Research summary
ADVERSE RESEARCH ASSESSMENT because Concrete is programmable vault infrastructure whose owner and strategy set determine the actual investment. An ERC-4626 share is not a uniform risk class: one Concrete vault may route to Morpho, another to Pendle or a cross-chain strategy, and the factory can support synchronous or asynchronous exits. The adviser would be delegating allocation, strategy admission, deallocation order and incident response to privileged operators while retaining responsibility for every inherited protocol exposure. The current audit record is substantial and shows findings were remediated, but it also makes the control tradeoff concrete: owner-only strategy retirement, accepted reliance on trusted strategies, deliberate withdrawal reverts when a strategy fails, and preview/accounting paths that required multiple fixes. Reject at the protocol level. Reopen only a named vault whose live strategies, authorities, audits and proposed-size exit are independently pinned and whose allocation rule adds a defensible benefit over direct approved positions.
Observable review triggers
- Any live strategy, proxy implementation or privileged module is not mapped to a current audit and verified commit
- Any underlying strategy lacks its own current approval or exceeds its approved allocation limit
- A strategy revert, bridge delay or epoch process prevents a proposed-size withdrawal inside the written time limit
- Any unannounced strategy, owner, signer threshold, timelock, fee or deallocation-order change
- Vault accounting differs from independently reconciled underlying balances by more than 10 basis points
Facts on file
- Research assessment
- Adverse
- Client selection
- Not considered
- Exposure
- stable lending
- Chains examined
- Ethereum
- Reviewed
- Next review