Is Concrete Protocol Safe?
Risk Grade: B- (30/100)
Concrete Protocol is rated as moderate risk — some novel mechanisms, generally well-understood.
Lower risk — 15 months incident-free with aggressive audit cadence and growing TVL, but AI models remain untested in a downturn and Earn V2 looping/hurdle-rate mechanics add new complexity
An automated vault that spreads your crypto across multiple DeFi strategies like lending, liquidity pools, and restaking to maximize yield. It manages ~$962M, mostly from institutional depositors. Its B- grade reflects a strong 15-month clean track record and aggressive auditing, but relies on AI models trained only during bull markets.
TVL
$962M
Mechanisms
5
Interactions
6
Value Grade
C+
Key Risks for Concrete Protocol Users
The vault puts your money into Aave, Curve, and EigenLayer at the same time. If any one of those gets hacked, your vault loses money even though you never used that protocol directly
The AI models picking where to invest were trained on 2024-2025 bull market data. They have never seen a crash, so they will likely make bad decisions during the next one
With ~$962M from institutions, if big clients pull out during a panic, the vault must sell locked positions at fire-sale prices. You eat the loss even if you stay
Top Risk Factors
- •Multi-strategy vaults deploy capital across Aave, Curve, Morpho, and EigenLayer simultaneously; hidden correlations between strategies mean diversification benefits evaporate during systemic DeFi stress events
- •Machine learning models optimizing vault allocations are trained primarily on 2024-2025 bull market data; models lack sufficient crisis-period training data to predict black swan behavior
- •Earn V2 introduces looping strategies and hurdle-rate mechanics not present in V1; new mechanism complexity has been audited but lacks the operational track record of the original vault architecture
How Concrete Protocol Compares to Peers
Concrete Protocol ranks #21 of 119 Yield protocols (top quartile — safer than most). At a risk score of 30/100, it's 8 points safer than the sector average of 38/100.
Adjacent peers: Yield Yak Aggregator (B-, 29/100) is ranked just safer, and CIAN Yield Layer (B-, 30/100) is ranked just riskier.
Concrete Protocol holds 5% of TVL across all rated Yield protocols ($962M of $18.0B total).
See the full Yield sector leaderboard or the Concrete Protocol vs CIAN Yield Layer comparison.
Common Questions about Concrete Protocol
Plain-English answers based on Concrete Protocol's scores across Hindenrank's 8 risk dimensions. The highest-scoring (riskiest) dimension is Scale Exposure (7/10).
Has Concrete Protocol ever been hacked or exploited?
Concrete Protocol has a fairly clean operational history. The track record dimension scored 3/15, indicating minor or no significant incidents on record. A clean track record is a positive signal but it does not guarantee future safety, especially as protocol complexity grows.
How much money is at stake in Concrete Protocol?
Concrete Protocol currently holds more than $962M in user deposits. A protocol of this size typically has deeper liquidity, more eyes on the code, and more attention from auditors — but it also means a single failure has a much larger blast radius.
What's the worst-case scenario for Concrete Protocol?
Hindenrank has identified specific collapse scenarios for Concrete Protocol. The most prominent: "Multi-Strategy Vault Correlation Collapse". The trigger condition is A systemic DeFi market event causes simultaneous failures across multiple strategies within Concrete's multi-strategy vaults, revealing that diversification was illusory due to hidden correlations. Reading through the full scenario list on the protocol page is the single best way to understand the actual failure modes — generic "smart contract risk" is rarely the thing that takes a protocol down.
Is Concrete Protocol regulated or insured?
Concrete Protocol has some regulatory exposure (4/10), typical of mid-sized DeFi protocols. There is no specific enforcement action on record, but the structure includes elements that regulators have flagged in similar protocols. No DeFi protocol carries FDIC-style insurance — even with low regulatory risk, depositors are not protected in the way bank customers are.
What are the biggest red flags for Concrete Protocol?
Hindenrank's retail-focused risk audit flagged: The vault puts your money into Aave, Curve, and EigenLayer at the same time. If any one of those gets hacked, your vault loses money even though you never used that protocol directly The AI models picking where to invest were trained on 2024-2025 bull market data. They have never seen a crash, so they will likely make bad decisions during the next one With ~$962M from institutions, if big clients pull out during a panic, the vault must sell locked positions at fire-sale prices. You eat the loss even if you stay
Should beginners deposit into Concrete Protocol?
Concrete Protocol is rated B-, which is acceptable for users who understand the protocol's mechanism. Beginners should read the full risk breakdown and only deposit after they can articulate the top three failure modes. If you cannot explain how the protocol works, do not deposit.
How does Concrete Protocol compare to safer Yield alternatives?
Concrete Protocol is one protocol in Hindenrank's Yield coverage. The safest Yield protocols on the leaderboard tend to share three traits: a long incident-free track record, conservative mechanism design, and high-quality public documentation. Compare Concrete Protocol against the full Yield ranking before committing capital.
For the full 8-dimension score breakdown, the radar chart, and dependency graph, see the Concrete Protocol risk report.
Read the Full Concrete Protocol Risk Report
This protocol has 2 collapse scenarios. 2 high-severity interaction risks identified. See the full mechanism classification, interaction matrix, and deep-dive recommendations.
View Full Report →Get risk alerts before it's too late
Weekly grade changes, downgrade alerts, and new protocol risk findings. Free.