Risk Analysis
Risk quantification, stress testing, and audit summaries for bizUSDT0.
Risk Analysis
This document provides a structured risk assessment for bizUSDT0, covering smart contract risk, protocol dependencies, liquidity, stress scenarios, and concentration risk.
Smart Contract Risk
Mystic Core USDT0 V2
- Standard: ERC-4626 tokenized vault (compliant with EIP-4626 for standardized yield vault interfaces).
- Audit Status: Pending documentation. Audit reports will be linked here once verified.
- Bug Bounty: Availability and scope pending confirmation from the Mystic protocol team.
- Upgradeability: The Mystic vault contract's upgradeability status should be verified. If a proxy pattern is used, the governance/admin key that controls upgrades represents a systemic risk vector.
Superform Vault Wrapper
- The bizUSDT0 vault is deployed through Superform's factory system. Superform's own contract audit status and bug bounty program should be reviewed.
- Audit Status: Pending documentation.
Mitigants
- Single-sleeve design limits attack surface to two contracts (Superform wrapper + Mystic vault).
- All actions are restricted to the authorized set: deposit, redeem, rebalance, harvest.
- No arbitrary call capability from the vault.
Protocol Dependency Risk
| Dependency | Risk Type | Impact if Failed |
|---|---|---|
| Superform | Platform / wrapper | Vault deposit and redemption flows halted; positions in Mystic remain |
| Mystic Core | Yield source | Yield generation stops; USDT0 deposits may be locked in the lending market |
| SparkDEX V3.1 | Reward conversion | WFLR cannot be converted to USDT0; FLR exposure drifts above policy band |
| USDT0 (OFT) | Deposit asset | Depeg or bridging failure impacts all vault operations and NAV |
| Flare FTSO Oracles | Price feeds | Reward conversion slippage calculations degraded; harvest may be paused |
| LayerZero | Cross-chain messaging | USDT0 minting/redemption on Flare may be affected if OFT bridge is disrupted |
Key Dependency: The vault's entire value chain depends on the continued operation of Mystic, Superform, and SparkDEX on Flare. A simultaneous failure of any two of these would severely impair vault operations.
Liquidity Risk
SparkDEX WFLR/USDT0 Pool
- Risk: If pool liquidity falls below the level required to fill harvest swaps within the 25 bps slippage cap, WFLR conversion is paused and FLR exposure drifts upward.
- Monitoring: Pool TVL and depth at the ±25 bps range should be tracked continuously.
Mystic Withdrawal Queue
- If borrower utilization on Mystic is near 100%, withdrawal requests from the sleeve may be queued.
- Impact on Vault: Redemptions that require sleeve unwinds will be delayed until the Mystic queue clears.
- Reserve Buffer Adequacy: The 8% reserve target is designed to cover normal redemption flows without sleeve interaction. At $25M TVL, the reserve holds $2M USDT0, which is sufficient for moderate redemption pressure.
Stress Test Scenarios
| Scenario | Description | Estimated Impact on NAV | Estimated Recovery Time |
|---|---|---|---|
| Mystic Vault Exploit | A smart contract vulnerability in Mystic Core USDT0 V2 is exploited, resulting in partial or total loss of sleeve deposits. | −85% to −92% of TVL (sleeve portion) | Unrecoverable without external backstop |
| USDT0 Depeg on Flare | USDT0 loses its peg on Flare (e.g., due to LayerZero bridge issue) while maintaining peg on other chains. | −2% to −10% depending on depeg severity and duration | Days to weeks, depending on bridge restoration |
| SparkDEX Pool Drain | The WFLR/USDT0 pool on SparkDEX is drained (e.g., flash loan exploit or liquidity migration). | No direct NAV impact; WFLR harvest paused, FLR exposure drifts to 3%+ | Days; alternative conversion path or manual OTC required |
| FLR Price Crash −50% | FLR token price drops 50% within 24 hours. | −1% to −2% of NAV (FLR exposure at 2–3% policy limit) | Immediate; FLR exposure hedged by swift harvest |
| TVL Cap Hit with Mass Redemption | $25M TVL is reached, followed by 30%+ redemption requests within 24 hours. | −0% direct NAV impact; settlement delays of 1–3 days if Mystic withdrawal queue is active | 1–3 days for full settlement |
Value-at-Risk
Status: A formal Value-at-Risk (VaR) model for bizUSDT0 is under development. The model will incorporate:
- Historical volatility of USDT0 depeg events on Flare
- Mystic protocol utilization and withdrawal queue depth
- SparkDEX WFLR/USDT0 pool liquidity dynamics
- FLR price volatility and its impact on unharvested WFLR exposure
The VaR model will report 95% and 99% confidence intervals for daily and weekly loss estimates. Results will be published here upon completion.
Slippage Analysis
All harvest swaps are executed with a 25 basis point slippage cap. This section tracks actual execution quality versus the cap.
Methodology:
- Expected price: FTSO oracle mid-price for WFLR/USDT0 at the time of swap submission.
- Actual execution: The effective price received on-chain.
- Slippage = (Expected Price − Actual Price) / Expected Price × 10,000 (in bps).
| Metric | Value |
|---|---|
| Average Harvest Swap Slippage (bps) | — |
| Maximum Observed Slippage (bps) | — |
| % of Swaps Within 10 bps of Cap | — |
| # of Aborted Swaps (slippage exceeded 25 bps) | — |
Status: Data will be populated from on-chain harvest transaction logs once sufficient history has accrued.