Surf Liquid

Rejected venues wait the longest for re-review; a rejection has to earn another look before the scheduled date.

SurfLiquid is a non-custodial automated-yield system whose user-owned vaults permit a bounded agent to allocate among allowlisted DeFi venues. The 2026-08-16 survey measured about $0.19M across Base, Ethereum and Polygon, only 0.19% of the $100M materiality floor. The version-1 below-materiality dossier decides before strategy, governance or audit diligence: an advised-client book would overwhelm the observed exit capacity.

Kill criteria: the events that revoke this verdict
• TVL sustained above $100M for 30 days

The research file

Mechanism applicability

Surf provisions a user-owned smart-account vault and gives a scoped session key to an automation layer. The agent may batch swaps, liquidity, staking, harvesting and withdrawals only through registered strategies and allowlisted target contracts. Current product materials describe stablecoin, ETH and BTC optimisation plus lending and active-liquidity vaults, so the measured balance is delegated multi-venue yield exposure rather than a single guaranteed-rate account.

Control and exit applicability

The user wallet remains vault administrator and may revoke the session key, while the Guardian Layer constrains protocol targets, concentration, slippage, liquidity depth, simulations and circuit breakers. Surf advertises permissionless withdrawal and no base withdrawal fee, but economic exit still depends on unwinding each selected venue, bridge or route at available depth and on the smart-account, registry and session-key controls operating as described.

Current observation and corrected perimeter

The DefiLlama API read on 2026-08-16 classified Surf Liquid as Yield and reported approximately $0.19M: about $0.10M on Ethereum, $0.09M on Base and $205 on Polygon, with zero currently attributed to Arbitrum. This corrects the stale Base-only record and covers measured Surf balances rather than the SURF token pool or unrelated protocols with similar names.

Why the materiality dossier decides

Surf measured only about 0.19% of the $100M floor. Fine-grained session permissions and advertised withdrawal control do not create market depth or proposed-size capacity. Reopen only after the same measured Surf adapter remains above $100M for 30 days; then test venue concentration, role and upgrade controls, incident history and a proposed-size atomic unwind across every active chain.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

• SurfLiquid Docs — current product overview · primary · accessed 2026-08-16
  Supports: user-owned vaults, yield allocation, product scope, withdrawal control
• SurfLiquid Docs — smart accounts and execution · primary · accessed 2026-08-16
  Supports: smart account, owner authority, gated multicall, protocol allowlist, atomic execution
• SurfLiquid Docs — Guardian Layer · primary · accessed 2026-08-16
  Supports: concentration limits, slippage bounds, exit simulation, circuit breakers, control boundary
• SurfLiquid Docs — session-key permissions · primary · accessed 2026-08-16
  Supports: scoped delegation, revocation, expiry, blocked arbitrary transfers
• SurfLiquid Docs — fees and withdrawal · primary · accessed 2026-08-16
  Supports: performance fee, no base withdrawal fee, network costs, bridge costs
• DefiLlama — Surf Liquid survey record · secondary · accessed 2026-08-16
  Supports: current TVL, Base, Ethereum, Polygon, Yield category

Inherited controls

The verdict above grades the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The least safe layer sets the position’s grade, and the position table names which one that is.