Is INIT Capital Safe?
Risk Grade: C (44/100)
INIT Capital is rated as elevated risk — multiple novel mechanisms and notable interaction risks.
Elevated risk — novel Liquidity Hook architecture with limited oracle redundancy and a severe TVL collapse from peak (~95%), combined with pre-token governance, leaves the protocol in a fragile operational state.
INIT Capital is a composable lending protocol on Mantle and Blast that introduced 'Liquidity Hooks' — a plugin architecture allowing third-party dApps to access its lending pools for leveraged strategies without building their own liquidity. Earning a C grade, the protocol's ~$2.25M current TVL (down ~95% from its 2024 peak of ~$45M) reflects a severe adoption decline. Primary risks include external hook contract code risk, limited oracle redundancy (API3 only, no active fallback), and a pre-token governance structure without formal on-chain accountability. The protocol has no known exploits but remains in an early and fragile operational state.
TVL
$2M
Mechanisms
8
Interactions
6
Value Grade
D
Key Risks for INIT Capital Users
Hook contract code risk: INIT's core feature — Liquidity Hooks — allows third-party contracts to interact directly with user positions. A buggy or later-compromised hook could extract collateral from positions that granted it access. While 'Official Partner' hooks require audits, this creates an ongoing external attack surface not present in standard lending protocols.
Oracle concentration risk: API3 is the only active price source; Pyth is listed as 'coming soon' but not yet live. When oracle sources diverge beyond the configured threshold, INIT pauses all protocol actions (no fallback price) — users cannot repay borrows or add collateral during a market-stress oracle pause.
TVL collapse and protocol vitality: The protocol's TVL has fallen ~95% from its 2024 peak, the Blast deployment is effectively dormant, and GitHub development activity has been sparse since late 2024. Low liquidity amplifies slippage risk for large withdrawals and increases the likelihood of protocol wind-down.
No governance token or formal risk oversight: INIT Capital has no governance token; protocol parameters (oracle thresholds, debt ceilings, hook listings) are controlled by operator keys with no transparent on-chain governance process — creating key-person risk for critical parameter management.
Top Risk Factors
- •Liquidity Hook architecture introduces external smart contract risk: third-party hook contracts (e.g., DEX loop hooks for MerchantMoe, Agni, Ethena) interact directly with user positions in INIT's core, and a buggy or malicious hook could drain positions — 'Official Partner' status requires an audit but permissionless hook submissions have lower scrutiny.
- •Oracle infrastructure is under-redundant: API3 is the primary price source with Pyth listed as 'coming soon,' and when oracle sources deviate beyond thresholds, INIT pauses all protocol actions rather than falling back to a secondary price — creating a hard dependency on a single active feed.
- •Severe TVL collapse since mid-2024 peak ($45M → $2.25M, ~95% decline) suggests the hook-based liquidity flywheel has not self-reinforced; the Blast chain deployment is effectively dormant ($93K TVL), and development activity appears sparse since late 2024.
- •Pre-token status means no protocol-owned governance or formal risk committee: parameter changes require manual operator action with limited on-chain accountability, introducing key-person risk for oracle threshold and debt ceiling adjustments.
How INIT Capital Compares to Peers
INIT Capital ranks #81 of 99 Lending protocols (bottom quartile — among the riskiest). At a risk score of 44/100, it's 7 points riskier than the sector average of 37/100.
Adjacent peers: Wildcat Protocol (C, 43/100) is ranked just safer, and 3jane Lending (C, 44/100) is ranked just riskier.
See the full Lending sector leaderboard or the INIT Capital vs 3jane Lending comparison.
Common Questions about INIT Capital
Plain-English answers based on INIT Capital's scores across Hindenrank's 8 risk dimensions. The highest-scoring (riskiest) dimension is Vitality Risk (8/10).
Has INIT Capital ever been hacked or exploited?
INIT Capital has had some operational issues or moderate incidents in its history. The track record dimension scored 6/15 — not catastrophic, but enough to flag. Look at the specific events and whether they were addressed by the team before drawing conclusions.
How much money is at stake in INIT Capital?
INIT Capital currently holds under $2M in user deposits — small enough that liquidity events could affect exits. Smaller TVL means individual depositors carry a larger share of any loss event, and it can be harder to exit a position quickly during stress.
What's the worst-case scenario for INIT Capital?
Hindenrank has identified specific collapse scenarios for INIT Capital. The most prominent: "Compromised Hook Contract Drains User Positions via Position Manager Access". The trigger condition is A Liquidity Hook contract registered as an 'Official Partner' (after audit) contains a latent exploit — such as an admin key that can drain approved user positions — or a subsequently-deployed hook upgrade introduces a vulnerability.. Reading through the full scenario list on the protocol page is the single best way to understand the actual failure modes — generic "smart contract risk" is rarely the thing that takes a protocol down.
Is INIT Capital regulated or insured?
INIT Capital has low regulatory exposure on Hindenrank's framework (2/10). The protocol is structured in a way that minimizes counterparty and jurisdiction concentration, though regulatory risk in crypto can change rapidly. No DeFi protocol carries FDIC-style insurance — even with low regulatory risk, depositors are not protected in the way bank customers are.
What are the biggest red flags for INIT Capital?
Hindenrank's retail-focused risk audit flagged: Hook contract code risk: INIT's core feature — Liquidity Hooks — allows third-party contracts to interact directly with user positions. A buggy or later-compromised hook could extract collateral from positions that granted it access. While 'Official Partner' hooks require audits, this creates an ongoing external attack surface not present in standard lending protocols. Oracle concentration risk: API3 is the only active price source; Pyth is listed as 'coming soon' but not yet live. When oracle sources diverge beyond the configured threshold, INIT pauses all protocol actions (no fallback price) — users cannot repay borrows or add collateral during a market-stress oracle pause. TVL collapse and protocol vitality: The protocol's TVL has fallen ~95% from its 2024 peak, the Blast deployment is effectively dormant, and GitHub development activity has been sparse since late 2024. Low liquidity amplifies slippage risk for large withdrawals and increases the likelihood of protocol wind-down.
Should beginners deposit into INIT Capital?
INIT Capital's C grade puts it in the elevated-risk band. This is not a beginner-friendly protocol. Anyone depositing here should treat the position as speculative and avoid concentrating significant savings in it.
How does INIT Capital compare to safer Lending alternatives?
INIT Capital is one protocol in Hindenrank's Lending coverage. The safest Lending protocols on the leaderboard tend to share three traits: a long incident-free track record, conservative mechanism design, and high-quality public documentation. Compare INIT Capital against the full Lending ranking before committing capital.
For the full 8-dimension score breakdown, the radar chart, and dependency graph, see the INIT Capital risk report.
Read the Full INIT Capital Risk Report
This protocol has 2 collapse scenarios. 2 high-severity interaction risks identified. See the full mechanism classification, interaction matrix, and deep-dive recommendations.
View Full Report →Get risk alerts before it's too late
Weekly grade changes, downgrade alerts, and new protocol risk findings. Free.