RIADeFi
Refusal file · staking

Why Ketju rejected Marinade (mSOL)

Memo v1Published by Ketju Research

A registry memo, published verbatim and versioned. Superseded versions are recorded, never edited away. A rejection is a judgment for Ketju's client base and thesis, not a universal safety claim. Not investment, legal, tax, or compliance advice.

The memo

REJECTED at the 2026-08-15 correction, sleeve cut from 15% to zero until the review answers its questions. The approval bought a specific machine: an algorithmic rebalancer that spread stake across 400+ validators and scored decentralisation into every allocation, the reason we picked mSOL over higher-yielding JitoSOL. That machine no longer exists. MIP-3, approved November 2024, retired it and moved all stake allocation to the Stake Auction Marketplace, a deterministic auction that ranks validators by yield (commission plus bid) and fills top-down, with decentralisation demoted from objective to side constraint. Marinade's own validators API, read 2026-08-14, shows 46 validators holding mSOL stake, the top five at 41.1% and two hosting providers (Amarutu, Allnodes) near 40% combined. The published kill criterion, validator set below 200, has fired. The comparison has inverted too: Jito's Steward now spreads stake in near-equal targets across the top 400 validators. The numbers weakened alongside the mechanism. mSOL liquid TVL fell from $1.43B in January 2025 to $181M at this review, per DefiLlama, and identifiable AMM depth is under $2M against the entry's $25M liquidity floor; the deeper routable figure that floor was measured on could not be reproduced, and the review holds it open. An $8M market sale broke the peg about 15% intraday on 2023-12-12 into deeper books than exist today. What still stands, stated with equal weight: five years on mainnet, no exploit, no loss of staked principal from any contract failure; audits by Kudelski, Ackee, Sec3, and Neodyme on a cadence that runs through 2026; a $250k Immunefi bounty. The 2023 depeg was a liquidity event, not a protocol failure, and delayed unstake worked throughout it. The SAM sandwich-validator episode was misbehaviour inside the delegated set, answered by the DAO blocklisting 50+ validators under MIP-9. Growth moved to Marinade Native ($212M) and the institutional Select line; the operation is healthy, the mSOL float is not. This demotion is not a finding of failure. It is the honest state of a file whose deciding argument described a mechanism that had already been replaced. The primary API's 46 validators are the validators holding active mSOL stake, not the larger eligible or tracked set; the original below-200 diversification trigger therefore fired. Rejection, not indefinite review, follows until measurable reopening conditions are met.

What would reopen the file

  • Reopen only after active mSOL stake is distributed across at least 200 validators for two consecutive quarters, with the top five below 20% and any one hosting provider below 20%
  • Reopen only after a proposed-size mSOL exit quotes below 50 basis points and delayed unstake completes within 7 days in three monthly tests
  • Reopen only while mSOL liquid TVL exceeds $250M and independently reproducible executable exit depth exceeds the $25M liquidity floor
  • Reopen only after the program upgrade authority, pause powers, and Council signers and 4-of-7 threshold are reproduced from current on-chain state
  • Any active-validator count below 200, mSOL/SOL discount beyond 2% for 48 hours, delayed unstake beyond 7 days, or unaudited delegation change keeps the protocol rejected

Facts on file

Verdict
Rejected
Exposure
staking
Chains examined
Solana
Instruments
MSOL
Memo version
v1
Reviewed
Next review

← All published refusals