated lending market, where users borrow crvUSD against permissionlessly created isolated markets. DefiLlama recorded about $64.6M on 2026-08-14. The inherited AMM-LP basis was imprecise: LLAMMA trades a borrower’s collateral during soft liquidation, while lenders supply the borrowable asset through ERC-4626 vaults and do not continuously quote a two-asset inventory. The memo is therefore rejected only under the published $100M materiality rule, not by force-fitting lending into the AMM class.

The research file

Mechanism

Each market is isolated. Lenders deposit the borrowable asset into an ERC-4626 vault; borrowers pledge collateral and draw debt. LLAMMA places borrower collateral across price bands and progressively exchanges it for crvUSD as price falls, with possible conversion back on recovery. That creates path-dependent borrower loss, but it is liquidation machinery rather than an LP position held by the lender.

Control and operating record

Factories can create markets and each market has its own controller, oracle, monetary policy and LLAMMA. The official StateMind assessment reviewed the lending factory, vault, controller and oracle components. Permissionless collateral listing and market isolation limit contagion between markets but leave each vault dependent on its selected collateral and oracle.

Exit consequences

A lender redeems vault shares only against cash not currently borrowed; utilization and bad debt can constrain withdrawal. A borrower can repay and withdraw remaining collateral, but soft liquidation may already have sold part of it and a hard liquidation can crystallize further loss. There is no basis to describe the lender as redeeming an AMM LP token.

Why the class rule decides

At about $64.6M the aggregate did not clear the standing $100M size floor. That rule alone disposes of the file today; the mechanism and audit evidence are recorded so review can reopen without rebuilding the file if TVL remains above the threshold for 30 days.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

Inherited controls

The verdict above grades the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The least safe layer sets the position’s grade, and the position table names which one that is.

ChainVerdictGradeControl constraint
EthereumApproved sovereign No sequencer, no upgrade key, no operator who can be compelled — rule changes require social consensus.
OP MainnetRejected hybrid Ethereum forced inclusion limits sequencer censorship, but the Foundation and Security Council can co-sign an immediate upgrade before a client can exit.
Arbitrum OneApproved · limits hybrid a single sequencer orders >99% of transactions and admin keys can upgrade bridge contracts on a ~7-day timelock.
The memo is public. The watching is the product: the terminal reads your clients’ wallets against this Register and flags the events above when they fire. $49 per advisor per month, first 14 days free. Start the trial.