//Tropykus RSK
C+

Tropykus RSK

Risk Score 40/100·FValue
Compare
$108,000TVL·LendingWebsite →

Protocol sunset — unpatched vulnerabilities confirmed in immutable contracts, web interface closed July 2026; all deposits should be withdrawn before September 1, 2026 technical support deadline.

Risk Breakdown

Top Risks

1

Protocol in full wind-down — web interface closed July 27, 2026 and smart contract support ends September 1, 2026; remaining depositors must withdraw directly via contract or risk indefinite fund lockup

2

Security audit by Money on Chain identified unpatched vulnerabilities in immutable deployed contracts — team chose full shutdown over remediation, confirming unfixable security flaws remain in active contracts until September 1

3

TVL collapsed ~97% to ~$180K following April 27, 2026 shutdown announcement — near-zero liquidity means remaining depositors face significant withdrawal friction

4

July 2023 exploit on custom rBTC micro market lost ~10% TVL via exchange rate manipulation; a separate vulnerability class was later discovered in the same immutable system, triggering the 2026 shutdown

Frequently Asked Questions

Is Tropykus RSK safe to use?
Tropykus RSK receives a C+ risk grade (40/100) from Hindenrank, where lower scores indicate lower risk. Protocol sunset — unpatched vulnerabilities confirmed in immutable contracts, web interface closed July 2026; all deposits should be withdrawn before September 1, 2026 technical support deadline. Tropykus RSK, a Compound v2 fork on the RSK Bitcoin sidechain, announced a full protocol wind-down on April 27, 2026. The web interface closed July 27, 2026, and smart contract technical support ends September 1, 2026. The shutdown was triggered by a Money on Chain security audit that identified vulnerabilities in immutable deployed contracts that cannot be patched. TVL has fallen ~97% to approximately $180K as users withdrew following the announcement. Remaining depositors should withdraw immediately via direct contract interaction before the September 1 decommission deadline.
What are the main risks of using Tropykus RSK?
The key risks identified for Tropykus RSK are: (1) Protocol is effectively shut down — web interface closed July 27, 2026; deposits and new loans are no longer possible; remaining funds (~$180K) must be withdrawn directly from smart contracts before September 1, 2026 when official support ends (2) Security audit identified unpatched vulnerabilities in immutable contracts that cannot be fixed — these flaws remain present in the live contracts until decommission and represent an active exploit risk for any funds left in the protocol (3) RSK's thin DeFi ecosystem means any remaining undercollateralized positions have essentially no active liquidation infrastructure and no liquidity for recovery
What is Tropykus RSK's risk score breakdown?
Tropykus RSK scores 40/100 across eight risk dimensions: Mechanism Novelty: 0/15, Interaction Severity: 8/20, Oracle Surface: 5/10, Documentation Gaps: 4/10, Track Record: 8/15, Scale Exposure: 0/10, Regulatory Risk: 5/10, Vitality Risk: 10/10. The highest risk area is Vitality Risk at 10/10.
How does Tropykus RSK compare to other Lending protocols?
Among 99 rated Lending protocols on Hindenrank, Tropykus RSK ranks #66 by safety (lowest risk score = safest). Its 40/100 risk score and C+ grade place it in the middle tier of Lending protocols.
Has Tropykus RSK ever been hacked or exploited?
Tropykus RSK scores 8/15 on the Track Record risk dimension, indicating some history of security incidents or exploits. Higher scores reflect more severe or frequent incidents. Review the full risk report for details.

Incident History

1incident|$150,000total losses
Last scanned 2026-07-30

Get risk alerts before it's too late

Weekly grade changes, downgrade alerts, and new protocol risk findings. Free.