DeFi Saver
The scheduled date is the outside bound. Kill criteria are checked every day, and a trigger reopens the memo that week.
APPROVED WITH LIMITS, AS A DEPENDENCY, NOT AS A POSITION. DeFi Saver is not itself an allocation — DefiLlama’s tracked figure is the aggregate value of client positions on Maker/Sky, Aave, Compound, Spark, Liquity, and other already-evaluated protocols that currently have an active DeFi Saver automation subscription (Boost, Repay, stop-loss, take-profit). The underlying exposure and its verdict come from wherever that base position actually sits; this entry evaluates only the automation layer’s own added trust surface. That surface is genuinely well-disclosed: DFS Solutions Limited Partnership, a named British Virgin Islands entity, operates the product; the platform is non-custodial, executing pre-approved recipes against a user’s own smart wallet rather than pooling funds; a split 2-of-3 and 3-of-5 multisig structure with 1-to-7-day timelocks governs contract upgrades; six independent audits have run since 2021; and an active Immunefi bug bounty pays up to $350,000. Critically, the platform’s own Terms of Service exclude US persons only from its separate Hyperliquid perpetuals-trading feature, not from the core CDP-automation product this memo covers. The cap reflects the added bot-execution authority layered on top of whatever base protocol a client is actually exposed to, and this approval explicitly excludes the Hyperliquid perpetuals feature.
- Admin and Owner multisig signer identities are publicly disclosed
- Twelve consecutive months with no bot-execution, recipe, or smart-wallet compromise
- This approval does not extend to the Hyperliquid perpetuals feature unless that feature’s own US-person exclusion is independently reassessed
- The underlying protocol a client’s automated position sits on remains itself approved in this registry; this entry does not substitute for that separate evaluation
The research file
Mechanism and what the tracked figure represents
DefiLlama’s ”Defi Saver Asset Management” listing and its sibling ”Defi Saver” listing report near-identical TVL because both describe the same underlying automation base, not two separate products: the aggregate value of all positions across Maker/Sky, Aave, Compound, Spark, Liquity, and other lending or CDP protocols currently subscribed to a DeFi Saver automation strategy. Users build or select ”recipes” — bundled transaction sequences — and subscribe a position to a strategy with trigger conditions (price, collateral ratio, or time); keeper bots monitor the position and execute the recipe once a trigger fires. Every operation runs from the user’s own smart wallet (a Safe by default), which the user owns and controls at all times.
Legal structure and eligibility
The operating entity is DFS Solutions Limited Partnership, a British Virgin Islands limited partnership; the Terms of Service, last updated 2026-05-21, set BVI law as governing law with BVI courts as the forum. Product development is credited to Decenter, an Ethereum-focused R&D incubator now entirely focused on DeFi Saver, though Decenter’s own jurisdiction was not independently confirmed. Eligibility is permissionless with no KYC gate; the Terms carve out a narrow restriction limited to the platform’s Hyperliquid perpetuals-trading feature, barring only United States and Ontario, Canada users from that specific feature — the core lending-automation product is not similarly restricted. Standard OFAC/UN/EU sanctions-list and sanctioned-jurisdiction exclusions apply platform-wide, screened via Chainalysis.
Control
Core contracts sit behind a DFSRegistry with split administrative roles: a 2-of-3 ”Admin” multisig activates upgrades and a 3-of-5 ”Owner” multisig initiates them. Non-action core contract changes carry a 7-day timelock; action-contract changes carry a 1-day timelock; automation contract upgrades carry a 24-hour timelock. The Owner multisig retains an emergency self-destruct capability on certain contracts to halt execution, with documentation stating the self-destructible contracts hold no client funds — an emergency-pause design that does not create a custodial risk even when exercised. Specific multisig signer identities were not disclosed in any source this review could access.
Track record
The product traces to roughly 2018 and has integrated Maker, Compound, Aave, and other protocols across a multi-year history, with the earliest independent audits dating to March 2021 (Dedaub, ConsenSys Diligence) and continuing through 2024 (Dedaub, Optimum, across recipe, strategy, and wallet-upgrade contracts). An active Immunefi bug bounty pays up to $350,000 for a critical smart-contract vulnerability. No protocol-level exploit or fund loss was found in this review’s search coverage, which was not exhaustive but included a direct incident-tracker check.
Comparison and decision
Against the pure-infrastructure entries this registry has rejected for having no directly investable client product — SSV Network, Obol, M0 — DeFi Saver is genuinely different in kind: a client’s own smart wallet, not a downstream provider, is the thing automated, and that wallet remains under the client’s own control throughout. Against the curators and allocators this registry rejected as a category, DeFi Saver’s disclosure is materially stronger on every axis — named entity, disclosed multisig structure with timelocks, a multi-year audit history, and an active bounty. The approval is scoped narrowly: it covers the automation layer only, not the underlying protocol exposure, and it excludes the Hyperliquid perpetuals feature the platform’s own terms treat differently.
Sources
The claims above trace to these. Where a number could not be independently verified, the thesis says so.
- DeFi Saver — Terms of Service · primary · accessed 2026-08-19
Supports: DFS Solutions Limited Partnership BVI entity, BVI governing law, Hyperliquid-feature-only US and Ontario exclusion, sanctions screening - DeFi Saver documentation — recipes, strategies, and automation · primary · accessed 2026-08-19
Supports: non-custodial smart-wallet architecture, bot-executed recipe mechanism - DeFi Saver documentation — admin, access control, and pause mechanics · primary · accessed 2026-08-19
Supports: 2-of-3 Admin and 3-of-5 Owner multisig split, timelock durations, self-destruct pause design - DeFi Saver documentation — audit history · primary · accessed 2026-08-19
Supports: Dedaub, ConsenSys Diligence, and Optimum audit list, audit dates - Immunefi — DeFi Saver bug bounty program · primary · accessed 2026-08-19
Supports: active bug bounty, up to $350,000 critical payout - DefiLlama — Defi Saver Asset Management protocol data · secondary · accessed 2026-08-19
Supports: TVL methodology as aggregate automated-position value
Inherited controls
The verdict above grades the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The least safe layer sets the position’s grade, and the position table names which one that is.
| Chain | Verdict | Grade | Control constraint |
|---|---|---|---|
| Ethereum | Approved | sovereign | No sequencer, no upgrade key, no operator who can be compelled — rule changes require social consensus. |
| Arbitrum One | Approved · limits | hybrid | a single sequencer orders >99% of transactions and admin keys can upgrade bridge contracts on a ~7-day timelock. |
| OP Mainnet | Rejected | hybrid | Ethereum forced inclusion limits sequencer censorship, but the Foundation and Security Council can co-sign an immediate upgrade before a client can exit. |
| Base | Approved · limits | hybrid | Coinbase — one regulated US company — operates the only sequencer, and admin keys can upgrade bridge contracts within ~7 days. |