Royco Protocol

Royco Protocol receives a C risk grade (50/100) from Hindenrank, where lower scores indicate lower risk. Elevated risk — a seven-month-old tranching design where Senior's protection is only as deep as a thin Junior buffer and wrapper access paths carry weaker upgrade controls, partially offset by unusually thorough audit coverage, isolated per-market architecture and a 5-day timelock on the core protocol. Royco is a risk-tranching protocol that splits a yield source — a lending market, staking position or tokenised RWA — into a Senior tranche with downside coverage and a Junior tranche that absorbs losses first in exchange for higher yield, with a third SLP tranche providing secondary liquidity. Its current product, Royco Dawn, launched in January 2026 and holds roughly $19.7M across six markets, replacing the V1 incentive-negotiation marketplace that peaked near $2.9B in Berachain pre-deposit campaigns. The C grade reflects genuinely deep audit coverage and isolated per-market design set against a seven-month-old codebase, thin Junior coverage buffers, and materially weaker admin controls on third-party wrapper access paths than on the core protocol.

The key risks identified for Royco Protocol are: (1) The Junior tranche is not a diversified buffer — it holds the same asset as Senior, so both fall together and Junior takes the hit at leverage. At the ~12.4% coverage seen in live markets, an 8% drop in the underlying can approach wiping out Junior. Once Junior is gone, Senior starts losing money despite being the protected tranche. (2) Senior's downside protection depends on how much Junior capital is actually present, not on a guarantee. Some markets have run with only two or three Junior depositors, so one large withdrawal can meaningfully thin the buffer that Senior relies on. (3) How you access Royco changes your risk. The core protocol requires a five-day delay before contract upgrades take effect. But the srRoyUSDC vault built on top of it can be upgraded instantly by a three-of-five multisig, and that same group reports the vault's asset values by hand rather than using a price oracle — a finding from Yearn's independent review, not from Royco's own disclosures. (4) Junior depositors can be locked in exactly when they would most want out: withdrawals are blocked while Junior capital is backing Senior, and money deposited into slow-moving assets like RWAs inherits their redemption delays, which can run 30 days. (5) The current product has only been live since January 2026. Royco has been audited unusually heavily for its age — Hexens, Certora, WatchPug, Nethermind, a public Cantina competition and ongoing formal verification, plus a $250,000 Immunefi bounty — but audits find known bug classes, and seven months is not long enough to see how a novel loss-allocation design behaves in a real crisis. (6) There is no Royco token today, so protocol fees do not accrue to token holders. Anyone participating for a future airdrop is taking an unpriced position on terms that have not been published.

Royco Protocol scores 50/100 across eight risk dimensions: Mechanism Novelty: 9/15, Interaction Severity: 15/20, Oracle Surface: 5/10, Documentation Gaps: 4/10, Track Record: 6/15, Scale Exposure: 3/10, Regulatory Risk: 4/10, Vitality Risk: 4/10. The highest risk area is Interaction Severity at 15/20.

Among 121 rated Yield protocols on Hindenrank, Royco Protocol ranks #111 by safety (lowest risk score = safest). Its 50/100 risk score and C grade place it among the riskier Yield protocols.

Royco Protocol scores 6/15 on the Track Record risk dimension, indicating some history of security incidents or exploits. Higher scores reflect more severe or frequent incidents. Review the full risk report for details.