KETJU Research

← The Register

other

D2 Finance

Rejected
Max sleeve
Reviewed
2026-08-14 · v1
Next review
2026-11-15
Chains
Arbitrum One · hybrid, Hyperliquid / HyperEVM · freezable, Base · hybrid

Rejected venues wait the longest for re-review; a rejection has to earn another look before the scheduled date.

D2 Finance runs tokenized derivatives strategies through non-custodial vaults on Arbitrum, Hyperliquid L1, Base and Berachain. A vault share delegates ongoing position selection and execution to designated traders operating within strategy-contract limits; the client cannot preserve an advisor-approved set of venues and exposures through each epoch. The DefiLlama API read on 2026-08-15 reported about $27.9M, but size is not the deciding v1 rule. Delegated allocation controls, with actively managed derivatives and integrated-protocol look-through.

The research file

Mechanism and class applicability

Each D2 strategy uses a user-facing ERC-4626 vault, a strategy or Trader contract defining allowed tokens, spenders, modules and functions, and a Trader OMS through which the designated investment team actively trades. Depositors receive a vault share, while the trader changes options, relative-value, hedging and other derivative positions during an epoch. Smart-contract limits constrain the mandate but do not make the portfolio static or let an individual client enforce Ketju’s venue and exposure limits. The v1 delegated-allocation dossier therefore applies.

Current observation and derivatives look-through

The DefiLlama protocol API read on 2026-08-15 reported approximately $27.9M of D2 Finance TVL across Arbitrum, Hyperliquid L1, Base and Berachain. The current product site describes a tokenized onchain multi-strategy fund spanning volatility arbitrage, relative value, dynamic hedging, event-driven positions and structured products. D2 states that its standard contracts limit trader actions, but the share still inherits every selected derivative, venue, oracle, liquidity source, collateral and integration as the managed book changes.

Control and assurance applicability

D2 identifies the vault owner as a default 4-of-7 multisig that can start epochs, set whitelists or blacklists and deposit caps, and manage executor roles; bespoke vault ownership can differ. The executor is separate and trades only through pre-approved assets, protocols and functions. Positions and trades are onchain and D2 publishes audits and periodic reporting, yet authorized traders still choose timing, sizing, hedges and unwind within the mandate. Those controls improve observability without giving the advised holder a client-specific enforceable allocation policy.

Loss and exit applicability

Epochs separate funding, trading and withdrawal. During the trading phase users may not deposit or withdraw and the trader may take custody of vault funds; after positions unwind, capital returns to the vault plus or minus P&L and fees. D2 says flagship strategies generally return funds within 72 hours of expiry, while tactical strategies may trade up to 30 days past expiry. Options, volatility, concentration, market-liquidity and third-party protocol risks can therefore alter both NAV and timing, and published APR is explicitly non-guaranteed with possible total loss.

Why the shared dossier decides

The v1 delegated-allocation rule rejects D2 because the advisor cannot pin the client to static approved positions and limits while professional traders continuously reposition the derivative book. Direct, individually approved positions retain explicit exposure and exit rules; immutable modules alone do not remove manager discretion inside them. Reopen only if a product becomes non-discretionary with client-compatible immutable limits, and live positions, Greeks, collateral, leverage, venue concentration, realized losses and executable unwind liquidity are continuously independently verifiable.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

Inherited controls

The verdict above grades the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The least safe layer sets the position’s grade, and the position table names which one that is.

ChainVerdictGradeControl constraint
Arbitrum OneApproved · limits hybrid a single sequencer orders >99% of transactions and admin keys can upgrade bridge contracts on a ~7-day timelock.
Hyperliquid / HyperEVMRejected freezable a 21-validator permissioned set operates both the chain and its bridge — one compromise reaches both.
BaseApproved · limits hybrid Coinbase — one regulated US company — operates the only sequencer, and admin keys can upgrade bridge contracts within ~7 days.
The memo is public. The watching is the product: the terminal reads your clients’ wallets against this Register and flags the events above when they fire. $49 per advisor per month, first 14 days free. Start the trial.