How Does Nexus Mutual Work?
DeFi's largest insurance protocol, where members pool capital to cover losses from smart contract exploits. It manages a $150M capital pool and has paid out $18M+ in claims. Its C+ grade reflects the novel mutual model and proven claims history, offset by the risk that a single widespread exploit could exhaust the entire pool and the conflict of interest built into how claims are judged.
TVL
$92M
Sector
DeFi
Risk Grade
C+
Value Grade
C+
Core Mechanisms
Insurance/Discretionary-Mutual
NovelDecentralized mutual where members share risk via a common capital pool; claims decided by member vote
Nexus Mutual operates as a discretionary mutual, not an insurance company. Members pool capital, purchase cover, and vote on claims. This on-chain mutual model is novel in DeFi and operates under UK legal framework.
Insurance/Bonding-Curve-Pricing
NovelNXM price set by bonding curve based on capital pool size vs. MCR (Minimum Capital Requirement)
NXM token price is algorithmically determined by the ratio of the capital pool to the MCR. When capital exceeds MCR, NXM price increases; when capital is insufficient, price drops. This creates a reflexive relationship between claims events and token value.
Insurance/Risk-Assessment-Staking
NovelMembers stake NXM on specific protocols to signal risk assessment; staked NXM is slashed on valid claims
Risk assessors stake NXM on protocols they believe are safe. If that protocol is exploited and a claim is approved, staked NXM is burned. This creates a skin-in-the-game mechanism but also an incentive to deny claims.
Governance/Token
NXM token governance for protocol parameters, cover products, and claims assessment
NXM holders participate in governance over protocol upgrades, new cover products, and parameter changes. Governance requires KYC membership, which limits sybil attacks but also limits participation.
Insurance/Claims-Assessment
Member-voted claims assessment with advisory board override for disputes
Claims are assessed by NXM-staking members who vote on claim validity. An advisory board exists as a backstop for disputed claims. Over $18M in claims have been paid to date across major events including Euler, FTX, and Rari Capital.
Access/KYC-Gated
KYC-verified membership required for NXM purchase and protocol participation
All NXM holders must complete KYC verification. NXM can only be transferred between verified members. wNXM exists as a wrapped version tradeable by non-members but without governance rights.
Insurance/Reinsurance-Layer
Symbiotic integration for yield-generating reinsurance vaults aligned with cover durations
Integration with Symbiotic (restaking) to create yield-generating reinsurance vaults that underwrite DeFi risks. Yields can reach ~25%. This adds a new capital source but also introduces restaking-related risks.
How the Pieces Interact
If multiple covered protocols share infrastructure (e.g., same oracle, same compiler version), a single vulnerability creates correlated claims that could exceed the capital pool's capacity. The mutual model assumes diversified, uncorrelated risks.
Risk assessors who staked NXM on a protocol have a financial incentive to vote against claims on that protocol, as valid claims burn their staked NXM. This creates a structural conflict of interest in the claims process.
Large claims reduce the capital pool, which reduces NXM price via the bonding curve. This triggers redemptions from NXM holders seeking to exit at a higher price, further draining the capital pool in a reflexive loop.
KYC gatekeeping limits the pool of potential capital providers and risk assessors. A small member base means concentrated governance power and limited risk assessment diversity.
Reinsurance vaults generating ~25% yields through restaking introduce a second layer of smart contract and slashing risk. A Symbiotic exploit could impair the reinsurance layer precisely when it is needed for claim payouts.
What Could Go Wrong
- Correlated DeFi exploit risk: a systemic vulnerability affecting multiple covered protocols could exhaust the ~$150M capital pool
- Claims assessment incentive conflict: assessors stake NXM and have a financial interest in denying claims to protect their stake
- KYC requirement and NXM transfer restrictions limit liquidity and create membership concentration risk; founder's $8M personal hack in 2020 demonstrated key-person vulnerability
Correlated DeFi Exploit Wave Exhausting Capital Pool
ModerateTrigger: A systemic DeFi vulnerability (e.g., compiler bug, shared library exploit) triggers simultaneous claims across multiple covered protocols, exceeding the capital pool's capacity to pay
- 1.A shared infrastructure vulnerability causes exploits across 5+ major DeFi protocols simultaneously — Claims flood in from Protocol Cover holders across all affected protocols
- 2.Aggregate valid claims exceed 30-40% of the capital pool — MCR (Minimum Capital Requirement) ratio drops below safe threshold; NXM bonding curve price drops sharply
- 3.NXM holders rush to redeem against the bonding curve — Capital pool drains further as redemptions compete with claim payouts; bonding curve enters below-MCR territory
- 4.Remaining claimants face partial payouts or delays — Insurance product reputation destroyed; new cover purchases cease, eliminating premium income
Risk Profile at a Glance
Overall: C+ (37/100)
Lower score = safer