Derive V2

Rejected venues wait the longest for re-review; a rejection has to earn another look before the scheduled date.

REJECTED SOLELY ON A CATEGORICAL US-PERSON EXCLUSION; THE TECHNICAL FILE IS OTHERWISE THE STRONGEST IN THIS DERIVATIVES BATCH. Derive’s Terms identify Lyra Technologies Corp. as the interface operator and define US residents, citizens, entities, agents, and persons organized under US law as Restricted Persons. The protocol itself is a self-custodial options, perpetuals, and spot risk engine on an OP Stack application chain, with margin and liquidation rules checked on chain, a Security Module for insolvent debt, published Sigma Prime audits, on-chain DAO governance with timelocks, and a live Immunefi bounty. Those are meaningful positives. Residual controls remain: Derive Trading Co. operates the centralized order book, a whitelisted sequencer controls contract deployment, governance sets risk parameters, and fast withdrawals through the custom Socket bridge have global daily limits. None is the reason for a zero allocation today. The product’s own terms make it legally unavailable to the clients this registry serves.

Kill criteria: the events that revoke this verdict
• Derive publishes terms permitting this registry’s United States client population to trade or hold positions through the application
• Derive or a named affiliate obtains and publishes the registration or exemption governing its options and perpetuals offering to United States clients
• The centralized matcher, sequencer, or custom bridge is unavailable for more than one hour or prevents a proposed-size exit
• Any protocol-fund exploit, Security Module shortfall, or accepted audit behavior produces a realized client loss
• The deployer whitelist or governance timelock is bypassed for a production contract change

The research file

Mechanism and return source

Derive V2 groups collateral, spot assets, options, and perpetual positions inside ERC-721 subaccounts. Each subaccount subscribes to a Risk Manager that calculates portfolio margin and determines liquidation eligibility; Asset contracts encode the properties of each instrument. Margin, clearing, liquidation, and settlement execute on Derive Chain, an OP Stack rollup, while Derive Trading Co. operates a centralized limit order book that matches signed orders. Fees flow in part to a Security Module reserved to pay insolvent debt. A client position is therefore direct options or perpetual PnL—or collateral supporting it—not passive protocol yield, and can lose the full posted margin through ordinary market movement without any incident.

Categorical eligibility bar and legal identity

The current Terms say the Derive Protocol is governed by Derive DAO and the hosted application, off-chain order book, and wallet infrastructure are operated by Lyra Technologies Corp. They define a Restricted Person broadly enough to capture US residents, citizens, agents, companies, trusts, partnerships, estates, and entities incorporated or governed under US law, alongside Australia, Canada, Panama and sanctioned jurisdictions. Separate airdrop terms identify Lyra Technologies Corp. as a Panama-incorporated company, while simultaneously treating Panama-linked users as restricted under the general terms. Whatever the rationale for that structure, the US language is unambiguous and rules out an advisor-directed allocation through the application.

Governance, control, and oracle surface

DRV holders stake into stDRV for proposal and voting power. Passed on-chain proposals queue through short or long timelock executors depending on whether they change protocol, treasury, token, or meta-governance state; a community multisig guardian can cancel a proposal before execution. The technical design constrains parameters to immutable deployment-time ranges and describes changes such as new markets as taking up to a week. The chain nevertheless retains a deployer whitelist enforced through the sequencer and administered after DAO approval, and the exchange’s centralized matcher remains a liveness dependency. Price and volatility inputs used in portfolio margin are also material oracle dependencies even when the final solvency check is performed on chain.

Security and incident record

Derive publishes Sigma Prime assessments for the core protocol and operates an Immunefi program live since 2021, updated in January 2026, with a maximum critical award of $50,000 or 10% of directly affected funds. The public audit-response log records that a critical pre-deployment finding—draining funds by liquidating an account during an asset transfer—was fixed, while another self-trading behavior was accepted as intended because of the maintenance-to-insolvency buffer. No exploit affecting protocol or tokenholder funds was identified through the reviewed incident sources as of this cutoff. The record is a positive, but the modest bounty cap relative to roughly $128M of current TVL and the accepted design behaviors remain monitoring inputs rather than proof against future portfolio-margin loss.

Chain perimeter, exit, and comparison

Derive settles on its own chain, but DefiLlama attributes current collateral across Hyperliquid L1, Base, Ethereum, OP Mainnet, Arbitrum, and zero-balance historical Blast and Mode paths; the registry uses those exact feed names so a rejection cannot silently miss an observation. The custom bridge uses Socket contracts and L1/L2 messaging. Fast withdrawals typically take minutes but are subject to global daily caps; the standard OP Stack path supplies the slower trust-minimized alternative. Compared with Extended, Derive offers more explicit DAO timelocks and a modular on-chain risk engine but relies on an OP sequencer and custom bridge rather than Starknet validity settlement. Both use centralized matching, and both categorically exclude US clients. The correct alternative for this mandate is no unregistered offshore derivatives allocation.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

• Derive — Terms of Use · primary · accessed 2026-08-19
  Supports: Lyra Technologies Corp. interface role, broad United States Restricted Person definition, DAO and application distinction
• Derive documentation — protocol overview · primary · accessed 2026-08-19
  Supports: subaccounts, managers, and assets, Security Module, on-chain margin calculations, Sigma Prime audit claim
• Derive documentation — governance · primary · accessed 2026-08-19
  Supports: stDRV voting, short and long timelocks, community multisig guardian
• Derive documentation — chain · primary · accessed 2026-08-19
  Supports: OP Stack chain ID 957, sequencer-enforced deployer whitelist, DAO approval process
• Derive — technical overview of V2 · primary · accessed 2026-08-19
  Supports: portfolio-margin architecture, parameter ranges and change timing, oracle dependency, verified integrations
• Derive Help Center — bridge and withdrawal timing · primary · accessed 2026-08-19
  Supports: Socket custom bridge, fast-withdrawal daily limits, source-chain timing
• Immunefi — Derive bug bounty · secondary · accessed 2026-08-19
  Supports: $50,000 maximum bounty, protocol scope, January 2026 update
• DefiLlama — Derive V2 protocol data · secondary · accessed 2026-08-19
  Supports: seven-chain feed perimeter, current TVL, derivatives classification

Inherited controls

The verdict above grades the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The least safe layer sets the position’s grade, and the position table names which one that is.