Elevated risk — historic $37.5M exploit and high-leverage mechanics create substantial risk, partially offset by post-exploit code remediation and audits.
Risk Breakdown
Top Risks
The protocol suffered a $37.5M exploit in February 2021 via a complex flash loan attack that exploited missing input checks and rounding errors in Iron Bank integration — the codebase has since been patched and re-audited but the same core architecture remains.
Leveraged yield farming up to 9x amplifies liquidation risk during volatile markets; oracle delays on underlying LP token pricing can cause cascading liquidations across leveraged positions.
Dependency on external DEX protocols (Curve, Balancer, SushiSwap, Uniswap) for underlying yield strategies means vulnerabilities in those protocols directly affect Homora users.
Custom spell system allows users to execute complex leveraged strategies in a single transaction, increasing smart contract attack surface beyond standard lending protocols.
Frequently Asked Questions
Is Homora V2 safe to use?
What are the main risks of using Homora V2?
What is Homora V2's risk score breakdown?
How does Homora V2 compare to other DeFi protocols?
Has Homora V2 ever been hacked or exploited?
Get risk alerts before it's too late
Weekly grade changes, downgrade alerts, and new protocol risk findings. Free.