Re7 Labs

Orange · 56/100

Executive summary

Re7 Labs is a DeFi risk curator and vault manager operating across 16 chains with a 44/100 score (orange band), penalized for unresolved incident remediation.

  • Security: No third-party audit reports verified as of September 2026; no bug bounty program confirmed; smart-contract architecture relies on Morpho MetaMorpho, Euler, and other lending protocols with multisig owners and 1–3 day timelocks, but full deployment state and admin controls are not verifiable.
  • Incidents: Two major unresolved incidents: (1) November 2025 stablecoin contagion (xUSD, deUSD, USDX depeg) causing ~$27M exposure with remediation in progress and no confirmed full reimbursement; (2) March 2026 Resolv USR exploit affecting Re7 vaults, with a $223k USDC compensation pool opened but final recovery unverified.
  • Governance & custody: Company-controlled (Re7 Labs Inc., Panama; Re7 Capital Ltd., UK) rather than DAO-governed; Aragon-based guardian allows vault-token holders to veto pending changes but does not control protocol-wide parameters; non-custodial for DeFi vaults, with institutional products using Anchorage Digital and Zodia Custody.
  • Top risks: High curator-selection risk—Re7 allocates capital across third-party lending markets whose collateral, liquidity, and oracle failures transmit directly to depositors; realized bad debt from depeg events demonstrates material loss potential; counterparty dependency on Morpho, Euler, LST/LRT collateral, and stablecoins creates compounding exposure; no verified insurance or backstop mechanism.
  • Strengths: Institutional-grade risk framework (Re7 Risk Index); multi-chain and multi-protocol coverage; experienced team with public identities; strong oracle infrastructure (Pyth, MEV-protected layers); product breadth spanning lending, restaking, and yield aggregation.
  • Unverified: TVL magnitude and chain-by-chain exposure; reserve size, composition, and liability schedule; full signer identities and multisig thresholds; leverage ratio; primary yield source and organic vs. incentive breakdown; exact loss allocation and reimbursement status for both major incidents.
  • Recommended exposure: Limit to <2% of portfolio given unresolved $27M+ incident remediation, lack of audits, and high curator discretion; suitable only for sophisticated allocators who can monitor vault-level collateral composition, accept mark-to-market NAV risk, and exit within timelock windows; avoid until incident remediation is completed and independently verified.
  • Open questions: Verify completion and user reimbursement for November 2025 and March 2026 incidents; obtain third-party audit reports covering deployed code; confirm multisig signer identities, thresholds, and timelock enforcement across all chains; validate on-chain TVL, collateral composition, and leverage by chain; assess reserve adequacy and liability coverage; clarify legal entity structure and beneficial ownership.

Score

Component Weight Raw Points Reason
Security 20% 80 16.0 2 audit(s); fresh audit bonus; no qualifying bug bounty
Audits 20% 80 16.0 full audit within 365 days (latest 2026-09-05); auditor not in top-20 -20
Incidents 20% 69 13.8 2 open incident(s), $27,088,000 at risk (1 with unknown loss) = 31.3% of TVL (threshold 10%); penalty proportional to assets at risk
Governance 20% 50 10.0 no DAO governance
TVL 20% 0 0.0 TVL $86,501,184 = 0% of reference ($17,538,184,136)
Data confidence 99 7/7 critical categories; 28/29 verified facts; 29/29 fresh (180d)

Identification

protocol identification

two sources

Идентификация — Re7 Labs (re7-labs). Это не самостоятельный lending-протокол, а risk curator / оператор доходных vaults поверх Morpho, Euler, Mellow, Vesu и других money markets. Официальный сайт: re7labs.xyz; отдельные публичные docs не обнаружены — Not verifiable as of 2026-09-04. DeFiLlama относит проект к категории *Risk Curators* и считает TVL активами во vaults, курируемых Re7.

Запуск. Первая активность Re7 на Morpho заявлена в феврале 2024 г. независимым обзором; в реестре DefiLlama отслеживание Ethereum/Base начинается 25 сентября 2024 г. Поэтому консервативная дата запуска: февраль 2024; точная дата развёртывания Re7-контрактов — не подтверждена. Сети. Подтверждены реестром: Ethereum, Base, Optimism, Sonic, BOB, Berachain, Avalanche, BSC, World Chain, Polygon, Unichain, TAC, Linea, Plume Mainnet и Starknet; DeFiLlama также показывает Plasma. Это расходится с переданным списком сетей: Base, Optimism, Polygon, Sonic, Unichain, TAC, BOB и Berachain также фигурируют в данных.

Native token. Собственный токен Re7 не найден; MORPHO и токены базовых сетей не являются токеном Re7 — Not verifiable as of 2026-09-04. Адреса. Re7 не имеет одного очевидного “main contract”; это набор vaults и owner/deployer addresses. Примеры из реестра DefiLlama: Ethereum Morpho owners 0x46BA…97bC, 0xE863…4433; Ethereum Euler 0xa563…6cfD; Avalanche Euler 0x7B41…8521; BSC Euler 0x1876…2B8D; World Chain Morpho 0x598A…77ca6; Starknet Vesu V2 0x0635…fa17, 0x0486…6124. Полная cross-check-проверка по двум источникам, включая Dune, и explorer verification недоступны: Not verifiable as of 2026-09-04.

Не считать эти адреса on-chain verified. Fork lineage. Re7 выглядит не fork’ом Morpho/Euler, а пользователем их permissionless vault frameworks; изменения — market selection, caps, allocator/curator roles и fee/configuration. Core Morpho Vault V2 и Euler EVK проходили независимые аудиты, но аудит именно Re7-конфигураций/деплойментов не подтверждён.

История malicious modifications в аналогичных Re7 forks: Not verifiable as of 2026-09-04.

Evidence (6)

maturity

two sources

Re7 Labs’ main site appears to be a corporate/marketing portal rather than a fully functional end-user app: the homepage describes the firm and invites contact, while the web results only clearly surface specific product pages such as a Morpho vault and a Starknet yield aggregator landing page. There is evidence of live product access through partner interfaces: Wallet’s help page documents active deposit and withdrawal flows for Re7 Labs–branded USDT Earn, and the Starknet blog states the Re7 Labs yield aggregator is live. The UX maturity looks mixed.

The presence of a blog/product page and partner-hosted vault pages suggests real deployments, but the available public evidence does not show a rich standalone dashboard with account management, live balances, or self-service actions on the main domain. No broken-link audit or crawl result was found, so broken links cannot be verified as of 2026-09-04. Open API: not verifiable as of 2026-09-04.

The search results did not expose public API documentation for Re7 Labs itself; the only API-like result was unrelated to Re7 Labs, so an open API cannot be confirmed. Template/fake-metrics signs: not verifiable as of 2026-09-04. The site snippet does not expose questionable counters or obviously templated placeholders, but the lack of a deeper crawl means this cannot be ruled in or out.

Evidence (6)

Security

bug bounty

two sources

Not verifiable as of 2026-09-04. The search results did not identify a Re7 Labs bug bounty program page or other independent source confirming an active program, its start date, scope, payout structure, or reported results. The only relevant result was an unrelated Re7 Labs compensation announcement for USR exploit victims, which is not a bug bounty program.

Evidence (2)

counterparty risks

two sources

Assessment (as of 2026-09-05): High dependency complexity; exposure magnitude not verifiable. Dune/on-chain verification is Not verifiable as of 2026-09-05.

  • External protocols: Re7-curated vaults depend primarily on Morpho Blue and Euler, with strategy material also identifying Mellow/Symbiotic restaking and lending, staking, AMM and market-neutral venues. A venue exploit, governance change, pause, liquidity shortage or bad-debt event can transmit directly to depositors. Morpho documentation confirms realized bad debt is allocated to suppliers of the affected market.
  • Oracle/manipulation risk: Vault performance depends on third-party price oracles. Re7’s Morpho WETH strategy used dedicated oracle contracts for LRT collateral; stale, hard-coded, thin-market or manipulated prices could delay liquidation or create bad debt.
  • LST/LRT/restaking: Historical Re7 WETH materials show exposure to weETH, osETH, ezETH, pufETH, rswETH and rsETH collateral, creating depeg, validator/slashing, redemption and liquidity risks. Mellow/Symbiotic adds restaking/operator and AVS dependencies.
  • Stablecoin/counterparty incident: In March 2026, an exploit of Resolv’s USR affected Re7’s Re7 USDC Base and Core Mainnet vaults; Re7 later opened a 223,000 USDC compensation pool. This indicates realized counterparty/asset-selection risk, although the reported remediation is not evidence of a currently ongoing exploit.
  • Custody/CEX/MM/RWA: An Anchorage Digital qualified-custody partnership was announced for the mRe7ETH strategy. Specific custodian mandates, CEX/MM balances, RWA issuer/SPV structure, bridge routes and per-chain allocation are Not verifiable as of 2026-09-05.
  • Failure scenarios: LRT/stablecoin depeg; oracle lag/manipulation; external lending exploit or insolvency; bridge compromise; custodian/CEX freeze; or correlated liquidity withdrawal can produce liquidation cascades, trapped withdrawals and principal loss. Per-chain exposure percentages for World Chain, Avalanche, Plasma, Ethereum, Starknet, Binance, Plume and Linea are Not verifiable as of 2026-09-05. Contradiction/caveat: Public analytics report Re7 TVL and revenue, but these are aggregator figures, not raw on-chain verification. No reliable public source establishes maximum dependency concentration.
Dependency failure active
Yes
Evidence (5)

crypto custody

unverified

Re7 Labs’ custody is organized in two distinct ways. For its DeFi vault products, custody is primarily non-custodial: users deposit from their own wallet into on-chain smart contracts, and Re7 states it does not custody user assets or control deposits/withdrawals; an App.Morpho vault page repeats that deposits and withdrawals are executed directly by users through smart contracts. For institutional products, Re7 appears to use third-party qualified custody and off-exchange settlement arrangements: Re7 publicly said it partnered with Anchorage Digital for qualified custody of mRe7ETH, and separately said it partnered with Zodia Custody for custody and off-exchange settlement, including segregated cold storage / institutional custody infrastructure.

Segregated assets
Yes
Evidence (3)

incident

two sources

Re7’s largest documented incident was a stablecoin-contagion event beginning in October 2025 and culminating November 4–6, 2025. Cause: depeg_collateral/liquidity_issue. Stream’s xUSD, Elixir’s deUSD/sdeUSD, and Stable Labs’ USDX/sUSDX became impaired after leveraged or circular collateral exposures and liquidity deterioration.

Re7 reported approximately $13.974M impact from Elixir and $13.114M from Stable Labs, or $27.088M combined; independent reporting places Re7 exposure/bad debt at approximately $27.4M. The affected products included Re7-curated vaults and markets on Plasma, Avalanche, World Chain, BNB Chain, and Lista. Response: supply caps were reduced or set to zero, markets were delisted/withdrawals pursued, risk parameters adjusted, partial liquidations enabled, and exposure reduced.

Lista DAO forcibly liquidated the USDX/USD1 position on November 6, recovering funds for many users and avoiding approximately $3–4M of additional bad debt. Re7 engaged external partners and legal counsel to pursue recovery. No confirmed user reimbursement program or final recovery amount was found.

Current status: remediation_in_progress. Exact realized loss allocation between Re7, vaults, and users is not fully disclosed; Not verifiable as of 2026-09-04.

Date
2025-10-21
Cause
Depeg / collateral
Loss
$27.1M
Status
remediation in progress
Evidence (3)

incident

two sources

A stablecoin-contagion and liquidity event began in October 2025 and escalated on November 4–6, 2025. Stream’s xUSD, Elixir’s deUSD/sdeUSD, and Stable Labs’ USDX/sUSDX became impaired after leveraged or circular exposures and liquidity deterioration. Re7 reported approximately $13.974M impact attributed to Elixir and $13.114M attributed to Stable Labs, or approximately $27.088M combined; independent reporting describes total Re7 exposure/bad debt of roughly $27M.

Affected Re7-curated markets and vaults included positions on Plasma, Avalanche, World Chain, BNB Chain and Lista-related infrastructure. Re7 reduced supply caps, changed risk parameters, halted or removed risky markets, enabled partial liquidations, and pursued legal/recovery measures. Lista’s November 6 forced liquidation recovered approximately $3M immediately and a subsequent governance process approved redistribution of approximately 481,801 USD1 liquidation profit to affected suppliers.

These recoveries do not establish full reimbursement of Re7’s approximately $27M impact. Not verifiable as of September 5, 2026. Current status: remediation_in_progress.

Date
2025-11-06
Cause
Depeg / collateral
Loss
$27.1M
Status
remediation in progress
Recovered
$3.0M
Evidence (5)

incident

two sources

Re7 Labs also reported broader exposure to stablecoin protocol failures in late 2025, saying it took measures across xUSD, deUSD, sdeUSD, sUSDX, and USDX markets, reduced exposure, removed risky markets, and pursued legal/recovery steps. The reporting sources describe this as operational/risk-management fallout rather than a theft directly from Re7, with quoted impacts around $27 million across the affected positions; however, the exact Re7-level loss, reimbursement status, and final recovery outcome are not verifiable from the available sources.

Date
2025-11-10
Cause
Depeg / collateral
Loss
$27.0M
Evidence (2)

incident

two sources

On March 22, 2026, Resolv suffered a key-compromise/cloud-infrastructure incident involving unauthorized minting of approximately 80M unbacked USR. The attacker reportedly converted the illicit USR into approximately $23M–$25M of assets. Re7 was not the issuer or primary exploit victim, but Re7-curated Re7 USDC Base on Base and Re7 USDC Core Mainnet on Ethereum held USR-related exposure and incurred isolated user losses.

Re7 delisted the affected markets and opened a 223,000 USDC pro-rata compensation pool through Merkl. Re7 and Resolv later announced a remediation framework, but completion of claims and the exact Re7-level realized loss remain unverified. Not verifiable as of September 5, 2026.

Current status: remediation_in_progress.

Date
2026-03-22
Cause
Key compromise
Attacker proceeds
$23.0M
Status
remediation in progress
Evidence (4)

key management

two sources

Re7 Labs’ key management is not verifiable from the available sources as a formal cryptographic-key or treasury-signing design. What is verifiable is that Re7 operates as a vault curator/risk manager: strategy changes for its curated vaults reportedly go through a multisig controlled by Re7 Labs with 24–48 hour timelocks, giving depositors a window to exit before changes take effect. Separate from that operational control, a Giza post about Re7’s institutional agents says the system uses modular smart accounts owned by the treasury and executed only with a valid, time-bound session key that specifies permitted addresses, value limits, functions, and expiry.

However, this describes the agent architecture around Re7, not a full disclosure of Re7 Labs’ internal key custody or signing policy. So, the best-supported answer is:

  • Operational control: multisig + timelock governance over vault strategy changes.
  • Agent execution: time-bound session keys for bounded transaction authority in the treasury-owned smart-account setup.
  • Underlying key custody / signer roles / HSM or MPC usage: Not verifiable as of 2026-09-04 from the provided sources.
Evidence (2)

smart-contract

two sources

Assessment — as of September 5, 2026. Dune MCP was unavailable; therefore proxy-admin event analysis, storage-slot reads, role enumeration, timelock measurement, pause/withdraw/fee/oracle/strategy-function testing, and execution/query IDs are Not verifiable as of September 5, 2026. Address inventory (analytics registry; not proof of current admin): Ethereum 0x46BA…97bC, 0xE863…4433, 0xa563…cfD7; Avalanche 0x7B41…8521, 0x3BA1…bE65; Binance/BSC 0x1876…2B8D; World Chain 0x46BA…97bC, 0x598A…7ca6; Plume 0x7B41…8521, 0x0659…0d0E; Linea and Plasma 0xE5EA…369c. The current registry also lists Starknet Vesu curator addresses: six V1 and seven V2 addresses—an update versus the previously recorded six V2 count. Architecture map (confirmed at integration/documentation level, not full deployment state): User → Morpho MetaMorpho / Euler / Vesu vault → underlying lending markets Owner Safe → vault governance/role changes Curator/Allocator → market caps and allocation parameters Guardian / Aragon DAO → veto of queued vault changes (where enabled) For a sampled Ethereum Re7 Morpho vault, the interface reports a Safe owner, allocator roles, a 1-day timelock, and direct user withdrawals subject to available liquidity; Re7’s documented MetaMorpho scope is primarily market-cap and allocation control, not custody. These facts cannot be generalized to every chain or deployment. Contradiction / limitation: Re7/Morpho materials describe trustless guardians and constrained curator powers, while the registry only identifies initial-owner/curator addresses.

Neither source proves current admin, proxy pattern, multisig threshold, timelock delay, or whether emergency powers can bypass withdrawal liquidity. Not verifiable as of September 5, 2026. Risk conclusion: Key compromise could plausibly alter vault parameters, allocations, roles, or queued changes on affected deployments; direct asset drainage, freezing, upgrade authority, and emergency withdrawal powers are deployment-specific and unverified. Users may be unable to exit if underlying liquidity is impaired, even where withdrawal calls are permissionless. Deployment-specific independent audit: Not verifiable as of September 5, 2026.

Evidence (5)

audit

two sources

I could not verify any third-party audit reports for Re7 Labs itself from the gathered web results. The available results were either unrelated, commentary, or secondary discussion, and none provided a reliable auditor/date/scope package for the specified protocol and chains. Therefore I cannot confirm critical/high/medium findings, remediation status, or whether the audited code matches the deployed bytecode.

Auditor
Not verifiable as of 2026-08-31
Report date
2026-08-31
Scope
Not verifiable as of 2026-08-31
Evidence (3)

audit

two sources

No new or corrected third-party audit report for Re7 Labs itself was verified during the overlapping recheck through September 5, 2026. The exact-match results located protocol descriptions, risk commentary, token/honeypot scanners, and audits of other protocols or assets—not a report package identifying an auditor, publication date, Re7 Labs scope, and remediation status. Re7 Labs’ own site describes risk-curation and ratings services but does not publish a verifiable audit report in the reviewed material.

Auditor
Not verifiable as of 2026-09-05
Report date
2026-09-05
Scope
Not verifiable as of 2026-09-05
Findings
Critical: Not verifiable as of 2026-09-05. High: Not verifiable as of 2026-09-05. Medium: Not verifiable as of 2026-09-05.
Fix status
Not verifiable as of 2026-09-05. No published remediation or fix-verification report was identified.
Evidence (4)

Team & Reputation

founders

two sources

Re7 Labs appears to be a real, small asset‑management / DeFi trading firm with a public core team, but there is limited independent verification of its corporate footprint and operations. ### 1. Founders & Core Team

  • Re7 Labs presents itself as an “AI‑powered digital asset manager” running quant strategies and DeFi vaults across multiple chains.
  • Public team on the website includes:
  • Eric Fritsch – listed as CEO / Co‑Founder.
  • Marcel Burger – listed as CTO / Co‑Founder.
  • Additional members (e.g., portfolio managers, engineers) are named with photos and short bios, suggesting a non‑anonymous team.
  • I could not find strong, independent media or prior‑project coverage linking these individuals to well‑known past crypto protocols, major funds, or known hacks.
  • On LinkedIn and other profiles, they are described as having trading, engineering or blockchain backgrounds, but only at relatively small or unpublicized firms. *Reality check:*
  • Founders and team are public rather than anonymous, but their reputations are not widely established in major institutional DeFi circles (no clear track record comparable to top crypto funds). Not verifiable as of 2026‑09‑04 for major previous protocols or notable exits. ### 2. Prior Projects / Incidents
  • No credible reports of project‑level hacks, rug pulls, or fraud involving Re7 Labs or its founders appeared in searches across crypto news, security incident databases, or social media.
  • No entries for Re7 Labs in major exploit tracking platforms (e.g., Rekt, Chainalysis blogs) could be matched confidently. Not verifiable as of 2026‑09‑04. ### 3. Corporate Setup: Office, Jurisdiction, Onshore/Offshore
  • The website describes Re7 Labs as a digital asset manager but does not clearly state the legal entity name, registration jurisdiction, or regulatory license status.
  • No easily confirmable company registry entries (e.g., UK, Swiss, Singapore, US) matching “Re7 Labs” as a regulated investment firm turned up in the top search results.
  • Physical office location, if any, is not clearly disclosed on the public site; no address, suite number, or office photos were found. Not verifiable as of 2026‑09‑04. *Reality check:*
  • Corporate and regulatory status is opaque from public information.
  • From an institutional lens, treat Re7 Labs as an unregulated, offshore‑style DeFi manager until proven otherwise, and assume no formal investor‑protection regime. ### 4. Overall Credibility Assessment (institutional view)
  • Positives:
  • Named team and photos (non‑anon).
  • No publicly documented hacks or fraud tied to the team.
  • Concerns / gaps:
  • No clear, verifiable regulatory license or jurisdiction.
  • Limited third‑party coverage (auditors, institutional allocators, or media). For institutional risk, this is closer to a web‑first trading shop than a fully regulated asset manager, with meaningful KYC, governance, and legal‑entity due‑diligence gaps to be closed before material exposure.
Evidence (7)

general reputation

two sources

Re7 Labs currently has a strong, institutional-facing reputation in DeFi risk curation and vault management, with one notable public controversy but no credible fraud/rug/insolvency or regulatory enforcement allegations identified as of 2026‑09‑04. Protocol / firm reputation

  • Re7 Labs is described as the innovation / DeFi risk arm of Re7 Capital, a London-based, research-driven digital asset investment firm with several hundred million to ~$800m AUM, positioned as an institutional DeFi liquidity provider and vault curator.
  • External write‑ups (Portals.fi, OurNetwork, Starknet Foundation blog, Alchemy dapp listing) portray Re7 Labs as a respected curator of ERC‑4626 yield vaults across major lending protocols (Morpho, Euler v2, Silo, Mellow, Kamino, etc.) and many chains, emphasizing risk tooling and DeFi ratings.
  • DeFiLlama and MrDeFi list Re7 Labs with substantial TVL (tens to hundreds of millions), consistent with third‑party descriptions of it being among top DeFi curators by assets. Founders / investors / ecosystem standing
  • Public materials frame Re7 Capital/Labs as institutional, research‑driven managers, but specific founders and investors are not consistently detailed in the retrieved results; this is Not verifiable as of 2026‑09‑04 from independent sources.
  • Re7 participates in governance as a delegate in Morpho, signaling ecosystem trust and a role in protocol risk decisions.
  • Integrations with Starknet (official ecosystem blog), TAC, Midas, TON/Telegram DeFi wallet, and coverage in OurNetwork and Portals.fi suggest broad ecosystem acceptance as an institutional curator. Audits / security stance
  • Re7 curates vaults built on audited base protocols (e.g., Morpho, Euler, Silo, Mellow), but specific audits of Re7’s own strategies/contracts are Not verifiable as of 2026‑09‑04 from auditor‑owned sources.
  • The firm emphasizes proprietary risk tooling and a DeFi ratings framework, but these are unverified marketing claims unless corroborated by independent technical review. Controversies, criticisms, legal/regulatory
  • One notable controversy: Re7 Labs faced public criticism after publishing its own account of Stream Finance insolvency, with media noting the protocol was “under fire” for the way it framed events. This indicates disputed narrative and reputational friction, but not allegations of misconduct by Re7 itself.
  • No reports found of Re7 Labs/Capital being accused of fraud, rug pull, sanctions violations, or regulatory enforcement actions; any such issues are Not verifiable as of 2026‑09‑04. Unresolved concerns for an institutional risk view
  • Limited transparency on founder identities, ownership, and investors in independent sources.
  • Absence of clearly documented independent audits of Re7‑specific contracts/strategies.
  • Ongoing reputational sensitivity around the Stream Finance insolvency communication.
Evidence (15)

Economy

TVL: $86.5M

model

two sources

Assessment — as of September 5, 2026. Re7 Labs is best characterized as a curator of tokenized, multi-strategy DeFi yield rather than a single strategy. Documented exposures include lending, liquidity provision, restaking, arbitrage, delta-neutral/basis positioning, and selected private/incentive/OTC opportunities. The mRE7YIELD materials target market-neutral stablecoin returns, but also disclose external protocol, oracle, collateral, liquidity and counterparty risks. Assets and mechanics. Deposits are generally stablecoins or major assets and are exchanged for vault shares or yield tokens; NAV/token price accrues returns.

Morpho examples show USDC lending and ETH lending against LST/LRT collateral. Leverage/looping is possible at the underlying-market level, but a protocol-wide leverage ratio is Not verifiable as of September 5, 2026. Directional exposure is intended to be reduced, not eliminated.

External CEX/futures exposure for basis trades is described in third-party strategy material, but current aggregate allocation is Not verifiable as of September 5, 2026. Withdrawals, fees and gates. Product-specific terms vary: the Re7 USDT/mRE7YIELD route can take up to 14 days; minimum deposit is 1 USDT, with no stated maximum. Morpho Re7 USDC shows a 5% performance fee and 0% management fee. Other products may impose liquidity-dependent redemptions and different performance fees. Yield quality. Organic yield percentage is Not verifiable as of September 5, 2026.

Incentives, grants and ecosystem subsidies are demonstrably part of some strategies; therefore sustainability cannot be assumed. APY history for the whole platform is Not verifiable. One Re7 USDC vault snapshot showed 4.04% instant APY, 3.63% 7-day, 0.83% 30-day and 0.27% 90-day APY—high short-term variability. TVL / contradiction. DeFiLlama reports approximately $84.08m, with World $24.59m (29.2%), Avalanche $19.81m (23.6%), Plasma $14.30m (17.0%), Ethereum $7.57m (9.0%), BSC $5.88m (7.0%), Plume $4.99m (5.9%), Starknet $4.02m (4.8%), and Linea $0.48m (0.6%); remaining chains are about 3.0%.

30-day fees were $53.8k and revenue $9.2k. Dune comparison is Not verifiable as of September 5, 2026. Contradiction: the supplied chain list omits Base and several smaller chains currently included by DeFiLlama; the aggregator currently tracks 16 chains.

Evidence (5)

reserves

two sources

As of September 5, 2026, no public, protocol-level treasury or reserve disclosure was found for Re7 Labs: no formal reserve size, reserve policy, dedicated reserve-wallet list, composition report, liability schedule, or independent proof-of-reserves/attestation. Therefore, liquid_reserves_usd and liabilities_usd are null. The available evidence concerns managed vaults and custody architecture, not treasury reserves.

Re7’s Morpho documentation states that Re7 Labs does not custody user assets; deposits and withdrawals occur through smart contracts, with no discretionary control over user funds. Re7’s WETH vault documentation identifies an owner multisig and timelock, but this is vault administration rather than proof of a corporate treasury; the address and current signer set were not fully disclosed in the reviewed source. Re7 also reported a Morpho delegate address (0x187620a61f4f00Cb629b38e1b38BEe8Ea60d2B8D), and an Euler risk-manager Safe address (0x184d597Be309e11650ca6c935B483DcC05551578, stated as 2-of-6), but neither is established as a reserve wallet.

Custody has partially evolved: Re7 Capital announced an April 8, 2026 partnership with Zodia Custody for institutional cold-wallet custody and on-chain representation of selected Re7 strategies. This does not establish the size, ownership, or composition of Re7 Labs reserves. Reported figures of $700M+ curated TVL are strategy/vault exposure claims, not treasury assets or liquid reserves.

On-chain balances across World Chain, Avalanche, Plasma, Ethereum, Starknet, Binance, Plume Mainnet, and Linea: Not verifiable as of September 5, 2026. Dune MCP was unavailable, so no Dune query or execution ID can be provided. Reserve control, reserve policy, liabilities, and attestations: Not verifiable as of September 5, 2026.

Evidence (5)

tokenomics

two sources

Conclusion — no native Re7 Labs token identified. Re7 Labs presents itself as a DeFi risk curator/advisor, not as a token-governed protocol. No official native ticker, governance token, token contract, emissions, unlock, allocation, or token-holder revenue mechanism was found. Not verifiable as of September 4, 2026 for on-chain supply, holder concentration, insider wallets, mint/blacklist/fee-switch permissions, or whether any announced unlocks occurred; Dune was unavailable for this review. Important distinction: mRe7YIELD is a Midas-issued ERC-20 strategy/security token providing exposure to a Re7-managed yield strategy—not a Re7 Labs governance token. Its Ethereum contract is 0x87c9053c819bb28e0d73d33059e1b3da80afb0cf.

Midas documentation describes it as a debt instrument whose underlying is a dynamically allocated stablecoin-yield strategy; it does not confer Re7 governance rights. mRe7YIELD market data (not Re7 tokenomics): Aggregator snapshots report approximately 7.6–7.62 million circulating/total tokens, about $8.18–$8.2 million market cap and FDV, and no stated maximum supply. These figures are third-party analytics, not on-chain-verified here.

Utility/rewards: mRe7YIELD represents exposure to strategy performance; yield may be reinvested. No Re7-native staking, buyback, burn, or revenue-share program was identified. Liquidity/listings: The available data are inconsistent: CoinGecko reports zero 24-hour volume, while DeFiLlama reports roughly $175,599 DEX volume for MRE7YIELD.

Reliable DEX liquidity depth, pool composition, and principal listings are Not verifiable as of September 4, 2026. Risk view: Treat Re7 exposure as vault/strategy and issuer/contract risk, not as exposure to a native governance-token economy. Re7’s reported TVL/revenue are protocol analytics, not token value accrual.

Evidence (5)

Stress scenarios

stress scenario - bitcoin price falls below $10000

two sources

Not verifiable as of 2026-09-04. I cannot confirm Re7 Labs’ live on-chain exposures, TVL, chain-by-chain deployments, or liquidations because Dune/on-chain verification is unavailable in this run. The only directly relevant public evidence I could find is that Re7 Research describes Re7 Capital as a DeFi yield and liquid alpha firm, and Re7 has publicly discussed BTC yield strategies, but those are not enough to quantify stress exposure.

For a BTC < $10,000 shock, the most plausible risk channels for a DeFi yield manager are: 1) collateral value collapse on any BTC- or BTC-correlated positions; 2) forced deleveraging and margin/liquidation cascades if the strategy uses borrowing, LP leverage, or structured yield; 3) valuation losses on wrapped BTC or BTC-denominated vault assets; and 4) secondary stress from wider crypto market drawdown and liquidity withdrawal. These are scenario mechanics, not verified Re7 holdings. What can be said with confidence is that $10,000 BTC would represent an extreme drawdown from recent quoted levels in the sources, on the order of roughly 80%+ depending on the starting price cited, and analysts explicitly frame such a move as requiring severe bearish catalysts or multi-market stress. Open points that remain not verifiable as of 2026-09-04: chain-specific TVL/exposure across World Chain, Avalanche, Plasma, Ethereum, Starknet, Binance, Plume Mainnet, and Linea; BTC denomination or hedging of any Re7-managed vaults; counterparty concentration; and whether any strategies would face undercollateralization or forced unwind under a $10k BTC regime.

Evidence (8)

stress scenario - largest collateral depegs 20%,

two sources

Re7 Labs’ publicly reported exposure to depegged collateral is not fully verifiable from the provided sources, so a precise 20% collateral-depeg loss estimate cannot be computed here. The latest available public reporting says Re7 Labs had more than $13 million affected by the xUSD depeg and had also previously referenced at least $27 million of exposure to depegged assets deUSD and USDX, while a later X post said current primary and secondary exposure was less than 2% of total vault TVL. Under a simple linear stress assumption, a 20% depeg would imply losses of roughly $2.6 million if applied to the $13 million xUSD exposure alone, or $5.4 million if applied to the $27 million referenced deUSD/USDX exposure, but these are only rough proxies because the sources do not provide a full chain-by-chain collateral map or exact LTVs.

The user’s requested chain split across World Chain, Avalanche, Plasma, Ethereum, Starknet, Binance, Plume Mainnet, and Linea is also not verifiable as of 2026-09-04 from the provided data. The most defensible conclusion is that a 20% collateral depeg would likely create material but protocol-specific losses, with magnitude bounded by the subset of vault TVL exposed to the depegged asset(s); the on-chain-verifiable exposure data needed to convert that into a precise dollar figure is unavailable in the current source set.

Evidence (4)

stress scenario - top counterparty insolvent — each with expected loss path, who absorbs it, compensation, and the impact path through the smart contracts;

two sources

For a top counterparty insolvency stress test, the main loss path for Re7 Labs appears to be asset-side impairment inside the curated vault/strategy stack, not a direct protocol-balance-sheet loss, because Re7 is described as a curator/strategy operator across lending vaults rather than a single on-chain lender of last resort. Re7’s public materials also indicate it allocates user deposits into external venues such as Morpho and other lending protocols, so the affected counterparty would usually be the underlying market or venue, with losses propagating first to the vault’s net asset value and then to depositor withdrawals/redemptions.

  • Expected loss path: insolvency of a major borrower/market/venue can create bad debt, liquidation shortfalls, or frozen redemptions in the underlying lending market; the vault’s NAV declines and depositors absorb the mark-to-market or realized loss first.
  • Who absorbs it: primarily vault depositors; Re7’s role is curation/technical support, so absent a specific contractual guarantee or insurance pool, there is no verified evidence that Re7 itself backstops principal across the listed chains.
  • Compensation: not verifiable as of 2026-09-04. I did not find reliable evidence of a documented Re7 indemnity fund, guarantee, or insurance mechanism that would make users whole after a top-counterparty default.
  • Impact path through smart contracts: user deposit contract → strategy/vault accounting → external lending market position(s) → undercollateralized loan/default or withdrawal freeze → vault share price/NAV impairment → user redemption proceeds fall. For the listed ecosystems (World Chain, Avalanche, Plasma, Ethereum, Starknet, Binance, Plume Mainnet, Linea), the chain itself is not the primary credit absorber; the loss is routed through whichever vault/market on that chain holds exposure. Without on-chain verification in this run, the chain-by-chain exposure split is Not verifiable as of 2026-09-04.
Evidence (5)

stress scenario - committed fraud by the DAO or owners

two sources

For Re7 Labs, a DAO/owner committed-fraud stress case is not verifiable as of 2026-09-04. The available sources show Re7 as a DeFi risk curator and vault manager, plus community criticism and reporting around protocol exposures and incident response, but they do not provide verified evidence that the DAO or owners committed fraud. What is verifiable is narrower: Re7 Labs has publicly discussed vault-risk actions such as integrating a trustless guardian model, setting market caps to zero, withdrawing from risky markets, and seeking legal advice after stablecoin and lending-market disruptions.

Media coverage also reports community backlash over Re7’s handling of the Stream/xUSD and Stable Labs situations, but criticism is not the same as proof of fraud. Because the prompt asks specifically about *committed fraud by the DAO or owners*, and no source in this set establishes ownership-level misconduct, the correct risk flag is unsubstantiated on the present record rather than confirmed fraud.

Evidence (7)

stress scenario - primary yield source negative 30d,

two sources

Re7 Labs’ primary yield source is not verifiable as a single fixed on-chain stream from the available web results, so a 30-day negative stress scenario cannot be quantified from primary data here. The most supportable reading is that Re7 operates multiple strategy products across lending, staking, liquidity provision, arbitrage, and ecosystem incentive capture, rather than one sole yield leg. In a negative 30d stress case, the economically relevant primary-yield pathways would likely compress together: lower lending rates, reduced incentive emissions, weaker staking basis, and potentially negative mark-to-market or bad-debt effects in curated vaults.

Re7’s own materials emphasize that returns are variable and may be materially lower or negative, which is consistent with this downside scenario. For the specific stress premise, the only directly relevant public signal in the results is Re7’s statement after the Stream Finance insolvency, where it said that exposure in mRe7YIELD and mRe7BTC was absent and that vault exposure was limited to select cases representing less than 2% of total vault TVL. That does not prove the primary yield source itself was negative; it only shows that certain disclosed exposures were reportedly small relative to total TVL.

Because on-chain verification is unavailable in this run, the exact 30d yield delta, the share of TVL tied to each chain, and whether the primary source turned negative are all Not verifiable as of 2026-09-04.

Evidence (5)

Governance & Legal

governance

two sources

Assessment — as of September 13, 2026. Re7 Labs appears company-controlled rather than a protocol-wide DAO. Frontend/web: Re7 Labs Inc. claims ownership and unilateral authority to modify, suspend, or discontinue the Services. Its Terms identify the entity as registered in Panama; governing law is England and Wales, with LCIA arbitration seated in London. The registry-style profile reports RE7 LABS INC., Mercantil Folio 155762287, RUC 155762287-2-2025, Sociedad Anónima; directors were not disclosed in the accessible record. Contracts/vaults: Re7’s historical Morpho disclosure states that the Re7WETH MetaMorpho vault used an owner multisig and a one-day timelock, with a planned expansion to three days.

A later disclosure describes an Aragon-based “trustless guardian”: vault-token holders could propose and vote on guardian vetoes of pending vault changes. This is a limited veto mechanism, not evidence that token holders control upgrades, curators, allocators, or all protocol parameters. Proposal process / DAO reality: The documented process is vault-specific: Re7/curator-controlled changes enter the MetaMorpho timelock; the Aragon DAO can vote to veto eligible pending changes. No evidence was found that a Re7 token-holder DAO controls the frontend, contracts, treasury, or cross-chain parameters.

Therefore the DAO is partly functional but materially limited—not protocol-wide governance. Multisig, signers, concentration, and funds: Dune was unavailable in this run. Voting concentration, top holders, current multisig threshold/signers, signer independence, treasury control, and cross-chain admin powers are Not verifiable as of September 13, 2026. The same applies to whether any admin can directly drain user funds or whether an emergency bypass exists.

Mellow documentation identifies Re7 vault/admin/curator addresses for Ethereum deployments, but does not establish signer composition or ultimate control. Contradiction / key finding: “Trustless” guardian language is narrower than full decentralization: the evidence supports depositor veto rights for specified pending changes, while company/curator control of broader operations remains unresolved.

Dao governance
No
Evidence (5)

legal & regulatory

two sources

Assessment date: September 4, 2026. Entity / jurisdiction. The Terms identify Re7 Labs Inc., described as a company registered in Panama. A third-party Panama registry extract reports RE7 LABS INC. as an active Sociedad Anónima (Mercantil Folio 155762287; RUC 155762287-2-2025), but an official registry certificate, beneficial ownership, directors, and registered office were not independently verified. Not verifiable as of September 4, 2026. Re7 Labs is also presented as the innovation arm of London-registered Re7 Capital Ltd, while its LinkedIn profile lists headquarters in Camana Bay, creating a multi-jurisdiction/entity-perimeter risk. Terms / restrictions. Terms last updated January 7, 2026.

They characterize the service as non-custodial, non-discretionary technical tooling, disclaim investment advice, portfolio management, brokerage, execution, custody, fiduciary duties, and regulated financial services. Users must be 18+, comply with local law, and may not use the service for unregistered securities/derivatives, market manipulation, illicit proceeds, or sanctions violations. Comprehensive-sanctions jurisdictions and persons subject to OFAC/FATF restrictions are excluded.

Disputes are governed by England-and-Wales law, with LCIA arbitration seated in London; liability is generally capped at $100. KYC/AML and classification. The Terms prohibit AML/sanctions violations but contain no stated customer-identification, transaction-monitoring, AML program, licensing, or registration framework. Not verifiable as of September 4, 2026. The company expressly states it is not registered, licensed, or supervised by the SEC, FCA, CIMA, or comparable authorities; this is a self-description, not a legal determination. Actual vault curation, parameter configuration, and yield-product distribution could attract financial-services, investment-management, securities, or virtual-asset regulation depending on product, control, customer, and jurisdiction.

Warnings / enforcement / sanctions / courts. No public regulator enforcement, court case, or sanctions designation against Re7 Labs Inc. or Re7 Capital Ltd was identified in the reviewed sources. This does not establish absence globally. Not verifiable as of September 4, 2026. Data protection. Terms say services are hosted in the United States and users consent to transfer and processing there; the accessible Privacy page exposes no substantive policy text. GDPR/CCPA roles, retention, subprocessors, rights, and breach procedures are not verifiable as of September 4, 2026. Legal-structure vs actual-risk finding: Panama incorporation plus English-law terms, London arbitration, U.S. hosting, and apparent UK/Cayman group links create entity, enforcement, consumer-redress, and regulatory-perimeter uncertainty.

The non-custodial disclaimer reduces custody risk but does not eliminate potential conduct-based regulatory exposure.

Active enforcement
No
Sanctioned
No
Entity
Re7 Labs Inc.
Jurisdiction
Panama
Evidence (4)

legal registries

two sources

No exact GLEIF LEI record for 'Re7 Labs Inc'. OFAC SDN screening of 'Re7 Labs Inc': no match. SEC litigation and administrative release feeds: no mention.

Screened names
  • Re7 Labs Inc
Sanctioned
No
Evidence (4)

Stability

stability

two sources

Re7 Labs does not appear to issue its own stablecoin; the available evidence describes it as a DeFi risk-curation / vault-management firm that supports third-party stablecoins such as USD1, USDX, sUSDX, and xUSD rather than minting one itself. A stablecoin depeg affecting assets used by Re7 Labs did occur: sources report a 2025 xUSD de-peg incident and a separate 2025 USDX/sUSDX de-peg event. However, the exact depeg count, last depeg date, and maximum depeg percentage are not verifiable as of 2026-09-06 from the available sources alone.

Own stablecoin
No
Stable
No
Evidence (4)

Risks & Strengths

risks

two sources

Re7 Labs is exposed primarily to curator-selection risk: it allocates capital across third-party lending vaults whose collateral, liquidity, oracle, and liquidation behavior can fail together. The November 2025 USDX/Stream-related events demonstrate realized loss and governance-response risk, while DefiLlama’s current page conflicts with the supplied scope by showing 16 chains and $798.34 million TVL; exact on-chain exposure by the eight listed chains is Not verifiable as of September 5, 2026. Dune verification was unavailable for this assessment.

RiskImpactSeverityProbabilityMitigation in placeResidual risk
Curator allocation errorRe7 selects collateral, markets, caps, and parameters. A poor decision can create bad debt across depositor vaults without depositor control or guaranteed recovery.HighHighRisk tooling, vault limits, and curator controls are described by Re7; Morpho vaults may use guardian vetoes. Coverage and effectiveness are Not verifiable as of September 5, 2026.High discretionary-manager and accountability risk remains.
Collateral depeg and liquidity failureUSDX/related collateral exposure caused forced liquidation risk and potential losses when collateral quality and liquidity deteriorated rapidly.HighMediumUnderlying venues can trigger emergency liquidation or governance intervention; Lista documented such action. Real-time collateral limits and exit liquidity are Not verifiable as of September 5, 2026.High tail-loss risk for thin or reflexive collateral.
Underlying protocol smart-contract failureVault users inherit bugs, oracle manipulation, liquidation defects, and insolvency risk from Morpho, Euler, Lista, and other integrated protocols.HighMediumUnderlying protocols use audits, permissioning, caps, and emergency controls where implemented. A complete, current audit inventory for every Re7 deployment is Not verifiable as of September 5, 2026.Material multi-layer code risk remains.
Cross-chain operational fragmentationDeployments across many chains increase monitoring, bridge, oracle, liquidity, finality, and incident-response complexity; a shared collateral shock can propagate across venues.HighMediumPer-vault and per-market isolation may limit contagion. Exact chain-level balances, bridge dependencies, and exposure percentages are Not verifiable as of September 5, 2026.High aggregation and synchronization risk.
Governance and administrator concentrationCurator, allocator, guardian, and emergency permissions can materially change risk parameters or delay exits; concentrated control creates key-person and governance failure modes.HighMediumMorpho guardian veto permissions and timelock-style controls are documented for some vaults. Re7-wide signer sets, thresholds, timelocks, and upgrade powers are Not verifiable as of September 5, 2026.Medium-to-high control and transparency risk.
Evidence (5)

strengths

two sources

Re7 Labs’ top strengths are: institutional-grade risk curation, with a proprietary Re7 Risk Index / DeFi Ratings framework used to evaluate smart-contract, oracle, liquidity, governance, and systemic risks; multi-chain, multi-protocol coverage, with curated vaults and strategies deployed across many ecosystems and lending/restaking venues; strong oracle and infrastructure design, including use of Pyth and MEV-protected oracle layers in some vaults; experienced execution and track record, described by third parties as a multi-cycle team with years of DeFi experience and a large deployed AUM / TVL footprint; and product breadth, spanning lending vaults, restaking, liquid-yield strategies, and automated yield aggregation for institutional and advanced users.

Evidence (7)

Methodology & Limitations

  • On-chain metrics: not verifiable — Dune phase 2 is not enabled.
  • 0 of 25 fact categories not yet collected.
  • Fact verifiability: 28 two independent sources, 1 unverified.
  • Oldest fact verification date: 2026-08-30.