How Does Nexus Mutual Work?

DeFi|Risk C+|7 mechanisms|6 interactions

DeFi's largest insurance protocol, where members pool capital to cover losses from smart contract exploits. It manages a $150M capital pool and has paid out $18M+ in claims. Its C+ grade reflects the novel mutual model and proven claims history, offset by the risk that a single widespread exploit could exhaust the entire pool and the conflict of interest built into how claims are judged.

TVL

$92M

Sector

DeFi

Risk Grade

C+

Value Grade

C+

Core Mechanisms

Insurance/Discretionary-Mutual

Novel

Decentralized mutual where members share risk via a common capital pool; claims decided by member vote

Nexus Mutual operates as a discretionary mutual, not an insurance company. Members pool capital, purchase cover, and vote on claims. This on-chain mutual model is novel in DeFi and operates under UK legal framework.

Insurance/Bonding-Curve-Pricing

Novel

NXM price set by bonding curve based on capital pool size vs. MCR (Minimum Capital Requirement)

NXM token price is algorithmically determined by the ratio of the capital pool to the MCR. When capital exceeds MCR, NXM price increases; when capital is insufficient, price drops. This creates a reflexive relationship between claims events and token value.

Insurance/Risk-Assessment-Staking

Novel

Members stake NXM on specific protocols to signal risk assessment; staked NXM is slashed on valid claims

Risk assessors stake NXM on protocols they believe are safe. If that protocol is exploited and a claim is approved, staked NXM is burned. This creates a skin-in-the-game mechanism but also an incentive to deny claims.

Governance/Token

NXM token governance for protocol parameters, cover products, and claims assessment

NXM holders participate in governance over protocol upgrades, new cover products, and parameter changes. Governance requires KYC membership, which limits sybil attacks but also limits participation.

Insurance/Claims-Assessment

Member-voted claims assessment with advisory board override for disputes

Claims are assessed by NXM-staking members who vote on claim validity. An advisory board exists as a backstop for disputed claims. Over $18M in claims have been paid to date across major events including Euler, FTX, and Rari Capital.

Access/KYC-Gated

KYC-verified membership required for NXM purchase and protocol participation

All NXM holders must complete KYC verification. NXM can only be transferred between verified members. wNXM exists as a wrapped version tradeable by non-members but without governance rights.

Insurance/Reinsurance-Layer

Symbiotic integration for yield-generating reinsurance vaults aligned with cover durations

Integration with Symbiotic (restaking) to create yield-generating reinsurance vaults that underwrite DeFi risks. Yields can reach ~25%. This adds a new capital source but also introduces restaking-related risks.

How the Pieces Interact

Capital pool sizingCorrelated cover exposureCritical

If multiple covered protocols share infrastructure (e.g., same oracle, same compiler version), a single vulnerability creates correlated claims that could exceed the capital pool's capacity. The mutual model assumes diversified, uncorrelated risks.

Risk assessment stakingClaims assessment votingHigh

Risk assessors who staked NXM on a protocol have a financial incentive to vote against claims on that protocol, as valid claims burn their staked NXM. This creates a structural conflict of interest in the claims process.

NXM bonding curveClaims payoutsHigh

Large claims reduce the capital pool, which reduces NXM price via the bonding curve. This triggers redemptions from NXM holders seeking to exit at a higher price, further draining the capital pool in a reflexive loop.

KYC membership requirementLiquidity and participationMedium

KYC gatekeeping limits the pool of potential capital providers and risk assessors. A small member base means concentrated governance power and limited risk assessment diversity.

Symbiotic reinsurance vaultsRestaking yield promisesMedium

Reinsurance vaults generating ~25% yields through restaking introduce a second layer of smart contract and slashing risk. A Symbiotic exploit could impair the reinsurance layer precisely when it is needed for claim payouts.

What Could Go Wrong

  1. Correlated DeFi exploit risk: a systemic vulnerability affecting multiple covered protocols could exhaust the ~$150M capital pool
  2. Claims assessment incentive conflict: assessors stake NXM and have a financial interest in denying claims to protect their stake
  3. KYC requirement and NXM transfer restrictions limit liquidity and create membership concentration risk; founder's $8M personal hack in 2020 demonstrated key-person vulnerability

Correlated DeFi Exploit Wave Exhausting Capital Pool

Moderate

Trigger: A systemic DeFi vulnerability (e.g., compiler bug, shared library exploit) triggers simultaneous claims across multiple covered protocols, exceeding the capital pool's capacity to pay

  1. 1.A shared infrastructure vulnerability causes exploits across 5+ major DeFi protocols simultaneously Claims flood in from Protocol Cover holders across all affected protocols
  2. 2.Aggregate valid claims exceed 30-40% of the capital pool MCR (Minimum Capital Requirement) ratio drops below safe threshold; NXM bonding curve price drops sharply
  3. 3.NXM holders rush to redeem against the bonding curve Capital pool drains further as redemptions compete with claim payouts; bonding curve enters below-MCR territory
  4. 4.Remaining claimants face partial payouts or delays Insurance product reputation destroyed; new cover purchases cease, eliminating premium income

Risk Profile at a Glance

Mechanism Novelty8/15
Interaction Severity6/20
Oracle Surface0/10
Documentation Gaps3/10
Track Record6/15
Scale Exposure3/10
Regulatory Risk6/10
Vitality Risk5/10
C+

Overall: C+ (37/100)

Lower score = safer

More on Nexus Mutual

Related DeFi Explainers