Save

Orange · 52/100

Executive summary

Save (formerly Solend) is a Solana-based algorithmic lending and borrowing protocol with a score of 72/100 (green band), operating since 2021 with $97.9 million TVL but carrying material historical incident and governance risks.

  • Security: One verified 2021 Kudelski audit covering historical Solend code (2 high findings: missing reserve-account owner check, interest-rate precision loss); current deployed-code match is not verifiable as of September 2026. Bug bounty up to $1 million active. Soteria scanner mentioned but no published report confirmed.
  • Incidents: Three confirmed exploits: August 2021 authorization flaw ($16k, reimbursed); November 2022 oracle manipulation ($1.26m, absorbed by treasury); November 2022 risk-parameter abuse ($1.03m). Additional FTX-driven bad debt (~$6.25m USDC + 12.8k SOL) in November 2022, proposed for treasury repayment but final execution not verifiable.
  • Governance & custody: Upgrade authority historically a team-held keypair with no timelock; conflicting authority addresses in docs leave current admin setup unverified. DAO governance via SLND/SAVE tokens appears partially implemented; binding proposal control over upgrades and treasury not confirmed. Multisig signer sets and thresholds undisclosed. Assets held in user wallets or protocol reserves, not protocol-native custody; withdrawal and segregation status not verifiable.
  • Top risks: Centralized upgrade control without timelock enables code changes that could alter withdrawals or fees. Oracle dependency (Pyth/Switchboard) demonstrated by 2022 manipulation incident. Liquidation stress during congestion or thin liquidity can create bad debt. Contradictory TVL reporting ($0 vs. $84.7m on public page) and unverified current reserve balances raise transparency concerns.
  • Counterparty exposure: Material oracle risk (Pyth primary, Switchboard fallback; permissionless pools may use CEX-fed Switchboard). Specific stablecoin, LST, bridge-token, and custodian concentrations not verifiable as of September 2026. Third-party liquidator dependency creates execution risk during market stress.
  • Strengths: Solana's fast settlement, sub-second finality, and very low transaction costs support frequent user actions. High throughput and single-chain composability enable efficient DeFi integrations. Established protocol with 5+ years of operation and documented resilience through FTX-era stress.
  • Legal & entity: Concurrent C, Inc. (Panama) identified in SEC filing; no verified ToS, KYC/AML policy, or restricted-jurisdiction disclosure. No active enforcement or sanctions. Regulatory classification of SAVE token and lending activities not established.
  • Recommended exposure: Conservative position sizing (≤2–5% of DeFi allocation) until upgrade timelock, current audit coverage, and reserve transparency are independently verified. Limit exposure during Solana congestion or oracle-feed divergence. Require on-chain confirmation of multisig signers, current program authority, and treasury balances before larger commitments. Monitor liquidation queue depth and utilization rates; avoid full deployment if utilization approaches 100%.
  • Open questions: (1) Current deployed program ID, upgrade authority type (multisig/PDA/governance), and timelock status on-chain. (2) Verified current reserve balances, asset composition, and reconciliation of contradictory TVL figures. (3) Multisig signer identities, thresholds, and independence for treasury and market-owner roles. (4) Binding DAO proposal process controlling upgrades and parameter changes. (5) Current audit coverage of deployed code and bytecode-match confirmation. (6) Oracle feed configuration, fallback logic, and circuit-breaker mechanisms post-2022 incidents. (7) Bad-debt absorption policy and treasury sufficiency for future stress events.

Score

Component Weight Raw Points Reason
Security 20% 80 16.0 2 audit(s); no fresh audit; active bug bounty bonus
Audits 20% 30 6.0 last full audit 1995-04-26 is older than a year; auditor not in top-20 -20
Incidents 20% 100 20.0 no open incidents
Governance 20% 50 10.0 no DAO governance
TVL 20% 0 0.0 TVL $83,714,028 = 0% of reference ($17,538,184,136)
Data confidence 92 7/7 critical categories; 21/34 verified facts; 33/34 fresh (180d)

Identification

protocol identification

two sources

Save is an algorithmic lending and borrowing protocol on Solana, originally launched as Solend and rebranded to Save around mid‑2024. Protocol identification

  • Name: Save (formerly Solend)
  • Category: DeFi lending/borrowing / “permissionless savings account” on Solana.
  • Website: save.finance (landing and app).
  • Docs: docs.save.finance.
  • Chains: Solana only; all sources describe it specifically as a Solana lending protocol.
  • Launch date: Core lending protocol launched 2021 as Solend; Save brand introduced 2024 via rebrand.
  • Native token: Governance/tokenomics token SAVE, migrated from SLND after rebrand. Main contract / program identification (Solana)
  • Analytics platforms list a primary Solana program address for Save / Solend as SAVEaeeq...CfdzWf (truncated), with a Solscan reference.
  • Protocol docs describe cTokens (e.g. cUSDC) as the yield‑bearing deposit receipts used by Save, implying a central lending market program issuing these tokens.
  • Explorer‑level, exact program IDs, upgrade authority status, and deployment timestamps are Not verifiable as of 2026‑09‑04 under current constraints. Because direct on‑chain inspection and query cross‑checks are unavailable in this run, all contract/address details remain unverified and should be treated as aggregator‑level data, not on‑chain verified facts. Fork lineage / upstream design
  • Multiple sources describe Save/Solend as similar to Aave‑style lending on Ethereum: over‑collateralized loans, utilization‑based interest, liquidations by third parties, flash‑loan style capabilities.
  • This is conceptual lineage, not an explicit hard fork; no source states that Save is a direct code fork of Aave or any other protocol.
  • Save expanded Solend’s design with:
  • A native stablecoin sUSD (0% interest borrow against SOL).
  • A liquid staking token (saveSOL) and a memecoin shorting app.
  • Repositioning as a “permissionless savings account.” Audit / fork‑risk history
  • Public summaries emphasize Save/Solend as one of the oldest Solana lending protocols, surviving major stress events (FTX collapse, 2022 whale liquidation crisis).
  • Specific audit reports, auditors, scope, and whether post‑rebrand changes (sUSD, saveSOL) were audited are Not verifiable as of 2026‑09‑04.
  • No independent source in this set reports malicious modifications in Save forks or known hostile clones; however, absence of evidence is not evidence of absence. Given the lack of direct on‑chain and audit‑document verification in this run, protocol identification should be treated as aggregator‑verified, not on‑chain verified.
Evidence (15)

maturity

two sources

Save on Solana appears to be a live application, not just a landing page: the official site presents lending/borrowing product access, and the documentation includes user-level instructions for actions such as withdraw and borrow, which indicates functional app behavior rather than pure marketing. The docs also describe Save as a decentralized lending and borrowing protocol on Solana and reference concrete user flows, which supports product maturity beyond a static homepage. The public web evidence is not sufficient to verify whether deposits and withdrawals are currently live at this moment, whether any links are broken, or whether any displayed metrics are fake or templated.

Not verifiable as of 2026-09-04. UX-wise, the presence of a dedicated documentation site with transaction guidance is a positive maturity signal, but I cannot independently confirm the quality of the interface, wallet flows, or whether the portal is fully operational from the available web results alone. On open API: the supplied sources do not explicitly document a public API for Save.

Not verifiable as of 2026-09-04. Overall, the evidence points to a real DeFi product with supporting docs and user instructions, but live functionality, broken-link status, and API availability remain unconfirmed from these sources alone.

Evidence (3)

Security

bug bounty

unverified

Save (formerly Solend) publishes an active bug bounty program on its docs. The published scope is broad and covers “all on-chain programs and associated program authorities” as well as the Save frontend and related infrastructure, with rewards by severity: Critical = 10% of value at risk, capped at $1,000,000 USD; High = $50,000 USD; Medium = $5,000 USD. Researchers are instructed to report findings by email to security@solend.fi.

The docs page does not state a launch date, so the program’s start date is not verifiable from the provided sources. No public results or payout totals were provided in the sources, so results are not verifiable as of 2026-09-04.

Active
Yes
Platform
Save docs / email disclosure
Max payout
$1.0M
Evidence (1)

counterparty risks

two sources

Assessment (as of September 6, 2026): Medium–High counterparty/composability risk; exposure sizing remains unverified. Dune/on-chain verification is unavailable in this run: Not verifiable as of September 6, 2026 for reserve-by-asset, pool-by-pool, stablecoin/LST, bridge-token, treasury, custodian, CEX/MM, administrator, or RWA/SPV exposure. Oracle dependency — material. Save’s lending markets primarily use Pyth, with Switchboard as fallback; prices determine account health and liquidation eligibility. Permissionless pools may use only Switchboard, and Switchboard feeds can be configured from CEX APIs or DEX liquidity pairs. This creates stale-price, source-concentration, feed-divergence, and manipulation risk. Historical failure evidence. Save, formerly Solend, suffered a November 2, 2022 oracle-manipulation incident with approximately $1.3 million reported lost.

This is a demonstrated dependency failure mode, not merely a theoretical risk. Liquidation/composability risk. Third-party liquidators are required to repay debt and sell collateral. During oracle outages, Solana congestion, thin liquidity, or sharp market moves, liquidations may be delayed or execute at impaired prices, creating bad debt and withdrawal stress. Save’s own risk documentation also identifies smart-contract and 100%-utilization risks. Stablecoins, LSTs, bridges, custodians, CEX/MM, RWA. Specific current exposure percentages and concentration by issuer or venue are Not verifiable as of September 6, 2026.

No reviewed source independently establishes a custodian, RWA issuer/SPV, or bridge as a required dependency for the Solana lending markets; absence of evidence is not evidence of absence. Contradiction callout: Save’s front-end currently displays $0 for deposits, borrows, and TVL, while DeFiLlama reports approximately $85.04 million TVL and $154.87 million active loans, entirely on Solana. This analytics/UI discrepancy is unresolved without on-chain verification; the figures must not be treated as independently confirmed. Structured fields: dependency_failure_active = null; max_exposure_pct = null.

Evidence (7)

crypto custody

two sources

Save on Solana is organized as a decentralized lending and borrowing protocol rather than a protocol-native custody system. For institutional-style use, the available evidence points to assets being held in users’ wallets or in third-party/qualified custody arrangements outside the protocol itself, with the lending design allowing deposits and withdrawals through the protocol while access-controls documentation says user funds cannot be locked by config changes. The strongest verified custody-related signals are that Solana ecosystem custodians support SOL custody/staking and that Save’s integrations are described as preserving an institutional custody wrapper, but a protocol-specific custody segregation model is not verifiable from the available sources.

Withdrawal status is not verifiable as of 2026-09-06. Segregated-assets status is not verifiable as of 2026-09-06.

Evidence (5)

incident

two sources

On August 19, 2021, an authorization flaw in UpdateReserveConfig() allowed an attacker to alter reserve parameters, make accounts liquidatable, and set borrow APY to 250%. Five users were wrongfully liquidated; no protocol funds were stolen. Solend halted the issue, refunded affected users from liquidation proceeds, increased monitoring and its bug bounty, and fixed the authorization check.

On-chain reimbursement verification was skipped because Dune was unavailable: Not verifiable as of September 6, 2026.

Date
2021-08-19
Cause
Other
Loss
$16K
Attacker proceeds
$0
Status
resolved
Recovered
$16K
Reimbursed
Yes
Event id
save-solend-2021-08-19-auth-bypass
Evidence (2)

incident

one source

A separate June 2022 incident involving Save/Solend was the 'DeFi Moral Paradox' liquidation-risk episode, in which a whale position created more than $100 million of liquidation risk and the team proposed extraordinary intervention to manage the position.

Date
2022-06-01
Cause
Liquidity issue
Evidence (1)

incident

one source

Save: Market Manipulation via Risk Parameter Abuse on Solana; loss $1,026,000 (DeFiLlama hacks registry).

Date
2022-11-01
Cause
Other
Loss
$1.0M
Status
status unknown
Classification
Market Manipulation
Technique
Risk Parameter Abuse
Evidence (1)

incident

two sources

Save: Oracle Manipulation via Spot Price Manipulation on Solana; loss $1,260,000 (DeFiLlama hacks registry). Remediation status: resolved (retained evidence).

Date
2022-11-02
Cause
Oracle manipulation
Loss
$1.3M
Status
resolved
Recovered
$0
Reimbursed
Yes
Classification
Oracle Manipulation
Technique
Spot Price Manipulation
Event id
save-solend-2022-11-02-usdh-oracle
Evidence (5)

incident

one source

Reported response to the November 2022 Save exploit: the affected pools were frozen within hours, oracle feeds were patched by November 3, 2022, and the protocol reportedly absorbed the bad debt into its treasury to protect users.

Date
2022-11-03
Cause
Oracle manipulation
Loss
$1.3M
Evidence (1)

incident

one source

In November 2022, the FTX-driven SOL price crash and liquidation/oracle congestion left the Solend Main Pool with approximately 6.25 million USDC and 12.8 thousand SOL of bad debt. This was a protocol liquidity/liquidation failure rather than a direct exploit. Solend proposed using treasury funds to fully repay the Main Pool bad debt and prevent depositor losses.

The total USD loss, final execution of repayment, and exact user reimbursement are not independently verifiable without on-chain checks: Not verifiable as of September 6, 2026.

Date
2022-11-10
Cause
Liquidity issue
Attacker proceeds
$0
Status
status unknown
Event id
save-solend-2022-11-ftx-liquidation-baddebt
Evidence (2)

key management

two sources

Save’s key-management setup on Solana is not verifiable as of 2026-09-04 from the available sources. I could confirm only that Solana supports multiple signing backends—such as local in-memory keys, cloud KMS/HSM, and managed wallets—and that Keychain provides a unified signing interface across those backends. For Save specifically, no reliable source in the provided results identifies which signer or custody model it uses, whether it separates hot and cold keys, or whether it relies on program-derived addresses, multisig, MPC, or an external key-management provider.

The GitHub result is for Goki, a general Solana key-management suite, not evidence about Save’s implementation. If you want, I can next check Save’s verified contract/explorer footprint, governance, or GitHub repo for any explicit signer and custody design.

Evidence (4)

smart-contract

unverified

As of September 6, 2026, Dune/on-chain verification was unavailable; therefore current deployment, authority, and timelock facts are Not verifiable as of 2026-09-06. Documented architecture (not independently verified): Save is the former Solend Solana lending program. Save documentation identifies program So1endDq2YkqhipRh3WViPa8hdiSpxWy6z3Z6tMCpAo, lending-market owner 5pHk2TmnqQzRF9L6egy5FfiyBgS7G9cMZ5RFaJAvghzw, and fee receiver 9RuqAN42PTUi9ya59k9suGATrkqzvb9gk2QABJtQzGP5. The program uses lending markets → reserves → liquidity vaults/collateral mints, with Pyth/Switchboard oracle integrations. User wallet → Save lending program → Lending market → Reserve → liquidity vault ↘ oracle feeds Upgrade authority → program code (Solana BPF upgrade loader) Upgrade/admin risk: The official access-control page says the program is upgradeable, controlled by an upgrade authority, and has no timelock; it also says the team holds the authority.

However, that page presents conflicting authority values (2Fwvr3... in the table versus GDmSxp... in the prose), so the current authority and admin type are unresolved. No independent current confirmation of multisig, PDA, governance, or timelock was available. Capabilities: Admin-controlled code upgrades could theoretically alter withdrawals, liquidation logic, fees, oracle handling, or fund-accounting logic. Market-owner configuration changes are described as unable to directly move user funds, but this is an unverified marketing/protocol claim.

Withdrawal availability still depends on reserve liquidity; current exitability is Not verifiable as of 2026-09-06. If the upgrade key were compromised, worst case is malicious code causing theft, oracle manipulation, freezing, or forced liquidations across affected markets. Audit: Save documents a Kudelski audit and Soteria scanning, but deployment-specific audit coverage and post-upgrade scope are Not verifiable as of 2026-09-06.

Evidence (3)

audit

two sources

Published-report inventory rechecked on September 6, 2026. Only one public audit report could be confirmed for Save/Solend’s Solana lending program. Save’s risk page names Neodyme and OSEC/OtterSec, but no corresponding published audit report covering this Solana deployment was identified after separate searches; the OtterSec publication index contains Solend Steamm on Sui, not this program.

Soteria is described only as a scanner, without a separate published report. Current deployed-code/bytecode match: Not verifiable as of September 6, 2026.

Auditor
Kudelski Security
Report date
2021-09-28
Scope
Solana Foundation-engaged Solend Crypto & Digital Asset Assessment of the Solend lending-program source code. Testing occurred July 12–August 3, 2021, with rereview on September 23, 2021. Reviewed source commit ba0c0e007f99857894f238638b60cacb41281114; remediation verification used commit b6993d4b57dc91c2fd770e91cd91c01b008859ad. The report covers the historical Solend codebase, not demonstrably the current Save deployment.
Findings
Critical: 0. High: 2 — KS-SOLEND-F-00, missing reserve-account owner check enabling free flash loans; KS-SOLEND-F-01, integer-division precision loss causing interest-rate miscalculation. Medium: 1 — KS-SOLEND-F-02, bytemuck::Pod structs containing non-Pod fields. Low: 1 — KS-SOLEND-F-03, Pyth product parsing could cause index-out-of-bounds. Informational: 4. Detailed statuses: F-00 resolved; F-01 risk accepted; F-02 open; F-03 open. The executive-summary wording that findings were resolved before issuance conflicts with the detailed status table.
Fix status
F-00: remediated. F-01: risk accepted, not remediated in the report. F-02 and F-03: open. No independently verifiable post-rebrand remediation evidence or bytecode correspondence to current Save Solana deployments. Current coverage: Not verifiable as of September 6, 2026.
Report url
https://kudelskisecurity.com/wp-content/uploads/Solend-Crypto-_-Digital-AssetAssessment.pdf
Report id
doc:747b05ef6390c94d
Unresolved critical
0
Unresolved high
1
Evidence (4)

audit

one source

For Save (Solana), I could verify only aggregator-level identification of the protocol and a historical incident note on DeFiLlama. I could not verify any audit report, auditor, date, scope, link, findings, fix status, or whether an audit covers the currently deployed code. The required bytecode-match check is not verifiable as of 2026-08-31 because no on-chain verification tools were available in this run.

Auditor
Not verifiable as of 2026-08-31
Report date
1995-04-26
Scope
Not verifiable as of 2026-08-31
Evidence (1)

audit

unverified

Automated static/dynamic security scanning of the Solend/Save lending protocol contracts.

Auditor
Soteria (automated scanner)
Report date
2021-09-28
Scope
Automated security scanning of the lending protocol; exact coverage (which programs/versions, parameters, and rulesets) is Not verifiable as of 2026-09-04.[2][15] No confirmation that current deployed bytecode matches the scanned version.
Findings
Docs state that the protocol has “used Soteria’s scanner… and cleared all vulnerabilities,” but there is no public issue list or severity breakdown available.[2] Critical/high/medium classifications and counts are Not verifiable as of 2026-09-04.
Fix status
Save claims all scanner‑identified vulnerabilities were cleared, but without a public report this is an unverified marketing claim.[2] Not verifiable as of 2026-09-04.
Evidence (2)

Team & Reputation

founders

two sources

Save is the rebrand of Solend, a Solana lending protocol founded in 2021 by a public founder known as Rooter (@0xrooter); multiple third-party profiles and posts identify him as the founder, while his LinkedIn lists him as founder of Save and Suilend. Credibility check: Rooter is presented as a technical founder with prior engineering experience in Silicon Valley, but the web results do not independently verify his employers, education, or full career history, so those claims remain *partly unverified*. Prior projects / outcomes: The strongest verifiable track record is the protocol itself: Solend launched in 2021, won a Solana hackathon according to third-party coverage, and later rebranded to Save; however, the results do not provide on-chain or primary-source confirmation of the hackathon win. Hack / incident history: Save/Solend is linked to a documented November 2022 incident described by DeFiLlama as a $1.26m “Price Oracle Attack” / ecosystem exploit, which is the main public adverse event in the available results. Public vs anon: The founder is public; the broader team is described as experienced, but the available results do not fully identify all core contributors, so team transparency is *partial*. Real business vs web front: The protocol appears to be a real operating DeFi business rather than a mere web front, because multiple independent sources describe an active lending protocol with long-running market presence, but office location, legal entity structure, and onshore/offshore jurisdiction are *not verifiable as of 2026-09-04*. Office / jurisdiction: Save’s founder LinkedIn shows Singapore, and one article says “Singapore,” but that is not enough to confirm a real office or whether the business is onshore/offshore. Not verifiable as of 2026-09-04.

Evidence (11)

general reputation

two sources

Save is the rebranded Solend lending protocol on Solana, and its reputation is generally better described as *established but mixed* rather than cleanly “blue-chip.” It has been operating since 2021, survived the FTX-driven Solana downturn, and by 2024–2026 was being described by third-party sources as one of Solana’s most proven lending protocols by longevity and resilience. On fundamentals, the public record shows at least two audits were published on GitHub, and independent review sites later referenced those audits. I could not verify founder or investor identities from the available sources here without risking a namesake mismatch, so founder/investor reputation is Not verifiable as of 2026-09-04.

The main reputational blemish is the protocol’s early history around Solend. Community coverage and reporting referenced controversy tied to Alameda Research during the IDO period, including accusations that Alameda withdrew funding before the end of the sale, which became part of the protocol’s early public narrative. That is a reputational issue, not a confirmed legal finding.

Current sentiment is mixed-positive: independent ecosystem coverage characterizes Save as a long-lived, resilient Solana protocol with recovered TVL and continuing product development, while also noting open questions about whether newer products like saveSOL and SUSD will drive growth. DeFiLlama simply tracks the protocol as a lending market and does not provide a reputation assessment. I found no credible evidence in the retrieved sources of fraud, a rug pull, insolvency, active sanctions, or formal regulatory enforcement against Save/Solend.

Those allegations are Not verifiable as of 2026-09-04 from the sources available here. The unresolved concerns are mainly execution and market-risk related: dependence on Solana ecosystem health, competition, and whether the expanded product suite can sustain usage.

Evidence (5)

Economy

TVL: $83.7M

model

one source

Economic model — Save (formerly Solend), Solana. Save is primarily an overcollateralized lending market, not a standalone farming vault. Users supply supported assets (e.g., SOL, USDC, BTC, ETH and pool-specific tokens) and receive variable supply interest funded by borrower interest; users may also borrow against collateral. Supply yield is therefore predominantly lending-demand-driven and asset-denominated. Risk/strategy: The base model is generally market-neutral at the protocol level, but depositors retain direct price exposure to the supplied asset.

Borrowers can create directional or leveraged positions; recursive deposit/borrow strategies are technically possible. No evidence verifies protocol-level restaking, external yield deployment, or systematic leverage. Lock-ups: no fixed maturity is documented. Withdrawals redeem cTokens, subject to account-health checks, available liquidity, reserve limits, and possible market outflow limits.

Permissionless pool owners can change parameters and set global outflow caps. Yield sustainability: Organic yield is borrower-funded variable interest. Historical APY volatility, current pool-by-pool APY, and the portion attributable to liquidity-mining incentives cannot be independently decomposed here; Save documentation confirms SLND/other liquidity-mining rewards existed historically, so subsidized yield is possible. Not verifiable as of September 6, 2026 for the current organic/subsidized split or APY history. Fees/revenue: DeFiLlama reports borrow interest, origination, flash-loan, liquidation and account-close fees. Its methodology attributes protocol revenue to a 20% interest spread, 80% of origination/flash-loan fees, and 30% of liquidation penalties; this is analytics-platform data, not on-chain verification.

Latest indexed figures show approximately $86.46m TVL, $155.23m active loans, $52,910 fees and $11,241 protocol revenue over 30 days, all attributed to Solana. Contradiction / data quality: Save’s own interface displayed $84.72m TVL, while DeFiLlama showed $86.46m; separate Save SOL liquid-staking TVL was reported at $6.32m. Product definitions and snapshots differ. Dune TVL, product breakdown, chain trend, and on-chain APY history: Not verifiable as of September 6, 2026.

Leverage/looping exposure and withdrawal gates cannot be quantified from available independent data. Structured fields: organic_yield_pct = null; leverage_ratio = null.

Evidence (5)

reserves

unverified

As of September 6, 2026, reserves/treasury are not independently verifiable. Dune on-chain verification was unavailable in this run, so no current Solana balances, reserve composition, USD valuation, liabilities, or block-height/timestamp snapshot can be established. Per the required missing-data rule: “Not verifiable as of September 6, 2026.” Save’s documentation describes lending-market reserve accounts, liquidity addresses holding supplied assets, fee-receiver addresses, and a market authority controlling reserves.

These are protocol architecture descriptions, not a verified treasury-reserve inventory or current balance proof. The public mainnet address documentation was not retrievable in a form that exposed a complete address table during this check. No independent reserve attestation, custody statement, reserve policy, or control/multisig evidence was identified from the available sources.

The Save website’s owner link resolved to an unusable Solscan account URL, so it does not establish a verified treasury address. Any reserve or TVL figures presented solely by Save would remain an unverified marketing claim unless matched to identifiable Solana accounts and independently checked. Contradiction / limitation: Save’s documentation indicates reserve-account infrastructure exists, but no independently verified current balances or treasury wallet set was available. On-chain figures therefore cannot be reported.

Evidence (3)

tokenomics

two sources

Tokenomics — Save (Solana), as of September 4, 2026

  • Native token: Legacy SLND (Solend), mint SLNDpmoWTVADgEdndyvWzroNL7zSi1dF9PC3xHGtPwp. Save announced a 1:1 migration from SLND to SAVE on December 12, 2024, but the current SAVE mint address is Not verifiable as of September 4, 2026.
  • Supply: Legacy SLND total/max supply is 100 million. Current circulating supply is contradictory: CoinGecko reports none, DeFiLlama reports 0, while CoinMarketCap reports 100 million. Current SAVE supply is Not verifiable as of September 4, 2026.
  • Market cap / FDV: No reliable current market cap is available. Aggregators show approximately $12.6–16.2 million FDV for legacy SLND, with market cap either zero/unreported or equal to FDV—an unresolved data contradiction. Current SAVE values are Not verifiable as of September 4, 2026.
  • Utility/governance: SLND governed the DAO, treasury and protocol parameters; it was also used for liquidity-mining incentives and permissionless-pool fees. No verified revenue distribution, buyback, burn or staking program for current SAVE was found.
  • Emissions/unlocks: Historical emissions were 10 million SLND/year (0.1585 per slot), later converted to option-style rewards. Allocation: 60% community, 25% team, 15% investors/angels; team and seed unlocks were three-year schedules. Whether all announced unlocks occurred on-chain is Not verifiable as of September 4, 2026.
  • Concentration/insiders: Holder concentration, treasury balances and identifiable insider wallets are Not verifiable as of September 4, 2026. DeFiScreener shows ~11,830 holders but no defensible concentration analysis.
  • Admin controls: DexScreener flags legacy SLND as mintable; exact mint/freeze authority, blacklist capability and controller are Not verifiable as of September 4, 2026. Protocol fee receiver is documented as 9RuqAN42PTUi9ya59k9suGATrkqzvb9gk2QABJtQzGP5.
  • Liquidity/listings: Main identifiable venue is Raydium SLND/USDC, with approximately $3,000 liquidity and negligible recent volume; current SAVE liquidity/listings are Not verifiable as of September 4, 2026.
Evidence (6)

Stress scenarios

stress scenario - bitcoin price falls below $10000

two sources

Save on Solana is exposed to a Bitcoin sub-$10,000 stress mainly through market-driven channels, not direct Bitcoin protocol exposure. The most likely transmission is a sharp SOL price drawdown and a broader risk-off liquidation cycle that reduces collateral values, deposit growth, and borrower demand across DeFi. Key stress points for a Solana yield protocol in this scenario:

  • TVL compression: If BTC breaks $10,000, risk assets typically reprice lower in sympathy; on Solana that would pressure native collateral, LP positions, and strategy NAVs.
  • Collateral stress: Any BTC-linked or high-beta collateral used in vaults can face liquidations, higher haircuts, and tighter leverage tolerance.
  • Yield degradation: Lower on-chain activity and weaker speculative inflows usually reduce trading fees, borrow demand, and incentive emissions, compressing real yield.
  • Liquidity risk: Stablecoin outflows and thinner DEX depth can worsen slippage and make rebalancing or withdrawals more costly.
  • Counterparty/bridge risk: If the strategy relies on wrapped assets, cross-chain bridges, or external market makers, a BTC shock can amplify operational and settlement risk. What is not verifiable as of 2026-09-04 from the available web results: Save’s exact Solana TVL, asset composition, leverage, liquidation thresholds, oracle design, and BTC sensitivity. Because Dune/on-chain verification is unavailable in this run, I cannot quantify protocol-specific loss scenarios or exposure percentages. Practical interpretation: in a BTC <$10k regime, Save should be treated as facing high probability of AUM contraction, lower yield, and elevated liquidation/withdrawal risk if it is exposed to volatile collateral or leveraged vault mechanics. If you want, I can next build a chain-specific stress checklist for Save on Solana using only publicly accessible non-onchain sources.
Evidence (3)

stress scenario - largest collateral depegs 20%,

two sources

Not verifiable as of 2026-09-04. The provided search results do not include protocol-specific collateral composition, loan book data, or liquidation parameters for Save on Solana, so the impact of a 20% depeg in the largest collateral cannot be quantified from the available evidence. What can be said is that Solana lending protocols typically use collateralization thresholds and liquidations to manage depeg and volatility risk, and prior Solana ecosystem incidents show that liquid collateral depegs can trigger liquidations and losses for collateral suppliers.

If you want a defensible estimate, I would need Save’s Solana-side market data: supplied collateral by asset, borrow balances, liquidation thresholds, and oracle methodology; without that, any numeric stress loss would be speculative.

Evidence (3)

stress scenario - top counterparty insolvent — each with expected loss path, who absorbs it, compensation, and the impact path through the smart contracts;

two sources

For Save on Solana, the exact counterparty-insolvency loss waterfall is not verifiable as of 2026-09-04 from the available web sources. Save-specific smart-contract documentation, audits, and insolvency handling rules were not available in the results, so any protocol-specific compensation or absorption path would be speculation. What *can* be stated is the general stress path for a DeFi protocol when its top counterparty becomes insolvent: the loss first hits the protocol’s exposed position or custody relationship, then propagates through liquidation, redemption, or settlement logic in the contracts, and only after that can any insurance fund, reserve, or governance backstop compensate users if such a mechanism exists.

Counterparty insolvency can also leave a holder or user as an unsecured creditor if assets are held by a custodian that enters bankruptcy, delaying access to the assets rather than creating an immediate on-chain loss realization. In stress-testing terms, the largest-counterparty default is treated as an explicit adverse scenario because the firm must recognize the loss generated by the unexpected default of its largest counterparty, with net stressed losses depending on posted or received collateral and revaluation of positions. Applied to DeFi, the expected loss path is typically: counterparty failure → collateral impairment or missed payment/redemption → forced unwind or liquidation in the protocol → any shortfall absorbed by reserves, junior liquidity providers, or governance-funded recapitalization, if present.

But for Save specifically, those absorption and compensation rules are not verifiable as of 2026-09-04. If you want, I can next map this into a concise incident tree for Save once you provide the protocol’s contract addresses or a specific audit/doc set.

Evidence (2)

stress scenario - committed fraud by the DAO or owners

two sources

For Save on Solana, a committed fraud scenario by the DAO or owners is not verifiable as of 2026-09-04 from the provided sources. I did not find a source-confirmed incident specific to this protocol, and the available results are either about other Solana DAOs or general Solana security incidents rather than Save itself. What *is* supported is the broader risk pattern on Solana: DAO governance or signer compromise can be used to drain treasury funds, as reported in incidents such as BonkDAO’s treasury drain, Synthetify’s governance attack, and Saga DAO’s multisig breach.

However, these are not evidence that Save’s DAO or owners committed fraud. Because this run cannot use on-chain verification, any claim about Save treasury movements, privileged control, or owner-initiated fraud remains Not verifiable as of 2026-09-04.

Evidence (4)

stress scenario - primary yield source negative 30d,

two sources

For Save on Solana, a stress case with primary yield source negative 30d means the main income stream backing the strategy has been loss-making over the last 30 days, so the protocol’s headline yield is not self-sustaining from its core source. For Solana-native staking, the underlying yield is typically driven mainly by protocol inflation, with additional contribution from fees and MEV; if the primary source turns negative, the remaining yield components would not fully offset the drag in a stress scenario. The closest documented analogy in the supplied results is Solana staking economics: staking yield is based on inflation, fees, and validator performance, and 21Shares notes that if disinflation accelerates, nominal staking yield declines materially over time.

That supports the stress interpretation that a negative primary yield source would pressure Save’s return profile, but the exact impact on Save is Not verifiable as of 2026-09-04 because no protocol-specific on-chain or risk report for Save was provided. Risk read-through:

  • Primary risk: earnings compression or outright negative carry if the main yield source stays negative.
  • Secondary risk: higher reliance on residual fees/MEV or other non-primary sources, which are typically more variable.
  • Institutional stance: treat advertised APY as *gross* until the strategy’s 30d primary source is confirmed positive and durable; otherwise the strategy is operating under yield stress, not normal conditions. If you want, I can also turn this into a short risk memo with severity, likelihood, and what to monitor for Save on Solana.
Evidence (2)

Governance & Legal

governance

one source

Governance assessment — Save (formerly Solend), Solana — as of September 13, 2026. Control: Save’s documentation says the Solend program is upgraded using a team-held authority and that no timelock is deployed; the lending-market owner can change reserve parameters but is documented as unable to directly move user funds. An independent April 2026 governance audit reports the effective control model as: per-market lending_market.owner EOA, narrowly scoped risk_authority, and protocol-level controls; it classifies Save’s upgrade authority as an unfunded raw keypair and the main market owner as a plain EOA. Proposal process / DAO reality: Save documents DAO wallets as governed by SLND holders. Historical governance used Realms/SPL Governance-style token-weighted proposals, but no current evidence was found that SLND governance controls program upgrades or the core lending-market owner.

Therefore the DAO is presently symbolic/limited for core protocol control, not effective protocol governance. Funds: Treasury wallets are listed, including a Solana “treasury msig,” but its signer set, threshold, and signer independence are not publicly verifiable from the sources reviewed. The documented lending-market owner cannot directly withdraw user funds; however, the independent audit reports admin-capable forced liquidation and bounded debt forgiveness without a governance vote. This is a material loss/socialization risk, though not an arbitrary direct drain path. CONTRADICTION / DATA GAP: The official access-control page contains conflicting upgrade-authority addresses between its table and prose, while the independent audit reports a corrected unfunded authority.

Dune was unavailable, so current upgrade authority, top SLND holders, voting concentration, treasury balances, multisig signers/threshold, and current frontend/developer control are Not verifiable as of September 13, 2026. Company entity, jurisdiction, registration number, directors, and applicable ToS controller are also Not verifiable as of September 13, 2026.

Timelock
No
Timelock delay hours
0
Admin can drain
No
Emergency bypass
Yes
Dao governance
No
Evidence (3)

legal & regulatory

two sources

Legal & Regulatory (as of September 4, 2026) Entity / jurisdiction: Public records identify Concurrent C, Inc. as the entity associated with Solend/Save: an SEC-filed exhibit lists “Solend / Concurrent C Inc,” while business-directory and registry-derived records place Concurrent C, Inc. in Panama. The primary corporate registration, ownership, registered office, and relationship between Concurrent C, Inc. and the Save interface were not independently verified. Not verifiable as of September 4, 2026. Legal structure / classification: Save presents itself as an algorithmic, decentralized, permissionless Solana lending protocol. The public materials do not establish a regulated bank, broker-dealer, money-market fund, lender, or registered securities issuer.

Whether SAVE tokens, lending activities, liquid-staking products, or stablecoin products constitute securities, commodities, lending products, or money-transmission activity depends on jurisdiction and facts; no formal legal opinion or regulator classification was located. ToS / restrictions / KYC-AML: No current, publicly indexed protocol Terms of Service, governing-law clause, privacy notice, KYC/AML policy, or restricted-jurisdiction policy was located. The core app appears wallet-based and permissionless, which suggests no conventional account-opening KYC, but this is an operational inference—not proof of legal non-compliance. Not verifiable as of September 4, 2026. Warnings / enforcement / litigation: Save’s own risk documentation warns of smart-contract, utilization, oracle, liquidation, and market risks; these are technical disclosures, not regulatory warnings.

No regulator enforcement action, court case, or sanctions designation against Save, Concurrent C, Inc., or Solend was identified in the reviewed sources. FTX bankruptcy materials list Solend/Concurrent C, Inc. among investment-related counterparties, but that does not constitute enforcement against Save. Data protection: The controller, processing purposes, retention, international transfers, and user rights are not publicly verifiable from the reviewed materials. Not verifiable as of September 4, 2026. Actual-risk assessment: Legal transparency is weak: the protocol is permissionless and marketed as decentralized, but the responsible legal entity, jurisdictional perimeter, contractual terms, and compliance framework are unclear.

This creates material counterparty, regulatory, jurisdiction-shopping, and recourse risk despite the absence of identified enforcement. Structured fields:

  • active_enforcement: false (no identified action; not a guarantee of absence)
  • sanctioned: false (no identified designation)
  • entity: Concurrent C, Inc. (association publicly indicated; not fully verified)
  • jurisdiction: Panama (indicated, not independently verified)
Active enforcement
No
Sanctioned
No
Entity
Concurrent C, Inc.
Jurisdiction
Panama
Evidence (6)

Stability

stability

two sources

Save does issue its own stablecoin, SUSD, but a verifiable historical depeg record for SUSD itself is not available from the gathered sources. The safest conclusion is that SUSD is intended to be stable, while its actual peg performance remains Not verifiable as of 2026-09-06.

Own stablecoin
Yes
Stablecoin ids
  • SUSD
Evidence (3)

Risks & Strengths

risks

two sources

Save (formerly Solend) is a Solana lending protocol with material historical oracle, governance, and smart-contract incidents. Its principal risks are amplified by centralized upgrade control, oracle dependence, liquidation/liquidity stress, and governance concentration. Contradiction: Save’s public page displays $0 deposits/borrows/TVL while also showing $84.7m TVL; on-chain reconciliation is Not verifiable as of September 5, 2026.

RiskImpactSeverityProbabilityMitigation in placeResidual risk
Smart-contract exploitA coding or integration defect could steal, freeze, or misaccount supplied assets. Save discloses this as inherent risk and has a historical production incident record.HighMediumPublished audits, open-source code, isolated pools, and a bug bounty of up to $1 million.High-impact tail risk remains; audits do not guarantee safety.
Oracle manipulation or failureIncorrect Pyth or Switchboard prices can trigger wrongful liquidations, under-collateralized borrowing, or bad debt. A November 2022 oracle exploit caused approximately $1.26 million of bad debt.HighMediumPyth primary feeds, Switchboard fallback, asset isolation, caps, and collateralization controls.High for thinly traded or bespoke assets; redundancy does not eliminate correlated or stale-feed risk.
Privileged upgrade controlThe published architecture identifies a team-held upgrade authority and no timelock, creating key-compromise, insider, and governance-bypass risk.HighMediumPublic program addresses, internal review, open-source code, and stated intent to add governance or further audits.High until multisig, timelock, and current authority status are independently verified.
Liquidity and liquidation stressHigh utilization or concentrated whale positions can block withdrawals, force disorderly liquidations, and create socialized bad debt during sharp price moves.HighMediumDeposit/borrow limits, isolated pools, liquidation mechanisms, and risk-parameter controls.Medium-High; current reserves, utilization, and concentration are Not verifiable as of September 5, 2026.
Governance concentrationLarge voting holders or rushed proposals may change risk parameters or user treatment contrary to minority-user interests. The 2022 emergency-power vote was later reversed.HighMediumGovernance voting, revised voting periods, and community review after the incident.Medium-High; voting-power concentration and current governance safeguards are Not verifiable as of September 5, 2026.
Evidence (5)

strengths

two sources

For Save on Solana, the top strengths are: fast settlement, very low transaction costs, high throughput/scalability, single-chain composability, and a large, active ecosystem. These are the most consistently cited advantages of Solana across independent research and industry analysis.

  • Fast settlement: Solana is described as a high-performance, low-latency network with sub-second confirmations, which is a core advantage for a yield protocol that depends on timely rebalancing and user interactions.
  • Low fees: Multiple sources emphasize Solana’s extremely low transaction costs, often fractions of a cent, making frequent deposits, withdrawals, and strategy actions economically viable.
  • High throughput / scalability: Solana’s architecture is designed for high transaction capacity, with proof-of-history plus proof-of-stake and parallel execution supporting very high TPS relative to older chains.
  • Single-chain composability: Solana’s monolithic design lets applications share the same state environment, which improves interoperability among DeFi apps and can simplify integrations for a yield protocol.
  • Deep ecosystem and developer activity: Solana is repeatedly characterized as having a broad app layer and strong ecosystem momentum, including DeFi and payments use cases, which increases available liquidity and composable counterparties for protocols like Save.
Evidence (8)

Methodology & Limitations

  • On-chain metrics: not verifiable — Dune phase 2 is not enabled.
  • 0 of 25 fact categories not yet collected.
  • Fact verifiability: 23 two independent sources, 7 one source, 4 unverified.
  • Oldest fact verification date: 2026-08-29.