How Does Set Protocol Work?
Set Protocol is the smart contract infrastructure that powers on-chain structured products, most notably used by Index Coop to build products like the DeFi Pulse Index (DPI). SetTokens are ERC-20 tokens that represent baskets of crypto assets, similar to ETFs in traditional finance. Users can mint SetTokens by depositing the underlying assets, and redeem them to get the assets back. Professional managers create and rebalance these products, charging streaming fees. The protocol also supports advanced strategies like leveraged tokens and yield farming through modular integrations with other DeFi protocols.
TVL
$12M
Sector
DeFi
Risk Grade
B-
Value Grade
D+
Core Mechanisms
2.2.2
SetToken: fully collateralized ERC-20 baskets representing structured DeFi products
SetTokens are ERC-20 tokens backed by baskets of crypto assets. Users can issue (mint) and redeem SetTokens for underlying components. Fully collateralized at all times.
4.1.1
Trade Module for rebalancing via DEX integrations with 0.10% platform fee
Managers execute rebalancing trades through the Trade Module, which integrates with exchanges and AMMs. 0.10% transaction fee on trades via TokenSets dapp.
2.1.3
Streaming fee: ongoing management fee charged to SetToken holders, paid to managers
Managers set streaming fees as annual management fees. This is the primary monetization mechanism for managers. No protocol-level recurring fees.
5.4.1
Manager-controlled rebalancing with permissioned module access
Managers have authority over rebalancing decisions, trade execution, and module configuration. Trust in manager competence and honesty is required.
6.4.1
Oracle feeds for NAV calculation and rebalancing trigger conditions
Price feeds used for calculating SetToken NAV and determining when rebalancing conditions are met.
7.1.1
DeFi module integrations: lending (Aave, Compound), yield farming, margin trading
Advanced SetToken strategies can interact with DeFi protocols via modules. This enables leverage, yield farming, and other complex strategies but adds external protocol dependency.
How the Pieces Interact
Managers execute trades on behalf of all SetToken holders. A malicious manager could front-run rebalancing trades, execute at unfavorable prices, or time trades to extract value from the SetToken at holder expense.
When SetToken assets are deployed into lending or yield farming via modules, they become exposed to the integrated protocol's risks. An exploit in Aave or Compound could drain SetToken assets that were deployed for yield.
If any constituent token in a SetToken basket is exploited, the SetToken holds the compromised asset until the manager rebalances. Slow manager response exposes all holders to preventable losses.
Large redemptions require selling underlying constituent tokens. For SetTokens holding illiquid tokens, large redemptions could cause significant slippage, disadvantaging remaining holders.
What Could Go Wrong
- SetTokens hold baskets of underlying ERC-20 tokens, creating compounded smart contract risk exposure across all constituent DeFi protocols
- Manager-controlled rebalancing creates trust dependency; malicious or incompetent managers can execute trades that disadvantage token holders through poor timing or front-running
- Integration with external DeFi protocols (lending, AMMs, yield farming) via modules expands the attack surface beyond Set Protocol's own contracts
Malicious Manager Rebalancing Attack
TailTrigger: A SetToken manager exploits their trade authority to extract value from the token basket
- 1.Manager front-runs planned rebalancing by taking personal positions — Manager profits at SetToken holder expense through information asymmetry
- 2.Manager executes large trades at unfavorable prices or into low-liquidity venues — SetToken NAV drops from poor execution quality
- 3.SetToken holders detect NAV decline relative to underlying basket value — Holders redeem SetTokens, forcing selling of remaining constituents
- 4.Redemption cascade reduces SetToken AUM — Manager loses streaming fee revenue, protocol reputation damaged
Risk Profile at a Glance
Overall: B- (28/100)
Lower score = safer