Lista Lending

Rejected venues wait the longest for re-review; a rejection has to earn another look before the scheduled date.

REJECTED. Lista Lending is a permissionless, isolated-market lending system with first- and third-party vaults. Current official contract records confirm deployments on both BNB Smart Chain and Ethereum, correcting the earlier uncertainty over whether Ethereum was merely planned. That does not establish an approvable exposure. Lista’s own overview centers the product on BNB Chain, which this mandate rejects at the chain layer, while the Ethereum inventory shows only a narrow set of contracts and a USD1 vault. No named Ethereum vault has yet been supplied with the curator, collateral, oracle, LLTV, caps, liquidity, bad-debt record and exit evidence needed for approval. Permissionless deployment is not a protocol-wide credit conclusion; every vault is a separate portfolio.

Kill criteria: the events that revoke this verdict
• No named production vault on an approved chain with a complete curator and market inventory
• Any allocation or exit path depends on BNB Smart Chain
• Any unsupported collateral, stale oracle, unreconciled bad debt or failed liquidation
• Proposed-size withdrawal or collateral sale exceeds the written cost or time limit
• Any manager, admin, timelock or curator authority not reconciled to live contracts and current audits

The research file

Mechanism and risk unit

Lista Lending uses isolated markets defined by loan token, collateral token, oracle, interest-rate model and liquidation loan-to-value ratio. Lenders can enter a market directly or hold a vault that allocates across markets. Interest follows utilization through the AdaptiveCurveIRM and liquidators may seize collateral after an account crosses LLTV. Isolation limits contagion between markets but does not remove oracle, collateral, liquidation or utilization risk. The decision unit must be a named vault and its live market allocation, never aggregate Lista TVL.

Who controls it

Anyone can create a market using manager-enabled IRMs and LLTV values. Lista’s manager can enable those values and set market fees; the published deployments also include manager and admin timelocks. First-party vault allocation is controlled by Lista, while independent curators control third-party vault allocations. Lista expressly says it does not review, audit, certify or endorse third-party vaults. Protocol-wide emergency action requires the Lista DAO governance multisig. A future memo must resolve the actual signers, timelock delays and each selected vault’s curator authority from live contracts.

Failure and assurance record

Lista publishes April and May 2025 BlockSec and Bailsec reviews for the lending core and provider, followed by reviews for later modules. No realized Lista Lending bad debt, lender principal loss or contract exploit was identified in the reviewed official documentation. That is not a clean incident certification: the documents do not provide one consolidated incident ledger, realized liquidations by market or historical withdrawal failures. Audits also do not underwrite permissionless assets, oracles or curators added after their scope date.

Exit and liquidity

A lender exits only from unborrowed liquidity in the selected market or vault. High utilization can delay withdrawal even if collateral remains solvent, and a vault share adds allocator behavior to direct market liquidity. Liquidation depends on oracle validity, liquidator incentives and executable collateral markets on the same chain. The public overview and contract list do not establish proposed-size Ethereum exit depth. Approval would require atomic withdrawal and collateral-liquidation tests at stressed utilization, plus an independent stablecoin off-ramp.

Chain and peer comparison

BNB Smart Chain documentation describes 45 active validators, with 21 forming the consensus set for an epoch; that validator model remains outside this mandate’s approved chain set. Ethereum deployment avoids that specific chain exclusion but does not inherit BSC liquidity, operating history or liquidators. Architecturally, Lista resembles isolated-market systems such as Morpho, but the latter can be underwritten through a named mature curator and vault. Lista has not yet supplied equivalent evidence for a suitable Ethereum stablecoin vault. The rejection is thus both chain-specific on BSC and evidence-specific on Ethereum.

Observable reopening conditions

Reopen only for a named vault on an approved chain after at least six months in production. Record the curator and every admin/timelock signer; enumerate markets, collateral, oracle, IRM, LLTV, caps and fees; reconcile deployed bytecode to current audits; and publish utilization, bad debt and liquidation history per market. Require proposed-size withdrawal and collateral-sale tests inside written cost limits. Any unapproved BSC dependency, unsupported asset, stale oracle, bad debt, admin bypass or failed withdrawal closes the review.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

• Lista docs — lending overview · primary · accessed 2026-08-14
  Supports: isolated markets, vault structure, AdaptiveCurveIRM, liquidation mechanism
• Lista docs — current BSC and Ethereum contracts · primary · accessed 2026-08-14
  Supports: BSC deployment, Ethereum deployment, USD1 vault, manager timelock, admin timelock, oracle contracts
• Lista docs — market creation and manager authorities · primary · accessed 2026-08-14
  Supports: permissionless market creation, manager-enabled IRM, manager-enabled LLTV, market fee authority
• Lista docs — third-party vault risk management · primary · accessed 2026-08-14
  Supports: independent curators, no Lista endorsement, curator responsibilities, governance multisig emergency action
• Lista docs — audit reports · primary · accessed 2026-08-14
  Supports: April 2025 lending-core audits, May 2025 provider audits, module-specific audit scope
• BNB Chain docs — validator overview · primary · accessed 2026-08-14
  Supports: 45 active validators, 21-validator epoch consensus set, validator selection

Inherited controls

The verdict above grades the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The least safe layer sets the position’s grade, and the position table names which one that is.