Risk Factors
The risk factors described on this page are general in nature and apply, to varying degrees, across all Galaxy vaults. They are not exhaustive. Vault-specific risk factors are described on each individual vault page. Depositors should read both this page and the relevant vault-specific disclosures before depositing.
Nothing on this page constitutes investment advice. Depositors are responsible for their own assessment of the risks described and should consult qualified professionals where appropriate.
Smart Contract Risk
All Galaxy vaults are deployed on and interact with smart contract infrastructure. Smart contracts are software programs that execute on a blockchain according to pre-defined logic. Despite undergoing formal security audits prior to deployment, smart contracts may contain undiscovered vulnerabilities that are not identified until they are exploited. A successful exploit of a smart contract in the vault's operational stack could result in partial or total loss of assets deposited in the vault.
Galaxy integrates Hypernative to provide real-time monitoring for anomalous on-chain activity that may indicate an impending exploit. However, real-time monitoring cannot guarantee that exploits are detected and mitigated before losses occur. The speed of on-chain exploits can exceed the practical response time available to any vault curator. Depositors should treat smart contract risk as a fundamental, uneliminated risk in any DeFi position, regardless of the quality of the monitoring infrastructure surrounding it.
The scope of smart contract risk in a given vault extends beyond the primary protocol. It encompasses the contracts governing each collateral asset, any bridges or wrapped token infrastructure relied upon, and any oracle mechanism that the protocol depends on for pricing. The more complex the collateral stack, the wider the smart contract attack surface. This is one of the reasons Galaxy applies differentiated collateral standards across its risk tiers.
Oracle Risk
DeFi lending protocols including Morpho V2 and Kamino rely on price oracles to determine the current value of collateral posted by borrowers. These oracles feed the price data that determines when a borrower's position is undercollateralized and must be liquidated. If an oracle reports an inaccurate price, the protocol may either fail to liquidate a position that has become undercollateralized (creating bad debt risk) or trigger a liquidation at an incorrect price (creating adverse outcomes for borrowers and, in some scenarios, for depositors).
Oracle risk is particularly relevant for collateral types with limited on-chain price discovery or where the oracle methodology relies on derived or computed values rather than direct market prices. Blue-chip assets typically benefit from deep, multi-source oracle infrastructure that is resistant to manipulation. Newer or more complex collateral types (including LRTs, Pendle PTs, and synthetic assets) may rely on more concentrated or less battle-tested oracle configurations. Galaxy assesses oracle infrastructure as part of its collateral review process and excludes markets where oracle risk, in its assessment, is not adequately compensated by the yield on offer.
No oracle configuration currently available in DeFi can be considered entirely manipulation-proof or failure-proof. Depositors should understand that oracle risk is an inherent feature of the DeFi infrastructure stack and cannot be fully mitigated through curation alone.
Liquidity Risk
Liquidity risk in the context of DeFi lending vaults has two distinct dimensions.
Withdrawal liquidity: the ability of a depositor to exit their position at a given point in time. In lending protocols such as Morpho V2 and Kamino, a depositor's ability to withdraw is a function of the current utilization rate of the markets to which the vault is allocated. If utilization is high, the available liquidity for withdrawal is correspondingly constrained. In periods of market stress, utilization can rise rapidly as borrowers seek to retain their positions while suppliers attempt to exit, creating conditions where withdrawal capacity is reduced precisely when it may be most needed.
Liquidation liquidity: the capacity of secondary markets to absorb collateral sold during a liquidation without creating significant slippage that results in bad debt. If collateral markets are illiquid at the time a liquidation is triggered, the liquidation may not recover sufficient proceeds to fully repay the outstanding loan, resulting in a bad debt that is socialized across the vault's depositors. Galaxy addresses this risk through its collateral review process, which includes secondary market liquidity analysis under stressed conditions as a primary input, and through utilization monitoring that can prompt allocation shifts away from markets showing signs of structural liquidity deterioration.
Depositors should not assume that their position in any Galaxy vault can be fully liquidated on demand under all market conditions. While the absence of lock-up mechanics means there is no contractual restriction on withdrawal, the practical ability to withdraw may be temporarily constrained by market utilization conditions.
Counterparty Risk
The borrowers in the markets to which a vault is allocated represent an indirect counterparty exposure. If borrowers fail to maintain adequate collateral and liquidations do not fully recover outstanding loan balances, bad debt is created within the market and may reduce the value of depositors' positions. Galaxy evaluates this risk through collateral selection and market parameters, but cannot eliminate it entirely. The health of borrowers' collateral positions is a function of market conditions that are outside Galaxy's control.
Additionally, where vaults are deployed through a B2B partnership arrangement, depositors may have counterparty exposure to the distributing partner with respect to representations made about the vault's characteristics, fee arrangements, and operational terms. Depositors in white-labeled vaults should review the disclosures provided by the distributing partner, as those disclosures govern the commercial relationship between the partner and the depositor. Galaxy's curatorial responsibility does not extend to the commercial representations made by distribution partners.
Last updated