Inverse Finance FiRM

## Identification — Inverse Finance FiRM

• Name: Inverse Finance FiRM (Fixed-Rate Market); not a separate protocol named “inverse-firm.”
• Website / app: firm.inverse.finance; parent site inverse.finance. Docs: docs.inverse.finance.
• Category: Isolated, overcollateralized fixed-rate lending/CDP market: users post collateral, hold DBR, and borrow DOLA.
• Launch: DAO authorization was executed December 16, 2022; DBR launched concurrently.
• Chains: FiRM launched on and is documented on Ethereum. The broader Inverse ecosystem has multichain token/bridge deployments, but I found no confirmed FiRM market deployment outside Ethereum.
• Tokens: INV is the governance token; DOLA is the borrowed stablecoin; DBR is the borrowing-rights token that represents fixed-rate borrowing capacity. ### Contracts and verification The documentation lists these Ethereum addresses: INV 0x41d5…dfb68; DOLA 0x8653…c9ce4; DBR 0xad03…d5d710; BorrowController v4 0x01EC…E4ce8; Oracle 0xabe1…0cce8; FiRM Fed 0x2b34…90fd; and market examples including WETH 0x63df…7035, wstETH 0x3FD3…50BC, and CRV 0x63fA…A1Ee8. Required two-source cross-check including Dune: Not verifiable as of October 20, 2026. Dune MCP was unavailable in this run; therefore no on-chain verification, Dune query ID/execution ID, or complete explorer cross-check is asserted. DBR has an Etherscan address page, but that is insufficient for the requested multi-source validation. ## Fork lineage FiRM is not evidenced as a direct Compound fork. Its architecture is purpose-built around isolated personal collateral escrows, DBR accounting, DOLA Feds, and market-specific contracts. Inverse’s earlier Anchor money market *was* explicitly forked from Compound, with a changed oracle and added synthetic-asset/Fed logic. FiRM reports Code4rena and Nomoi audits; the available Nomoi report reviewed a specific commit, so audit coverage should not be assumed to cover later changes. Similar Compound-derived forks have suffered malicious or unsafe-modification incidents, including Cream, Rari Fuse, and Sonne; this is relevant lineage risk, not evidence that FiRM itself was modified maliciously.

Inverse Finance appears to have a real, functioning product portal rather than a mere landing page: the docs describe an active FiRM app at app.inverse.finance/firm, with user flows for deposit, borrow, repay, and withdraw, and the docs also describe a separate sDOLA flow with unstake/withdraw steps. The documentation is reasonably mature: it includes beginner guidance, FAQs, and product pages, and even notes that Markdown versions are available, which is a sign of a maintained docs system rather than a placeholder site. Live product functionality is supported by the docs’ explicit references to operational actions such as approving collateral, depositing, borrowing DOLA, repaying debt, and withdrawing collateral, including the ability to withdraw excess collateral and, after full repayment, all collateral.

The presence of a specific market page for INV on FiRM and a dedicated FAQ page suggests a live application with multiple routes, not just marketing pages. I did not find reliable evidence of broken links, fake metrics, or template-only behavior in the retrieved sources. Not verifiable as of 2026-10-20.

An open API was not clearly documented in the retrieved material. The docs mention a live app and protocol interactions, but they do not clearly expose a public developer API endpoint or API reference. Not verifiable as of 2026-10-20.

Inverse Finance has an active bug bounty program hosted on Immunefi. The program was already in place by 2022 and later migrated from Hats Finance to Immunefi; a 2024 governance proposal increased the maximum bounty from $50,000 to $80,000, and a later 2025 update on the protocol blog said the cap was raised again to 100,000 DOLA. The program is described as currently hosted on Immunefi, with researchers submitting weekly.

Results described publicly include recurring submissions, triage of low-quality/spam reports, and coordinated payouts to whitehats, but no comprehensive public tally of total valid reports or total paid bounty amounts was found in the collected sources. Not verifiable as of 2026-10-20.

Scope: “inverse-firm” is interpreted as Inverse Finance’s FiRM protocol. Dependency and counterparty map

• Oracles: FiRM depends on Chainlink price feeds plus Inverse’s pessimistic-price and fallback-feed logic. Governance-controlled feed switching and RWG guardian actions create operational and governance-key risk. Historical Inverse oracle-manipulation exploits in 2022 demonstrate that this is a proven loss vector.
• External DeFi protocols: Current/recent governance shows integrations or proposed markets involving Yearn, Curve, Liquity V2/BOLD, Pendle, Merkl, 1inch and Odos. Failure, oracle impairment, withdrawal freezes, strategy loss or smart-contract exploits at any of these could impair collateral value or liquidation execution.
• Stablecoins and LSTs: Exposure includes DOLA itself and collateral/LP strategies involving assets such as wstETH, stablecoin LPs, reUSD and previously deUSD. Stablecoin depeg, redemption failure or liquidity contraction could create bad debt and a DOLA liquidity spiral.
• Bridges: Cross-chain sDOLA relies on Chainlink CCIP infrastructure and third-party interfaces such as Interport. Governance executed a proposal to shut down sDOLA CCIP bridge lanes on August 11, 2026; this is an important availability and settlement dependency, although it is not evidence of an exploit.
• Custodians/RWA/SPVs: No direct RWA issuer, SPV or centralized custodian dependency was verified in the reviewed sources. Governance multisigs, guardians and working groups remain operational counterparties. CEX, market-maker and treasury exposure: Not verifiable as of October 20, 2026. Key failure scenarios: manipulated/stale oracle → under-collateralized borrowing; external protocol insolvency or depeg → collateral impairment; bridge/message failure → cross-chain funds unavailable; governance or guardian compromise → incorrect market/feed parameters; DOLA depeg → forced liquidations and liquidity feedback loop. Contradiction / concentration finding: Inverse documentation presents sDOLA as having no third-party lending or custodian exposure, but current product expansion introduces dependencies on CCIP, Yearn, Curve, Liquity and other protocols. This does not prove direct custody risk, but it does increase composability and counterparty risk. Exposure percentages and current dependency balances are Not verifiable as of October 20, 2026 because on-chain verification was unavailable.

FiRM’s custody model is non-custodial and isolated: each user’s collateral sits in a dedicated Personal Collateral Escrow smart contract, separated by user and by token type, and the protocol states that collateral is not pooled, not lent out, and not used for protocol operations without the user’s consent. Inverse’s own documentation also describes FiRM as using market-specific escrow contracts on Ethereum to custody deposited collateral. The protocol presents this as “personal collateral escrows” rather than shared vault custody.

Withdrawal status: I found no general protocol-level withdrawal pause for Ethereum FiRM; the current documentation instead says that some specific markets can be paused or sunset while existing borrowers may still repay and withdraw. For example, the docs explicitly note that the INV market has new borrows paused, but existing positions can still be managed, including withdrawal. Because the question is about FiRM custody overall, a blanket withdrawal pause is not verifiable as of 2026-10-20.

There is no evidence here that user assets are segregated into a pooled omnibus custody structure. The strongest available statement is that assets are segregated per user and per collateral type inside separate escrows.

Inverse Finance’s FiRM key-management model is role-based rather than controlled by one universal admin key:

• DAO governance: Governor Mills is the primary decision and execution layer. Governance proposals control most protocol parameters and contract permissions. Historical governance records describe approximately a three-day voting period plus a two-day timelock before treasury actions execute.
• Operational multisigs: Day-to-day privileged roles are delegated to separate working-group multisigs. The documented structure is: Fed Chair 2-of-7 for Fed policy; Treasury Working Group 3-of-5 for treasury/liquidity operations; Policy Committee 5-of-9 with governance-guardian powers; Growth Working Group 2-of-3; Product Working Group 3-of-5; Analytics Working Group 2-of-3; and Risk Working Group 1-of-3 for emergency monitoring and market pausing.
• Separation of duties: Different multisigs receive narrowly scoped permissions. For example, the Risk Working Group can pause markets but cannot unpause them, while the Policy Committee can cancel governance proposals. Fed contracts, oracle configuration, and certain operational helpers are multisig-controlled; core token contracts are described as immutable.
• Emergency authority: Some controls are intentionally fast. A recent FiRM feed-switch proposal identifies the RWG multisig as guardian and states that the timelock was initially configured to zero, allowing immediate switching.
• Treasury/foundation custody: A separate Inverse Finance Foundation Safe was reported as 3-of-5, with each transfer requiring an on-chain justification. This is an operating entity wallet, not evidence that every FiRM admin role uses the same signer set. Risk assessment: The model reduces single-key risk through quorum-based wallets and role separation, but some emergency powers are low- or zero-delay, and the RWG threshold is only 1-of-3. Current signer identities, key-generation/storage procedures, hardware-wallet use, and the live controller of every FiRM deployment are Not verifiable as of October 20, 2026 because Dune/on-chain verification was unavailable and the public role documentation is stale relative to that date.

Scope/identity: Assumed inverse-firm means Inverse Finance’s FiRM fixed-rate lending protocol, not the separate legacy inverse-protocol vault repository. Current documented Ethereum addresses include Governor Mills 0xbeccb6…59bf6, Treasury 0x926df1…9d5b, Governance Guardian 0x941c26…9259D, BorrowController v4 0x01ECA3…E4ce8, Oracle 0xabe146…0cce8, FiRM Fed 0x2b3454…90fd, and market contracts including WETH 0x63df5e…7035. Architecture: Governor Mills / DAO → parameters, deployments, governance actions Working-group multisigs → emergency pause/cancel, oracle/Fed operations Market → user escrow → collateral; BorrowController + Oracle → borrowing/liquidation FiRM Fed → DOLA liquidity/minting to markets Admin and upgrade risk: The documentation claims core tokens (INV, DOLA, DBR) are immutable, while most protocol contracts are governance-controlled and some operational components are multisig-controlled. It also states multisigs can pause active markets and cancel proposals, but cannot unpause or directly access user funds.

Proxy implementation, ProxyAdmin ownership/type, exact role holders, emergency/fee/strategy permissions, renounced roles, and on-chain timelock delay were not independently verified because Dune was unavailable: Not verifiable as of October 20, 2026. User exit: Documented design permits withdrawals/repayment through FiRM escrow and markets, subject to debt and market rules; sunset markets reportedly retain repayment and withdrawal capability. This is documentation-level evidence, not current on-chain verification. Worst case: compromise of a governance executor, multisig, oracle/Fed authority, or governance process could pause markets, alter risk parameters/oracles, deploy replacement components, misprice collateral, or expand DOLA exposure. Direct admin drainage is not established; freeze/oracle/governance risk remains material. > Contradiction: the docs describe “audited, immutable code,” but also document multisig-controlled operations, governance-controlled contracts, contract migrations, and governance-approved replacement deployments.

Treat immutability as component-specific, not protocol-wide. The 2023 FiRM Nomoi audit identified high-impact reentrancy findings; the report records fixes for some findings, but it does not establish that every currently deployed market was audited. Fields: admin_can_drain=null; audited_deployment=null; upgradeable=null; unresolved_critical=null; unresolved_high=null. On-chain verification: Not verifiable as of October 20, 2026.

yAudit — sDOLA + DOLA Savings Account

Code4rena — FiRM contest

Nomoi — FiRM

Sherlock — Junior Tranche (public contest)

Inverse Finance was founded by Nour Haridy, who is the only clearly identified founder in the sources available here; he is described as the project’s founder and as a former smart-contract/blockchain developer with prior work at Lamarkaz, Tykn B.V., Bountyhive, and Mosendo. The team appears to have been public rather than anonymous, but the available sources do not fully verify whether all current contributors are public-facing or whether any are pseudonymous; that is not verifiable as of 2026-10-20. Credibility-wise, Haridy’s prior roles are relevant technical experience, but the sources do not establish a long track record of exits, major protocol leadership, or prior hacks/incident response on his part.

I do not have enough independent evidence here to assess “real office” versus remote operation, or onshore versus offshore incorporation, so those items are not verifiable as of 2026-10-20. On the “real business vs. web front” question, the available evidence supports that Inverse Finance is a substantive DeFi protocol rather than a pure front-end project: it is described as a DAO focused on decentralized lending and synthetic assets, with products including DOLA, an overcollateralized stablecoin, and DC Vaults. However, because this claim comes from a project-directory source rather than raw on-chain data, it should be treated as a protocol-description claim rather than independently on-chain verified.

Inverse Finance is a long-running DeFi DAO best known for its FiRM fixed-rate lending protocol and DOLA ecosystem; it has public audits from Code4rena and Nomoi, and its own risk disclosure emphasizes that smart-contract, peg, liquidation, and bridge risks remain present even after audits. Public sentiment is mixed-to-cautious: some risk sites describe FiRM as a moderate-risk design with improved security features, while DeFi aggregators still frame the protocol as one with meaningful smart-contract and governance risk. The main criticism is historical security failure.

Multiple independent sources report that Inverse Finance suffered two oracle-manipulation exploits in 2022 on its predecessor market, with combined losses variously described as about $21M or over $24M; later commentary says the earlier market was suspended and left with bad debt, which continues to color reputation assessments. FiRM is presented as a redesign with stronger protections such as personal collateral escrows, daily borrowing limits, and pessimistic price oracles, but those are security claims rather than proof of absence of risk. I found no clear evidence in the supplied sources of fraud, rug-pull, insolvency proceedings, sanctions, or regulatory enforcement against Inverse Finance or its founders.

Founder/investor background is also not well documented in the provided results, so those parts are not verifiable as of 2026-10-20. The unresolved concern is reputational, not legal: whether the redesigned FiRM architecture and governance can fully offset the protocol’s prior exploit history and any latent oracle/governance risk.

Scope: Inverse Finance FiRM is primarily a fixed-rate DOLA CDP/lending market, not a single yield vault. Users deposit collateral (e.g., WETH, wstETH, CVX, INV, sUSDe) and borrow DOLA; DBR tokens are purchased and continuously consumed as the borrowing cost. Yield products / strategy: sDOLA accepts DOLA and returns sDOLA; yield is generated from DBR revenue paid by FiRM borrowers, converted through an on-chain auction and auto-compounded. jrDOLA accepts DOLA, routes it into sDOLA, and adds DBR “insurance premium” yield while absorbing first losses from FiRM bad debt. These are primarily stablecoin strategies, but they retain DOLA-peg, smart-contract and credit risks. Organic vs subsidized: The documented yield source is borrower-paid DBR revenue rather than liquidity-mining emissions; however, the split between organic revenue and governance-directed DBR distributions is Not verifiable as of October 20, 2026.

Therefore organic_yield_pct is null. Risk profile / leverage: sDOLA is broadly market-neutral in asset terms but exposed to DOLA and protocol risk. jrDOLA is a leveraged credit/insurance position: it earns more but can be permanently slashed. FiRM supports leverage/looping—borrow DOLA against collateral, buy more collateral, and repeat—but this is user-executed and liquidation-sensitive. External exposure can include collateral-specific and DOLA-peg risks; no protocol-wide leverage ratio is published independently. Withdrawals, fees and gates: sDOLA has instant, permissionless redemption with no stated lock-up or early-withdrawal penalty. jrDOLA uses a queue, typically 1–10 days according to current documentation, plus a small withdrawal fee; governance may pause withdrawals for up to 90 days.

FiRM borrowers face DBR costs, forced-replenishment premiums and liquidation fees. Revenue: DeFiLlama attributes revenue to DBR spent by borrowers, DBR distributions, auctions, buybacks and forced replenishment. Its stale snapshot shows TVL $22.74m, all on Ethereum; product-level TVL, trend, and Dune comparison are Not verifiable as of October 20, 2026 because Dune is unavailable. > Contradiction: DeFiLlama displays conflicting APY snapshots: 0.58% on the opened page versus 3.61% in its search extract. APY history, volatility and sustainability are therefore not reliably verifiable; current APY should be treated as stale/unstable. Fields: organic_yield_pct: null; leverage_ratio: null.

Scope: Inverse Finance (FiRM/DOLA), not a namesake. Dune was unavailable in this run; therefore on-chain balances, current USD valuation, and chain-by-chain exposure are Not verifiable as of October 20, 2026. Reserves / treasury: Inverse states that its treasury spans Ethereum and other chains, including stablecoins, volatile assets, veNFT positions, and assets held by working-group multisigs. The transparency portal also describes assets held directly in the treasury contract and stable reserves deployed in yield strategies; however, the current numeric dashboard values are not exposed in the fetched page. Addresses / custody: The current smart-contract documentation lists the Ethereum Treasury as 0x926df14a23be491164dcf93f4c468a50ef659d5b; governance is executed through Governor Mills.

Operational treasury management is assigned to the Treasury Working Group (TWG), described as a 3-of-5 multisig managing liquidity and treasury operations across Ethereum, Base, Optimism, Arbitrum, and other chains. A separate Foundation multisig is a 3-of-5 Safe at 0xE15B0Ab2036d8Fc2d2aa537B748A34333Ffab963, funded through a capped FoundationFunder allowance of up to 150,000 DOLA per quarter. Contradiction / address risk: An older Inverse Watch contract sheet lists a different Ethereum Treasury address, 0x9D5Df30F475CEA915b1ed4C0CCa59255C897b61B, plus a Fantom treasury address. This conflicts with the current smart-contract documentation and cannot be resolved without an on-chain verification query. Reserve policy / attestations: Treasury movements are governed by DAO proposals, governance-controlled contracts, multisig permissions, and published transparency dashboards.

I found no independent third-party proof-of-reserves attestation. Protocol-published transparency claims are treated as unverified marketing claims where not independently verified. Remaining DOLA bad debt is reported by the protocol at approximately $2.72 million, but this is not a verified consolidated-liabilities figure.

Protocol identification: inverse-firm matches Inverse Finance’s FiRM protocol, not the unrelated “Inverse Protocol” BSC project. Token: Native governance/value-accrual token is Inverse DAO (INV), Ethereum ERC-20: 0x41D5D79431A913C4aE7d69a668ecdfE5fF9DFB68. Uses include governance voting, FiRM collateral, and staking for protocol revenue/DBR streaming; sINV is an auto-compounding wrapper. Supply/valuation: The latest indexed CoinGecko snapshot found reports approximately 711,989 circulating INV, 727,000 total supply, ~$6.72m market cap and ~$6.86m FDV; this is stale/off-chain data rather than a current on-chain verification. Etherscan likewise displays 727,000 total INV. Contradiction: governance materials describe INV+ as inflationary and “exponentially inflationary” while current explorer displays show 727,000 supply; the contract exposes mint(), so a hard cap is not established by the available evidence. Rewards, emissions and unlocks: Stakers receive DBR/protocol-revenue rewards; no INV burn mechanism was identified.

Historical emissions were governance-approved mints, including 75,000 INV executed October 30, 2023 for treasury, staking, liquidity incentives, bonding and OTC activity. Contributor grants used 24-month vesting; strategic investor grants were also tracked with two-year vesting. Whether announced unlocks fully occurred on-chain: Not verifiable as of October 20, 2026. Allocations/concentration: Complete team, investor, treasury and community allocation percentages; current top-holder concentration; and insider-wallet attribution: Not verifiable as of October 20, 2026.

Dune/on-chain verification was unavailable. Admin/control risk: The verified token ABI includes owner-controlled mint, whitelist/transfer-gating (openTheGates, closeTheGates), and seizure functions. Current owner, tradable/seizable status, and effective controller: Not verifiable as of October 20, 2026. Liquidity/listings: Official documentation lists Curve, Balancer, Uniswap V2 and SushiSwap, plus Coinbase, MEXC, Gate.io and CoinEx. Current DEX depth, slippage and venue-level liquidity: Not verifiable as of October 20, 2026.

Not verifiable as of 2026-10-20. I could not confirm any on-chain or protocol-specific exposure for inverse-firm from the available web results, so I cannot quantify how a Bitcoin move below $10,000 would affect its reserves, collateral, debt positions, liquidation thresholds, or TVL. What can be said from the broader market context is that multiple independent sources describe sub-$10,000 Bitcoin as an *extreme stress scenario* that would likely require a combination of sharp equity declines, tighter liquidity, forced deleveraging, and/or a broader crisis of confidence rather than a normal drawdown.

Several sources specifically cite a ~20% U.S. equity correction as one possible trigger in bearish scenario analysis, but they frame this as conditional analysis, not a forecast. For a DeFi protocol analysis, the key stress channels to test would be: indirect TVL contraction from market-wide collateral devaluation, higher liquidation risk if BTC is used as collateral or reference asset, and potential redemption pressure if user confidence weakens. However, for inverse-firm, those protocol-specific effects are not verifiable from the provided sources.

Not verifiable as of 2026-10-20. The search results provided do not identify the inverse-firm protocol’s actual collateral composition, largest collateral asset, or chain-specific exposure, so a 20% depeg stress cannot be quantified for this protocol from the available evidence. The only directly relevant material is generic DeFi stress-testing guidance showing that a 10-20% instantaneous depeg can trigger liquidation cascades and bad debt in lending markets, but it does not provide protocol-specific numbers for inverse-firm.

If you want a protocol-specific loss estimate, the minimum required inputs are: the largest collateral token, its on-chain amount or USD value, the liquidation threshold / haircut, and the debt or liabilities against it.

Scope limitation. “Top counterparty” (largest current FiRM borrower, collateral issuer, or external venue) and its exposure are Not verifiable as of October 20, 2026 because the required on-chain/Dune check is unavailable. The scenario below therefore assumes the largest FiRM borrower defaults and liquidation collateral is insufficient. Expected loss path 1. Default and liquidation: The borrower stops servicing DOLA debt or becomes undercollateralized. FiRM’s market, oracle and liquidation machinery allow liquidators to seize/sell collateral.

Loss equals debt plus liquidation costs minus recoveries. FiRM’s architecture routes liquidation incentives to liquidators; any residual is bad debt. 2. First-loss absorption: For covered FiRM markets, the stated waterfall is a proportional slash of the jrDOLA ERC-4626 vault.

The FiRM Slashing Module withdraws DOLA from the vault, reducing the jrDOLA exchange rate; all junior holders bear the loss pro rata. This is an unverified marketing/documentation claim, not independently on-chain verified here. 3. Senior impact: sDOLA/DOLA holders are intended to be protected while jrDOLA remains solvent.

If the shortfall exceeds jrDOLA capacity, the documentation does not establish a fully automatic, legally enforceable residual-loss waterfall; losses could migrate to protocol reserves and ultimately appear as under-backed DOLA/depeg risk. Not verifiable as of October 20, 2026. Who absorbs it and compensation

• Liquidators absorb execution/market risk but receive the liquidation incentive.
• jrDOLA holders absorb covered bad debt and are compensated ex ante through enhanced DBR rewards/premium yield; slashed principal is not contractually restored.
• sDOLA holders receive seniority, not an explicit external guarantee.
• No evidence was verified of government, DAO, or third-party reimbursement for a new FiRM counterparty insolvency. Historical Frontier losses were addressed through DAO repayment mechanisms, but those are legacy-specific and not a general guarantee. Smart-contract impact chain: borrower position → oracle/FiRM market marks undercollateralization → liquidator calls liquidation → collateral escrow transfers assets → residual bad debt → authorized governance/guardian invokes FiRM Slashing Module → jrDOLA vault assets decrease → jrDOLA share value falls; withdrawal queues remain exposed during cooldown.

Not verifiable as of 2026-10-20. The available results do not identify any protocol-specific evidence that inverse-firm’s DAO or owners committed fraud, nor do they provide corroborated reporting of a fraud event tied to this exact protocol. The search results mostly contain general DAO fraud and stress-testing material, not case-specific evidence about inverse-firm.

For a stress-scenario assessment, the relevant risk is that a DAO or controlling owners could misuse governance or treasury control to misappropriate funds, for example through malicious proposals, governance capture, or treasury diversion. However, without protocol-specific sources that confirm inverse-firm’s governance structure, treasury controls, or any alleged misconduct, this remains a generic scenario rather than a verified incident. If you need a red-flag assessment, the correct classification is: committed fraud by the DAO or owners — Not verifiable as of 2026-10-20.

Not verifiable as of 2026-10-20. I could not find reliable, protocol-specific evidence for inverse-firm’s primary yield source or a 30-day negative stress outcome in the provided results. The search results are generic stress-testing and macro-yield material, not disclosures or analytics for this protocol, so they do not support a protocol-level conclusion.

If you want, I can next look for inverse-firm’s yield composition, vault strategy, and any 30-day performance data from independent analytics, audits, or governance records.

Identity match: This is Inverse Finance / FiRM (INV, DOLA, DBR), not the unrelated “Inverse Protocol” repository. The DAO’s governance interface shows live and recently executed proposals, so governance is operational rather than purely symbolic. INV holders/delegates vote through Governor Mills; proposals are discussed on the forum, submitted on-chain, voted on, queued, and executed.

Recent governance parameters shown are 24,000 INV quorum and 7,270 INV proposal threshold. Control map: Most core contracts are described as Governor Mills-controlled; INV, DOLA and DBR are described as immutable. Working-group multisigs retain operational powers: TWG manages treasury/liquidity operations; Fed Chair manages DOLA/Fed policies; Policy Committee can cancel proposals; RWG can pause markets and adjust certain oracle/borrow-cap controls; other groups handle growth, product expenses and analytics. The frontend and development stack are open-source community repositories, but effective maintainer control is not independently verified. Multisig risk: There is no single protocol-wide multisig.

Published configurations include Fed Chair 2/7, TWG 3/5, Policy Committee 5/9, GWG 2/3, PWG 3/5, AWG 2/3 and RWG 1/3. Named signer identities, current owner sets, signer independence, and exact contract permissions are Not verifiable as of October 20, 2026 without Dune/on-chain inspection. Timelock / emergency powers: A seven-day timelock is referenced for governance-controlled actions, but some module-specific controls have configurable or zero-delay timelocks; the RWG’s FeedSwitch V2 was initially specified with a 0-hour delay. Therefore, there is no uniform global delay. Concentration: Dune top-holder analysis is Not verifiable as of October 20, 2026.

The governance forum reports 68 delegates, approximately 340,004 delegated INV, and the five largest delegates holding 85.6% of delegated voting power—material concentration, despite active participation. Contradiction: Official material describes DAO-wide control, while operational multisigs can act quickly and some controls have zero delay. This means DAO governance is real for major decisions but not the sole immediate control layer. No company-controlled entity, jurisdiction, registration number, directors, or applicable ToS were identified; company control is not established.

Scope confirmed: inverse-firm refers to Inverse Finance’s FiRM protocol, not an unrelated “Inverse” project. Entity / jurisdiction. Inverse describes FiRM as developed and governed by the Inverse Finance DAO. Earlier governance records stated that the DAO lacked a legal entity. A later proposal (September 2025) approved incorporation of an Inverse Finance Foundation in the Cayman Islands, and a May 2026 update states that the Foundation was established, has directors, bylaws, and amended constitutional documents.

The Foundation’s completed registration documents, exact legal name/number, and governing-law provisions were not independently verified. The DAO itself remains a distinct, potentially non-person legal structure. > Contradiction / finding: Older materials describe “no legal entity,” while later materials describe a Cayman Foundation. The current operating structure is therefore partly clarified but not fully independently documented; entity-level recourse remains uncertain. ToS, restrictions, KYC/AML and data protection. Public protocol documentation is principally a disclaimer: users accept “as-is” smart-contract risk, receive no refund/guarantee, and are responsible for local-law compliance.

The forum references a Terms of Service, but its operative text, restricted-jurisdiction schedule, privacy policy, data-controller identity, retention practices, and dispute forum were not located. No public evidence was found of protocol-level customer onboarding, KYC/AML controls, or transaction-monitoring procedures for permissionless FiRM users. Not verifiable as of October 20, 2026. Classification / enforcement. No public regulator classification of FiRM, DOLA, DBR, or INV was identified. Their lending, stablecoin, and tokenized-borrowing-rights features could create securities, commodities, payments, lending, or money-transmission questions depending on facts and jurisdiction; this is a risk assessment, not a legal conclusion.

No regulator warning, enforcement action, court case, or sanctions listing naming Inverse Finance, FiRM, DOLA, INV, DBR, or the Inverse Finance Foundation was identified in the reviewed sources. Not verifiable as of October 20, 2026 for non-public investigations or unindexed proceedings. The 2025 SEAL safe-harbor adoption is a private risk-management measure, not regulatory authorization. Legal structure vs. actual risk. The Cayman Foundation may improve contracting, employment, banking, and asset ownership, but does not itself eliminate DAO, contributor, tokenholder, smart-contract, or cross-border regulatory exposure.

No exact GLEIF LEI record for 'Inverse Finance Foundation', 'Inverse Finance FiRM'. OFAC SDN screening of 'Inverse Finance Foundation', 'Inverse Finance FiRM': no match. SEC litigation and administrative release feeds: no mention.

Inverse Finance issues DOLA, a debt-backed decentralized stablecoin; the protocol’s own docs and multiple independent sources identify DOLA as its native stablecoin. Public sources reviewed do not provide a reliable, independently verifiable depeg history for DOLA with exact count, last depeg date, or maximum depeg percentage, so those fields are Not verifiable as of 2026-10-20.

Inverse Finance FiRM’s principal risks are smart-contract failure, oracle/valuation error, liquidation-driven bad debt, governance concentration, and DOLA/bridge liquidity stress. Historical exploits, permissioned emergency controls, and reliance on collateral and cross-chain infrastructure leave meaningful residual tail risk; current on-chain exposure and utilization are Not verifiable as of October 20, 2026. Audit finding counts and remediation status are not consistently reported across available sources; unresolved findings are Not verifiable as of October 20, 2026.

Key strengths of Inverse Finance FiRM (as a lending market, not the broader DAO): 1. True fixed-rate borrowing via DBR mechanism FiRM lets users borrow DOLA at fixed interest rates of arbitrary duration, using DOLA Borrowing Rights (DBR) instead of floating-rate interest curves. This provides predictable borrowing costs and is structurally different from typical variable-rate pools on Aave/Compound. 2. Isolated Personal Collateral Escrows (PCE) Each position is held in its own Personal Collateral Escrow contract, isolated per user *and* per collateral type, rather than pooled with other users’ assets.

This reduces contagion risk between positions and makes large pooled collateral exploits less attractive to attackers. 3. Multi-layered security design and risk process FiRM implements defense-in-depth: PCE isolation, pessimistic price oracles, borrow limits, contract whitelisting, oracle staleness checks, and continuous monitoring by a dedicated Risk Working Group. External reviews include at least one published audit on FiRM’s codebase, which was found well-documented with recommendations for additional safeguards.

Independent risk platforms describe the redesigned FiRM architecture (dual oracles, PCE) as a material security improvement over earlier Inverse products, even while rating overall risk as moderate. 4. Conservative oracle and parameterization approach Pessimistic Price Oracles use conservative asset pricing to reduce the impact of short-term or flash-loan-driven price manipulation. Combined with per-asset borrow limits and whitelisting, this constrains tail risk from volatile or exotic collateral.

5. Capital efficiency / product breadth within fixed-rate design FiRM supports multiple collateral types with individualized risk parameters and allows advanced users to increase exposure via the Accelerated Leverage Engine (ALE), which can recursively lever collateral and borrowing up to several times initial size, while still operating at fixed rates. The design is integrated with DOLA and sDOLA, enabling a full stack of fixed-rate borrowing and yield options inside one ecosystem.