SENPYUSDMAINRisk · Ethereum
Risk
Depositing into SENPYUSDMAIN means underwriting risks you usually can't see: how much you could lose, whether you'd get out in time, and what would cover it.
Left to right, a deeper collateral crash. Hover any point for the scenarios that drive the loss — only a smart-contract bug reaches a total loss.
Collateral & oracles
Each token you're exposed to, and the market it backs. If that market breaks, this is how much the vault loses, in dollars and as a share of the vault. Open a row for the price feed, stress curve, and supply-cap detail. Below, the oracles those prices depend on and what is at stake if one is compromised.
Driven by syrupUSDC $16.07m · kBTC $14.99m · sUSDe $10.18m · other $15.93m · −100% $277.94m modeled all-to-zero bad-debt ceiling
kBTCMarketChainlink$80.56m25% of vault · bad debtOracle exposure $5.49m$86.05m27% of vault$80.56m25% of vault$5.49mseparate path
kBTC is priced via BTC / USD, quoted in PYUSD / USD — 2-hop market-rate feeds (Chainlink).
- → PYUSD86% LLTV0x007d…cf18Chainlink
syrupUSDCHybridChainlink$68.39m21% of vault · bad debtOracle exposure $7.55m$75.94m24% of vault$68.39m21% of vault$7.55mseparate path
syrupUSDC mixes exchange-rate/NAV (ERC4626 vault share-rate) with market-rate (USDC / USD, PYUSD / USD) — insulated from ERC4626 vault share-rate market deviation, but exposed to USDC / USD, PYUSD / USD.
- → PYUSD92% LLTV0xc804…7039Chainlink
sUSDeHybridChainlink$43.34m13% of vault · bad debtOracle exposure $6.39m$49.74m15% of vault$43.34m13% of vault$6.39mseparate path
sUSDe mixes exchange-rate/NAV (ERC4626 vault share-rate) with market-rate (USDe / USD, PYUSD / USD) — insulated from ERC4626 vault share-rate market deviation, but exposed to USDe / USD, PYUSD / USD.
- → PYUSD92% LLTV0xe621…9e7eChainlink
LBTCMarketRedStone / Chainlink$38.92m12% of vault · bad debtOracle exposure $4.36m$43.29m13% of vault$38.92m12% of vault$4.36mseparate path
LBTC is priced via Redstone Price Feed × BTC / USD, quoted in PYUSD / USD — 3-hop market-rate feeds (RedStone + Chainlink).
- → PYUSD86% LLTV0x0aea…4b1fRedStone / Chainlink
weETHHybridChainlink$38.76m12% of vault · bad debtOracle exposure $4.27m$43.02m13% of vault$38.76m12% of vault$4.27mseparate path
weETH mixes exchange-rate/NAV (weETH / ETH) with market-rate (ETH / USD, PYUSD / USD) — insulated from weETH / ETH market deviation, but exposed to ETH / USD, PYUSD / USD.
- → PYUSD86% LLTV0x2218…ee11Chainlink
WBTCMarketChainlink$3.85m1% of vault · bad debtOracle exposure $291,953$4.14m1% of vault$3.85m1% of vault$291,953separate path
WBTC is priced via WBTC / BTC × BTC / USD, quoted in PYUSD / USD — 3-hop market-rate feeds (Chainlink).
- → PYUSD86% LLTV0x4124…dd1dChainlink
cbBTCMarketChainlink$3.52m1% of vault · bad debtOracle exposure $474,152$4m1% of vault$3.52m1% of vault$474,152separate path
cbBTC is priced via cbBTC / USD, quoted in PYUSD / USD — 2-hop market-rate feeds (Chainlink).
- → PYUSD86% LLTV0x7681…e9caChainlink
wstETHMarketChainlink$590,7200.2% of vault · bad debtOracle exposure $72,830$663,5500.2% of vault$590,7200.2% of vault$72,830separate path
wstETH is priced via Custom price feed for wstETH / ETH × ETH / USD, quoted in PYUSD / USD — 3-hop market-rate feeds (Chainlink).
- → PYUSD86% LLTV0x9f02…7916Chainlink
+2 markets with no current position
Oracle dependencies
2 feeds · 2 control pointsUp to$28.91mdrainable if these feeds are mispriced · 9% of vault
Each price traces to a feed and the on-chain admin that can move it. Compromise either to misprice the collateral and borrow against it. Per-row amounts overlap and are not summed.
- Chainlink / RedStone·a 4/9 Safe multisigprices cbBTC, WBTC, LBTC, wstETH, WETH, sUSDe, weETH, kBTC, syrupUSDC, PT-sUSDE-13AUG20260x21f7…73ca$28.91m · 9% of vaultdrainable if it is compromised
- RedStone / Chainlink·a 2/3 Safe multisigprices LBTC0x6906…4472$4.36m · 1% of vaultdrainable if it is compromised
How you could lose money
Each row is a distinct failure. Possible loss is the share of your deposit at the selected collateral drop; Worst case is the ceiling if everything goes wrong — a conditional loss if it happens, not a likelihood. Price-scaling rows move with the drop selector; the rest are fixed. Enter a deposit to see the dollar figures as your own. Open a row for conditions, mitigations, and the math.
| Full-deposit & protocol-level(2) | |||||
| 100% | $322.87m | Full deposit | Instant | ||
| 18% | $57.18m | up to $277.94m | Instant | ||
| Price-driven collateral stress(1) | |||||
| 18% | $57.18m | up to $277.94m | Instant | ||
| Oracle & liquidation failures(4) | |||||
| 18% | $57.18m | up to $277.94m | Instant | ||
| 18% | $57.18m | up to $277.94m | Instant | ||
| 10% | $33.46m | up to $150.49m | Instant | ||
| — | — | up to $28.91m | Instant | ||
| Vault role & allocator(3) | |||||
| — | — | Full deposit | 3 days | ||
| — | — | Full deposit | Instant | ||
| — | — | up to $161.44m | 3 days | ||
Who you're trusting
The people and processes that can change this protocol under you.
The roles that can actually move your deposit — the real principal-loss path.
Role timelock 3 days to exit before owner/curator actions land
Allocators3 · 1 multisig · 2 EOAsReaches deposit · instant
Moves funds between markets the curator has ALREADY approved — instantly, with NO timelock and no exit window. Cannot reach a brand-new market, but can concentrate you into an approved-but-stressed market or order withdrawals so you hit weak liquidity first.
- single key (EOA)0x13de…90e1
- 1-of-1 multisig0x9e39…aac0
- single key (EOA)0xc4ba…79d3
- Certora· 15 Dec, 2025report
- Blackthorn· 4 Dec, 2025report
- Spearbit· 4 Dec, 2025report
- Blackthorn· 15 Sep, 2025report
Protocol-wide governance: bounded context, not the path to your deposit.
Every Morpho Blue market chooses an immutable oracle contract at creation; implementations can be Chainlink-like, exchange-rate, fixed-price, or custom. Failure modes: attacker-favourable price feed (covered in market-oracle-compromise) or price() revert / staleness blocking liquidations (covered in oracle-liveness-or-malfunction).
No quantified loss scenario references this dependency directly.