Vault Sheet: standard risk reports for onchain lending vaults

The Vault Sheet itself is already well covered. Credora by RedStone and Webacy sell per-vault risk scores. vaults.fyi already supplies vault data to the wallets and exchanges you would target. Hare and Hypernative model exit liquidity. CuratorWatch and an open-source Morpho V2 watcher track curator parameter changes, concentration and withdrawable liquidity. Two parts of the idea look less served. The first is checking that deployed bytecode matches the specific audited commit: Webacy does static analysis and verification, but I found nobody publishing a bytecode-to-audit match as a standard field. The second, and the more defensible one, is the Partner Bank Pack. I found no product that turns vault exposure into the monthly format a sponsor bank, auditor or regulator expects, and I found no published sponsor-bank reporting standard for fintech DeFi yield exposure, so the format itself is still open. A new entrant's best chance is to be the compliance and reporting layer, not another risk score. That would mean licensing or ingesting data from Credora, Webacy or vaults.fyi and selling evidence-grade monthly attestations, change logs and exposure summaries to compliance leads at fintechs and to their sponsor banks. The risk is that Credora or vaults.fyi adds a reporting export, and the market is limited to the small number of regulated fintechs that actually route user funds into Morpho, Euler or Spark vaults.

• Credora by RedStone

  Dynamic, mostly automated risk ratings for Morpho vaults and Spark markets, with a published Morpho vault methodology covering market exposures, curator effectiveness and governance. It is backed by an oracle company that already has distribution in vault UIs. The closest thing to a standard vault rating.

• Webacy Vault Risk

  API that scores ERC-4626 vaults on structure, governance, liquidity, code and audits (including static analysis and contract verification), deployer history, asset risk and protocol risk. Overlaps heavily with the per-vault sheet and is sold as an API to integrators.

• vaults.fyi (Wallfacer Labs)

  Yield and vault data API covering more than 1,000 vaults across 20+ chains, used by Kraken, Jumper and others. It shows the curator and yield source behind each APY. It is already embedded in the wallets and fintechs this idea would target.

• Hare (GSR and Turtle)

  Credit underwriting platform that stress-tests curated vaults for how much can be withdrawn immediately, at T+7 and over longer periods. This directly overlaps with the exit-liquidity part of the sheet.

• Hypernative

  Real-time monitoring for institutional asset managers covering oracle deviations, health factors and exit liquidity, with automated exit playbooks. Serves the same buyers from the alerting side.

• CuratorWatch

  Hourly curator intelligence, daily alerts and a changelog of curator actions across Morpho, Aave, Euler and others. Covers the curator-parameter-change part of the sheet.

• DefiCare

  Telegram alerts on liquidity drops and recoveries in vaults across Aave, Morpho, Euler, Gearbox and Silo. A lightweight consumer version of the liquidity monitoring.

• rya-sge/defi-monitoring (open source)

  Open-source per-block watcher for Morpho Vault V2. It grades alerts on timelock-zero changes, cap and fee changes, bad debt, market concentration above 25% and utilization, and estimates how much a plain withdrawal can pay versus forced deallocation. This free tool already does much of the daily sheet for Morpho.

• Exponential.fi / YO Risk Graph

  A-to-F ratings on chain, protocol, asset and pool risk, now sold as a paid per-call risk API. The underlying source is a third-party directory listing, so the API details are unverified.

• DIA DeFi Vaults Map

  Free comparison map of more than 3,700 lending vaults and their risk curators, including timelock and guardian context.

• Sentora vault research

  Research framework for judging vault architecture, curation quality and strategy composition. More of an analytical competitor than a product.

• Philidor Labs

  Vault risk data exposed through an MCP server for agents. Its existence is confirmed but the details are thin.

Checked 2026-10-19