FAssets (Flare Network)
Rejected venues wait the longest for re-review; a rejection has to earn another look before the scheduled date.
REJECTED ON TWO STANDING FACTS: A MANUAL-MULTISIG CUSTODY LAYER THE DESIGN ITSELF WAS MEANT TO REMOVE, AND A SCOPE GAP BETWEEN THE PRODUCT NAME AND WHAT IS ACTUALLY LIVE. FAssets is Flare Network’s over-collateralized, agent-based bridge for non-smart-contract assets, verified by Flare’s own decentralized Data Connector rather than a small custodian — a genuinely different architecture from WBTC- or BTCB-style wrappers on paper. But a ”Core Vault” added in a 2025 upgrade reintroduces manual multisig custody, signed off by named entities cooperating with the Flare Foundation, on top of the agent design that is supposed to be FAssets’ core differentiator, and Flare’s own documentation frames this as a deliberate, temporary tradeoff. Separately, only FXRP is confirmed live; FBTC remains unlaunched, so the roughly $158M tracked under this entry should be read as effectively XRP-only exposure today, not the diversified multi-asset backing the FAssets name implies.
- FAssets v2’s trusted-execution-environment-based automation ships, removing the Core Vault’s manual multisig custody dependency
- Agent registration is confirmed genuinely permissionless, or the verification criteria are fully disclosed and shown to be non-discretionary
- FBTC or another additional asset reaches confirmed mainnet production status, with this entry’s scope updated to match actual live backing
- Twelve consecutive months with no Core Vault signer compromise, agent-default cascade, or Alert Mode activation
The research file
Mechanism
An agent, which can be anyone meeting the collateral requirement, locks collateral in FLR, governance-approved stablecoins, or ETH at a minimum 130% collateral ratio and mints the FAsset when a user pays the underlying asset into the agent’s address. Flare’s Data Connector verifies underlying-chain payments through cryptographic Merkle proofs and decentralized attestation rather than a small multisig, and liquidation is permissionless: anyone can liquidate an undercollateralized agent’s vault for collateral plus a premium, after which that agent’s vault locks and cannot mint again.
Production status: narrower than the name implies
Only FXRP is confirmed live, launched September 2025. FBTC is stated as coming in 2026 and was not confirmed live as of this review, and DOGE and LTC support were not confirmed live either. The roughly $158M tracked under the ”fassets” entity should be read as effectively FXRP-only exposure today, a scope gap a client relying on the FAssets name for diversified backing could reasonably be misled by.
Control and governance
Agent status requires governance verification, not a fully open, permissionless entry the marketing implies. More materially, a Core Vault, added in a v1.1 upgrade, is a multisig address on the XRP ledger whose signers are authorized, identifiable entities cooperating with the Flare Foundation, who manually sign off on transactions — reintroducing custodial trust on top of the over-collateralized-agent design that is FAssets’ core differentiator from custodial wrappers. Flare’s own documentation frames this as a deliberate, temporary tradeoff pending a v2 upgrade using trusted-execution-environment-based automation, and the Flare Foundation can trigger an ”Alert Mode” freezing Core Vault operations.
Incident record
No confirmed protocol-level exploit, agent default, or depeg of the legitimate FAssets system was identified through this review’s 2026-08-18 search cutoff. An $8.6M phishing scam impersonating FXRP staking drained South Korean investors in July 2026, with Seoul police freezing $12M within 72 hours, but this targeted users routing funds through fake staking sites rather than the actual FAssets minting interface — a name-collision and impersonation risk worth client education, not a protocol failure. An OpenZeppelin audit was published 2026-01-27; its specific findings and scope were not independently reviewed in this pass.
Exit
Redemption burns FAssets for the underlying asset through the agent, or through the Core Vault liquidity facility since a v1.3 upgrade added destination-tag-based routing removing manual agent selection. If an agent is unresponsive or undercollateralized, liquidators can force a payout from the vault plus pool collateral, a real backstop, but one that depends on liquidator activity and available collateral value rather than a guaranteed instant par redemption.
Comparison
Against WBTC, Binance-Peg BTCB, and Function FBTC, all rejected in this registry for custodial concentration, FAssets’ agent-and-oracle design is a genuinely different, more transparent architecture on paper. But the Core Vault’s manual multisig custody, combined with governance-gated agent entry and a collateral ratio thinner than the 150% or higher common in comparable over-collateralized systems, means the live system carries real, disclosed centralization and undercollateralization-risk points the ”trustless bridge” framing understates, and only one of the several advertised assets is actually live today. This is closer to the already-rejected Lorenzo enzoBTC and exSat Staking BTC than to the approved Lombard BTC.b: a genuine architectural idea with real, undisclosed-in-marketing custodial dependencies still attached.
Sources
The claims above trace to these. Where a number could not be independently verified, the thesis says so.
- Flare Developer Hub — FAssets overview · primary · accessed 2026-08-18
Supports: mechanism, agent design - Flare Developer Hub — collateral · primary · accessed 2026-08-18
Supports: 130% collateral ratio - Flare Developer Hub — liquidation · primary · accessed 2026-08-18
Supports: permissionless liquidation process - Flare Network — a deep dive into Core Vault design · primary · accessed 2026-08-18
Supports: Core Vault manual multisig, Alert Mode freeze capability - Flare Network — how FAssets evolves in v1.3 · primary · accessed 2026-08-18
Supports: redemption routing update - Messari — Flare: the launch of FAssets · secondary · accessed 2026-08-18
Supports: FXRP-only live status - Tech Times — fake Flare staking site stole $8.6M in XRP · secondary · accessed 2026-08-18
Supports: phishing impersonation incident
Inherited controls
The verdict above grades the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The least safe layer sets the position’s grade, and the position table names which one that is.
| Chain | Verdict | Grade | Control constraint |
|---|---|---|---|
| Ethereum | Approved | sovereign | No sequencer, no upgrade key, no operator who can be compelled — rule changes require social consensus. |