D2 Finance
Rejected venues wait the longest for re-review; a rejection has to earn another look before the scheduled date.
D2 Finance runs tokenized derivatives strategies through non-custodial vaults on Arbitrum, Hyperliquid L1, Base and Berachain. A vault share delegates ongoing position selection and execution to designated traders operating within strategy-contract limits; the client cannot preserve an advisor-approved set of venues and exposures through each epoch. The DefiLlama API read on 2026-08-15 reported about $27.9M, but size is not the deciding v1 rule. Delegated allocation controls, with actively managed derivatives and integrated-protocol look-through.
- A strategy becomes non-discretionary and enforces immutable client-compatible limits on assets, venues, leverage, derivatives and position size
- Live positions, Greeks, collateral, leverage, venue concentration, realized losses and executable unwind liquidity become continuously independently verifiable
- A separate passive product fixes its exposures and removes authorized trader discretion after the client deposits
The research file
Mechanism and class applicability
Each D2 strategy uses a user-facing ERC-4626 vault, a strategy or Trader contract defining allowed tokens, spenders, modules and functions, and a Trader OMS through which the designated investment team actively trades. Depositors receive a vault share, while the trader changes options, relative-value, hedging and other derivative positions during an epoch. Smart-contract limits constrain the mandate but do not make the portfolio static or let an individual client enforce Ketju’s venue and exposure limits. The v1 delegated-allocation dossier therefore applies.
Current observation and derivatives look-through
The DefiLlama protocol API read on 2026-08-15 reported approximately $27.9M of D2 Finance TVL across Arbitrum, Hyperliquid L1, Base and Berachain. The current product site describes a tokenized onchain multi-strategy fund spanning volatility arbitrage, relative value, dynamic hedging, event-driven positions and structured products. D2 states that its standard contracts limit trader actions, but the share still inherits every selected derivative, venue, oracle, liquidity source, collateral and integration as the managed book changes.
Control and assurance applicability
D2 identifies the vault owner as a default 4-of-7 multisig that can start epochs, set whitelists or blacklists and deposit caps, and manage executor roles; bespoke vault ownership can differ. The executor is separate and trades only through pre-approved assets, protocols and functions. Positions and trades are onchain and D2 publishes audits and periodic reporting, yet authorized traders still choose timing, sizing, hedges and unwind within the mandate. Those controls improve observability without giving the advised holder a client-specific enforceable allocation policy.
Loss and exit applicability
Epochs separate funding, trading and withdrawal. During the trading phase users may not deposit or withdraw and the trader may take custody of vault funds; after positions unwind, capital returns to the vault plus or minus P&L and fees. D2 says flagship strategies generally return funds within 72 hours of expiry, while tactical strategies may trade up to 30 days past expiry. Options, volatility, concentration, market-liquidity and third-party protocol risks can therefore alter both NAV and timing, and published APR is explicitly non-guaranteed with possible total loss.
Why the shared dossier decides
The v1 delegated-allocation rule rejects D2 because the advisor cannot pin the client to static approved positions and limits while professional traders continuously reposition the derivative book. Direct, individually approved positions retain explicit exposure and exit rules; immutable modules alone do not remove manager discretion inside them. Reopen only if a product becomes non-discretionary with client-compatible immutable limits, and live positions, Greeks, collateral, leverage, venue concentration, realized losses and executable unwind liquidity are continuously independently verifiable.
Sources
The claims above trace to these. Where a number could not be independently verified, the thesis says so.
- D2 Finance — current multi-strategy product · primary · accessed 2026-08-15
Supports: managed derivatives, volatility arbitrage, relative value, dynamic hedging, vault structure, onchain execution - D2 Docs — vault and Trader architecture · primary · accessed 2026-08-15
Supports: ERC-4626 vault, Trader contract, OMS, allowed interactions, epochs, withdrawal windows - D2 Docs — active trading strategies · primary · accessed 2026-08-15
Supports: human traders, quantitative signals, dynamic positions, derivatives, fees - D2 Docs — vault ownership and executor security · primary · accessed 2026-08-15
Supports: 4-of-7 multisig, vault owner powers, executor role, immutable interaction limits, third-party protocol risk, audits - D2 Docs — portfolio and liquidity risks · primary · accessed 2026-08-15
Supports: stress testing, liquidity risk, volatility risk, concentration, stop loss, investment manager - D2 Docs — onchain reporting and realized valuations · primary · accessed 2026-08-15
Supports: onchain trades, epoch liquidation, realized valuation, performance reporting - D2 Docs — product risk disclaimer · primary · accessed 2026-08-15
Supports: non-guaranteed return, negative epoch, total loss, external trading engine, managed sub-vault - DefiLlama — D2 Finance survey record, read 2026-08-15 · secondary · accessed 2026-08-15
Supports: current TVL, chain distribution, capital-allocator category, survey perimeter
Inherited controls
The verdict above grades the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The least safe layer sets the position’s grade, and the position table names which one that is.
| Chain | Verdict | Grade | Control constraint |
|---|---|---|---|
| Arbitrum One | Approved · limits | hybrid | a single sequencer orders >99% of transactions and admin keys can upgrade bridge contracts on a ~7-day timelock. |
| Hyperliquid / HyperEVM | Rejected | freezable | a 21-validator permissioned set operates both the chain and its bridge — one compromise reaches both. |
| Base | Approved · limits | hybrid | Coinbase — one regulated US company — operates the only sequencer, and admin keys can upgrade bridge contracts within ~7 days. |