Protocol sunset — unpatched vulnerabilities confirmed in immutable contracts, web interface closed July 2026; all deposits should be withdrawn before September 1, 2026 technical support deadline.
Risk Breakdown
Top Risks
Protocol in full wind-down — web interface closed July 27, 2026 and smart contract support ends September 1, 2026; remaining depositors must withdraw directly via contract or risk indefinite fund lockup
Security audit by Money on Chain identified unpatched vulnerabilities in immutable deployed contracts — team chose full shutdown over remediation, confirming unfixable security flaws remain in active contracts until September 1
TVL collapsed ~97% to ~$180K following April 27, 2026 shutdown announcement — near-zero liquidity means remaining depositors face significant withdrawal friction
July 2023 exploit on custom rBTC micro market lost ~10% TVL via exchange rate manipulation; a separate vulnerability class was later discovered in the same immutable system, triggering the 2026 shutdown
Frequently Asked Questions
Is Tropykus RSK safe to use?
What are the main risks of using Tropykus RSK?
What is Tropykus RSK's risk score breakdown?
How does Tropykus RSK compare to other Lending protocols?
Has Tropykus RSK ever been hacked or exploited?
Incident History
Get risk alerts before it's too late
Weekly grade changes, downgrade alerts, and new protocol risk findings. Free.