vfat.io

vfat.io receives a C+ risk grade (40/100) from Hindenrank, where lower scores indicate lower risk. Moderate risk — novel self-custody yield aggregation pattern with multi-chain reach, but downstream protocol exposure and shared smart contract codebase across 18+ chains create compounding risk layers vfat.io is a multi-chain yield aggregator that simplifies DeFi yield farming across 18+ blockchains. It uses a novel 'Sickle' smart contract wallet system that lets users enter, exit, compound, and rebalance yield positions in single transactions while maintaining self-custody. With approximately $32M in TVL, vfat automates complex farming strategies that would otherwise require multiple manual transactions. The Sickle contracts have been audited by Electisec and yAudit. However, as an aggregator, vfat introduces layered risk: users are exposed to both vfat's smart contracts and every underlying protocol their funds are deposited into.

The key risks identified for vfat.io are: (1) vfat deposits your funds into other DeFi protocols to generate yield. If any of those downstream protocols is hacked, your funds deposited through vfat are directly at risk with no insurance or backstop. (2) The Sickle smart contract wallet is deployed on 18+ chains using shared code. A bug in this shared code could theoretically be exploited on all chains simultaneously, multiplying potential losses. (3) No native token or clear decentralized governance structure — protocol upgrades and strategy management are controlled by a multisig, meaning a small group controls what strategies can access your funds.

vfat.io scores 40/100 across eight risk dimensions: Mechanism Novelty: 5/15, Interaction Severity: 8/20, Oracle Surface: 3/10, Documentation Gaps: 4/10, Track Record: 8/15, Scale Exposure: 3/10, Regulatory Risk: 4/10, Vitality Risk: 5/10. The highest risk area is Track Record at 8/15.

Among 116 rated Yield protocols on Hindenrank, vfat.io ranks #77 by safety (lowest risk score = safest). Its 40/100 risk score and C+ grade place it in the middle tier of Yield protocols.

vfat.io scores 8/15 on the Track Record risk dimension, indicating some history of security incidents or exploits. Higher scores reflect more severe or frequent incidents. Review the full risk report for details.