$18M in a curated @MorphoLabs vault is stuck: one collateral fell up to 85%, utilization hit 100%, exits gone. Curators choose the markets but hold none of the risk. Question for risk leads: how do you price curator concentration before utilization is the thing telling you?
TVL tells you how much sits in a vault. It does not tell you how few addresses could pull it out from under you. Those are two different risks, and only one of them shows up on the dashboard.
A peg is a price. Liquidity is whether you can actually leave at it. Same logic one layer up: APY is a quote, exit is a question. Concentration is what decides the answer when everyone reaches for the door at the same time.
Most DeFi risk frameworks measure the asset. Almost none measure who controls the asset's exits. If a handful of addresses determine whether you get out, "blue chip vault" is a story, not a risk rating. Curious where the risk desks land on this.
MIM fell to $0.87 with no exploit and no redemption run. It broke because the DEX liquidity to defend $1 wasn't there.
A peg is a price. Liquidity is whether you can actually leave at it. Treasuries audit the first and ignore the second.
DeFi Development Corp holds 2.3M $SOL, running its own validators at 7.5% yield vs ~3.9% on centralized providers.
"MSTR playbook" applied to a single native asset plus self-custody staking.
Stress-testing concentrated on-chain treasury risk? This is the live case study.
Which of these is on your radar? TSS key management, bridge exposure, governance velocity, concentrated treasury strategy.
What's the risk category your model doesn't cover yet?
What are we missing?
Yield diversification breaks down exactly when you need it most.
Sources that look uncorrelated in normal conditions converge under stress. Correlation isn't a constant — it's regime-dependent.
We model this with a conservatively calibrated volatility multiplier that adjusts effective exposure when correlations spike. The result: a stress-adjusted market risk score that reflects what your portfolio actually looks like at a stress event, not what it looks like today.
The goal isn't optimization. It's survival. Framing risk management as diversification + yield optimization is how treasuries go bankrupt.
The $292M rsETH exploit didn't find a bug in Aave. Not one. Every contract performed exactly as designed. ~$177M in bad debt materialized anyway — because auditing the right protocol isn't enough if you haven't audited what feeds it.
In the same 30 days, Morpho's TVL grew to $11.78B — ETH-denominated supply tripled YoY. Capital doesn't file a post-mortem first. Operators are already making decisions about which dependency risk profiles they're willing to hold.
The question operators are sitting with: do you know which collateral assets in your yield vaults depend on cross-chain bridges you haven't reviewed? Not rhetorical — it's a parameter that currently exists outside most treasury risk models.