How Does OnRe Work?
OnRe is the first licensed on-chain reinsurer, operating under dual Bermuda BMA licensing (Class F digital asset + Class IIGB insurance) and issuing ONyC — an SPL yield token on Solana backed by both reinsurance premiums from licensed insurers and returns from a diversified RWA stablecoin basket (T-bills, USYC, sUSDe, USDC). With $193M TVL (5 Quantstamp audits + 1 Ackee Blockchain audit, no incidents), it targets 11.81% APY through diversified specialty (D&O, cyber, marine, aviation, crop) and catastrophe (wind, earthquake, wildfire) reinsurance lines in Bermuda-regulated segregated accounts. Its C grade reflects genuinely novel risk: catastrophe XoL exposure creates non-DeFi tail risk (major natural disasters can compress ONyC NAV), DeFi collateral layering (sUSDe, syrupUSDC) adds correlated risk, and admin-controlled NAV parameters give the team direct control over $193M in redemption pricing. Its strong value score (B+) reflects OnRe's unique regulatory moat — dual Bermuda insurance licensing is a multi-year barrier to entry that no DeFi competitor has overcome.
TVL
$247M
Sector
RWA
Risk Grade
C
Value Grade
B+
Core Mechanisms
Insurance > Proportional and Excess-of-Loss Reinsurance
NovelBermuda-licensed (Class IIGB) on-chain reinsurer accepting risk from cedants via global reinsurance brokers; proportional treaties (fixed % of each policy + matching premium and loss share) and XoL contracts (claims above threshold). Ring-fenced per-deal in Bermuda SAC (Segregated Accounts Companies) structure.
No other major DeFi protocol at $100M+ TVL is a licensed reinsurer. The Bermuda SAC ring-fencing + on-chain capital pooling via SPL tokens is unprecedented in DeFi. Competitors (Nexus Mutual, Insurace) are crypto-native insurance pools, not licensed traditional reinsurers.
Insurance > Industry Loss Warranty (ILW) Catastrophe Settlement
NovelCatastrophe XoL contracts settled against independently verified industry loss indices (PCS index and equivalents); binary settlement at high attachment points without individual loss adjustment; natural perils covered: wind, earthquake, flood, wildfire, hail, monsoon
ILW settlement via industry loss indices in DeFi has no precedent. Traditional ILW contracts require specialized actuarial verification — OnRe's on-chain implementation requires off-chain index data to settle, creating an oracle-like dependency on PCS or similar loss index providers.
Yield > Dual-Source Yield Token with NAV Accrual
NovelONyC (OnRe Tokenized Reinsurance): SPL token on Solana with NAV-accruing yield from two independent streams — reinsurance premiums from cedants and collateral returns from backing assets (T-bills, sUSDe, syrupUSDC, USYC, USDC, USDS). Target APY: 11.81%. Permissionless Open Access or KYC-gated Institutional Access.
Combining reinsurance premium income (actuarial risk transfer) with DeFi collateral yield in a single yield token is genuinely novel — creating a multi-layer risk structure where traditional insurance loss risk is layered atop DeFi counterparty and collateral risk.
Yield > Queue-based Redemption with Capacity Limits
ONyC redemptions processed at time-of-fulfillment NAV (not submission price); 15% of underwriting capital maintained as liquid reserve target; monthly redemption capacity 2.5% of NAV; queue-based processing
Queue-based redemption with capacity limits is standard for illiquid strategy vaults (Maple, Goldfinch, Huma).
Compliance > Multi-tier Admin Hierarchy with Kill Switch
Boss + up to 20 admins + approvers on-chain hierarchy; kill switch pauses all operations; two-step boss transfer; ed25519 signature verification for approvals; maximum 1000 bps fee cap hardcoded
Centralized admin hierarchy is standard for regulated institutional DeFi products (BUIDL, USYC, etc.). Kill switch is a standard regulatory compliance mechanism.
Infrastructure > Multi-Asset Collateral Basket
ONyC backed by a basket of RWA stablecoins and yield assets: USDC, USDS, USDG, USYC (Hashnote), sUSDe (Ethena), syrupUSDC (Maple), USCC (Superstate), PRIME — diversified but each asset carries its own counterparty risk
Multi-asset collateral baskets are standard in DeFi (Maker, Frax, etc.). OnRe's basket is RWA-weighted.
How the Pieces Interact
ONyC NAV parameters are stored in and controlled by the admin hierarchy — the redemption value of $193M in user capital is determined by admin-set parameters with no external verification. If admin keys are compromised (social engineering, insider threat) or if admins set incorrect NAV parameters, ONyC holders could redeem at incorrect prices. The kill switch can halt all redemptions with no on-chain timelock requirement.
A major catastrophe season (severe Atlantic hurricane year, major California earthquake) triggers large simultaneous reinsurance loss payments while concurrent DeFi stress affects sUSDe (Ethena negative funding depeg) or syrupUSDC (Maple credit default). Both reinsurance losses and collateral depreciation reduce ONyC NAV simultaneously — a correlation that DeFi risk models typically assign near-zero probability but natural disaster + credit cycle correlation exists historically.
A major catastrophe event (wind or earthquake at industry loss index above attachment point) triggers ILW contract payouts, simultaneously causing: (a) ONyC NAV compression from losses paid, and (b) LP rush to redeem before further NAV decline. Redemption capacity at 2.5% NAV/month means capital could be trapped for 3-6+ months at declining NAV values. Execution at time-of-fulfillment NAV amplifies losses for late redeemers.
ONyC NAV accrues premium income over time but faces catastrophe loss drawdowns. A sequence of multiple major CAT events in a single underwriting year (e.g., major Atlantic hurricane season + Pacific earthquake + US wildfire) could produce losses exceeding annual premium income, resulting in negative annual returns despite the 11.81% target yield. The protocol targets 0.5% annual probability of capital loss — meaning ~1-in-200 year outcomes can impair principal.
All reinsurance deals are underwritten by On Re SAC Ltd. in Bermuda. If Bermuda BMA revokes or restricts OnRe's dual license (Class IIGB or Class F), no new reinsurance deals can be written, existing deals cannot be renewed, and premium income stops. The kill switch would likely be triggered; LP redemptions could be halted during regulatory proceedings. Recovery depends on Bermuda regulatory outcomes, not smart contract mechanics.
What Could Go Wrong
- ONyC redemption price is computed from admin-controlled NAV parameters stored in the smart contract — there is no external oracle or third-party NAV verification. The admin hierarchy (boss + up to 20 admins + approvers) with a kill switch can directly influence the redemption value of ONyC. This is functionally equivalent to a single-entity-controlled price oracle for $193M in user capital.
- The protocol's reinsurance portfolio includes property catastrophe (Cat XoL) deals covering wind, earthquake, flood, and wildfire. A severe natural catastrophe season could trigger large simultaneous loss payments that temporarily compress ONyC NAV significantly. The protocol targets a 0.5% annual probability of capital loss — meaning capital loss is a real actuarial scenario, not a theoretical one.
- ONyC collateral includes DeFi-integrated stablecoins (sUSDe via Ethena, syrupUSDC via Maple Finance). A DeFi stress event affecting Ethena's negative funding position or Maple's institutional credit book could simultaneously reduce collateral value while a natural disaster triggers claim payments — creating correlated loss exposure that DeFi risk models typically do not price.
- Redemption capacity is capped at 2.5% of NAV per month with execution at the time-of-fulfillment price (not submission price). During a major catastrophe event that triggers simultaneous LP redemption demand, capital could be trapped for 3-6+ months at declining NAV values.
Major Atlantic Hurricane Season Triggering Cat XoL Losses and LP Redemption Crunch
ModerateTrigger: A Category 5 Atlantic hurricane makes US landfall, generating industry losses above OnRe Cat XoL attachment points (as measured by PCS index), triggering simultaneous Cat bond payouts, ONyC NAV drawdown, and LP redemption surge exceeding 2.5% NAV/month capacity
- 1.Major Atlantic hurricane (Category 5) makes US landfall, PCS estimates industry losses exceeding $50B+ — OnRe Cat XoL contracts with wind exposure trigger; loss payments begin flowing from pool to cedants per contract terms
- 2.ONyC NAV drawdown from loss payments; admin updates NAV parameters in smart contract reflecting losses — ONyC price falls by estimated loss percentage; LP panic initiates redemption queue submissions
- 3.Redemption queue fills beyond 2.5% NAV/month capacity; late submitters queued for 3-6+ months — Trapped LPs hold declining NAV positions; at time-of-fulfillment pricing, later redeemers receive less than earlier ones — creating a first-come-first-served incentive to rush the queue
- 4.Concurrent DeFi market stress from hurricane economic damage causes sUSDe funding rate to go negative and syrupUSDC yield to compress — Collateral-side yield drops; dual-source yield (premium + collateral) both under pressure simultaneously; ONyC APY falls sharply while NAV is depressed
- 5.Kill switch activated or admin halts new minting; remaining LPs locked in position at depressed NAV — Capital trapped until loss settlement finalizes (6-12+ months for Cat XoL); recovery depends on cedant claims verification and reserve adequacy
Risk Profile at a Glance
Overall: C (47/100)
Lower score = safer