Security and risks

Drip cannottouch your deposit

Only interest is ever spent, and Drip is designed so it cannot move your deposit. Your deposit stays yours. Here is what protects it, what you still have to trust, and every risk in plain words.

01Protections

How your depositis protected

Five protections, built into the vault contracts.

  1. S1

    You can exit any time

    Withdrawals are limited only by available cash in the lending market.

  2. S2

    Drip cannot move deposits

    The vault contracts have no function that lets Drip withdraw user funds. Only harvested interest can leave.

  3. S3

    Changes come with warning

    A switch of lending market, a fee change or a change of admin roles is announced on-chain at least 48 hours ahead, so anyone can leave first.

  4. S4

    Pause never locks you in

    An emergency pause can stop new deposits but cannot block withdrawals.

  5. S5

    A deposit cap

    The USDG vault holds at most 250,000 USDG for now. The cap will rise gradually.

Enforced in the contracts

Hard limits in the vault and timelock code. No admin key can change them.

  • C1

    The timelock delay can never drop below 48 hours

    Lending market changes need the admin role, held only by the timelock, whose minimum delay is fixed in code.

  • C2

    Withdrawals are never paused

    The guardian can pause new deposits. The withdraw and redeem functions have no pause check.

  • C3

    Deposits close if the vault is impaired

    If the lending market loses money and the vault's assets no longer cover every deposit, new deposits are refused until it recovers.

  • C4

    The fee is capped at 20%

    The performance fee is 10% and can never exceed 20% (MAX_FEE_BPS = 2,000). Fee changes go through the timelock.

02Trust

What you stillhave to trust

No system is trustless. These are the parts you rely on, and what happens if each one fails.

What you still have to trust, and what happens if it fails
You trustForIf it fails
Drip's vault contractsHolding your deposit safelyFunds could be lost to a bug
Morpho and Steakhouse, the vault's curatorLending safely, choosing markets and pricing collateralBad debt could reduce vault assets
Drip's keeperCollecting interest on scheduleCredits arrive late; deposits are unaffected
Drip's credit ledgerKeeping your credit balanceUnspent credits could be lost if Drip stops operating
Drip's model gatewaySending requests and charging fairlyAI requests fail until it is restored

03Launch checklist

Launch checklist:what's still open

Drip is live on mainnet, but not every item is done yet. This is where each one stands today.

Done

2 / 5

Drip is live on mainnet. Open items stay marked Pending until they are done.

  • 01At least two independent security audits, with reports publishedPending
  • 02Automated testing against the real Morpho contracts on Robinhood ChainDone
  • 03A public bug bountyPending
  • 04Admin keys and timelock settings published on the security pageDone
  • 05Multisig signer addresses publishedPending

04Contracts

Contract addressesand admin keys

Every address on this site comes from one version-controlled config and matches this list. Network: Robinhood Chain.

Contracts

Admin keys, multisig and timelock

05Audits and bug bounty

Audits andbug bounty

Audit reports are published on this page as each one is final.

Audit reports

Audit reports will be published here.

Pending

Bug bounty

Bug bounty details and scope will be published on this page.

Pending

06Risks

Every risk,in plain words

Deposits can lose value, and credits are never guaranteed. Read these before you deposit.

Also in the whitepaper and the risk disclosure.

  1. R01

    Smart contract

    A bug in Drip's vault or the lending protocol could cause loss of funds. Drip's contracts have not been audited yet. Audits lower this risk but cannot remove it.

  2. R02

    Stablecoin

    If USDG loses its dollar peg or its issuer fails, deposits could lose value.

  3. R03

    Lending protocol

    Bad debt in a Morpho market, price-feed failures or poor risk settings by the vault's curator could reduce vault assets.

  4. R04

    Liquidity

    If the Morpho markets the vault lends to are fully borrowed, withdrawals can be delayed until cash returns.

  5. R05

    Variable yield

    Rates move with borrower demand and can fall close to zero, so credits can slow down.

  6. R06

    Credits

    Credits are an off-chain balance. If Drip stops operating, unspent credits could be lost.

  7. R07

    Model prices

    If Anthropic raises the price of Claude, the same credits buy less.

  8. R08

    Single chain

    Drip runs only on Robinhood Chain. A network outage would pause deposits, withdrawals and harvests.

  9. R09

    Regulatory

    Rules for stablecoins, DeFi and tokens are unclear or restrictive in many countries and can change.

  10. R10

    Operational

    A keeper failure or a model provider outage can disrupt service.

  11. R11

    Agent spending (from Phase 2)

    Once agent keys and wallets arrive, a faulty or compromised agent can spend up to its limits before you notice. Keep limits tight and alerts on.

  12. R12

    DRIP token (from Phase 3)

    Once DRIP launches, its price can swing sharply. If it falls, you need more DRIP to stay above $100 and keep transfers enabled.

Next

Read it all, then decide.

The whitepaper covers the security model, fees and risks in full.

Read the security chapter Launch app