TL;DR
Neutrl issues NUSD, a synthetic dollar backed by OTC discounts on locked-token deals and delta-neutral perp hedges held at Fireblocks and Copper. The audit list is genuinely strong and every core contract is non-upgradeable. That is not what decides this report. Nine core contracts, including the AssetReserve that holds collateral and the AssetLock that holds 19.4% of all NUSD, answer to a single externally-owned account with no bytecode behind it. This is not configuration drift. The access-control library Neutrl deploys is named SingleAdminAccessControl, and its own source describes it as "a contract that provides a single admin role." Supply is down 19.8% in thirty days and 23.8% since our July report, the peg has held, and the real retail exit is the USDC leg of one Curve pool, about $1.59M against $53.65M outstanding.
Disambiguation before anything else: two tokens trade under the symbol NUSD. Neutrl's is the $53.6M Ethereum-only asset at 0xE556ABa6fe6036275Ec1f87eda296BE72C811BCE. Nexus USD is a separate $2.3M multichain token from an unrelated protocol. Every figure below was matched to the Neutrl contract address, not to the ticker.
Checklist
Audits & contracts. Five engagements are listed on Neutrl's audits page and all name real firms that really engaged: a Spearbit review in July 2025, a second Cantina-branded review in July 2025, a Sherlock competitive audit in August 2025, a Spearbit follow-up on minor changes in September 2025, and a Spearbit review of Instant Unstaking in March 2026. One nuance the count hides: Spearbit and Cantina are the same organization, and all four non-Sherlock reports are hosted as Cantina files, so this is five engagements across two independent firms rather than three. The engineering holds up under inspection. All nine published core contracts carry real bytecode with zero in both the EIP-1967 implementation slot and the beacon slot, so none of them is a standard upgradeable proxy. That closes a question the July report left open. The audits cover Solidity. They cannot cover the custodial leg, which is where the collateral actually sits.
Admin control. This is the finding, and it is now closed. hasRole(DEFAULT_ADMIN_ROLE, 0x51de41ec...) returns true and owner() returns the same address on all nine core contracts: NUSD, sNUSD, Router, AssetReserve, StableMinter, Redeemer, AssetLock, YieldDistributor and InstantUnstaking. eth_getCode on that address returns 0x. Zero bytes. It is an ordinary private key at nonce 42, and probes for getThreshold, getOwners and getMinDelay all revert, so it is neither a Safe nor a TimelockController.
Two details make this worse rather than better. First, Neutrl does operate a multisig. A 2-of-4 Gnosis Safe v1.4.1 at 0xccda7b3e... owns both LayerZero OFT adapters. The capability exists in this very deployment and has not been applied to a single contract that touches user money. Second, the single-key arrangement is deliberate rather than accidental. The access-control base class in the verified source is named SingleAdminAccessControl and is documented in-source as "a simplified alternative to OpenZeppelin's AccessControlDefaultAdminRules."
Credit where it is due: today that key exercises restraint. It does not hold MINTER_ROLE, REDEEMER_ROLE or DENYLIST_MANAGER_ROLE. MINTER_ROLE sits on the documented StableMinter contract and REDEEMER_ROLE on the Redeemer, which is good hygiene. But getRoleAdmin(MINTER_ROLE) is DEFAULT_ADMIN_ROLE, and grantRole blocks only the admin role itself, so that key can grant itself minting, redemption or denylist authority in a single transaction. NUSD exposes burn(address,uint256), which burns from an arbitrary holder. There is no timelock, so restraint is the only control in place, and Neutrl's docs publish eleven contract addresses with no governance address at all.
Oracle. Neutrl's monitoring vendor describes Chainlink pricing plus the Euler ERC-7726 standard, chosen to remove off-chain signing from the mint path. That is a sensible design from a named source, but it is a vendor blog rather than a primary spec, Neutrl's own smart-contract-architecture page does not mention oracles at all, and I did not trace the oracle contract on-chain. The July report scored this green. On this run's evidence that is not supportable. Treat as reported, not confirmed.
Liquidity & exit. Redemption is open only to whitelisted, KYC-verified participants calling redeem() on the Router. There is an instant path when the AssetReserve holds enough collateral and a queue monitored by authorized keepers when it does not, with no timeline stated, only eventual execution. A maxRedeemPerBlock cap exists but its value is undisclosed. The AssetReserve holds $1.46M of USDC on-chain, 2.7% of supply. The rest is at custodians.
If you are not whitelisted, your exit is the secondary market, and it is thinner than the headline number suggests. DexScreener shows exactly one DEX pair for NUSD anywhere: the Curve NUSD/USDC pool. Its $3.54M TVL is both legs added together, and only one leg is your exit. On-chain the pool holds 1,952,719 NUSD against 1,586,446 USDC. The stablecoin you could actually withdraw is that $1.59M, which is 2.96% of supply, not 6.6%. Pendle, Morpho and Strata hold roughly $7M more, but unwinding those leaves you holding NUSD, not dollars.
Yield: real vs emission. The yield is real. It comes from discounted OTC purchases of locked tokens and from basis and funding capture, not from a token subsidy, and that is a genuine mark in Neutrl's favour. Two qualifications. None of it settles on-chain, so an outside observer cannot audit the return, only the resulting price per share, which reads 1.063534 NUSD today. And an incentive layer does sit alongside the real yield: the AssetLock contract pays points toward future emissions in exchange for locking, which is a claim on future supply even though it is not funding today's rate. Pendle prices PT-sNUSD to 24 September 2026 at 8.93% implied with a 30-day mean of 9.35%, and Strata's senior NUSD tranche pays 4.14%. I could not read a headline sNUSD APY from Neutrl itself this run.
Holder concentration. The July report left this unmeasured. Measured directly on-chain now, the picture is stark. 65.27% of NUSD supply sits inside the sNUSD staking vault and a further 19.44% sits inside AssetLock, so 84.72% of all NUSD is held by two contracts that answer to the same single key. Free float outside them is 8,198,197 NUSD, 15.28% of supply, and the Curve pool holds under a quarter of that. AssetLock's enforceLock flag reads true on-chain right now, meaning that 19.44% cannot be withdrawn early, and setEnforceLock is gated on DEFAULT_ADMIN_ROLE. What remains genuinely unmeasured is per-wallet concentration within the free float, because both Nansen and Etherscan put top-holder data behind paid tiers.
Track record. Two incidents in 2026. On 4 February an attacker used a Morpho flash loan against Pendle's NUSD Standardized Yield integration, exploiting a redeem path that let any caller set burnFromInternalBalance and redeem shares they did not own, taking 45,907.95 USDC. That flaw sat in the integration wrapper rather than Neutrl's core, but the loss landed on NUSD LPs and the SY reserve. On 18 March the frontend was hijacked at the DNS provider and users were pointed at a malicious interface harvesting wallet approvals. Contracts were paused, no protocol funds were lost, and the team migrated to a new domain and a new DNS provider, as part of a coordinated registrar-social-engineering campaign that also hit Cow, Steakhouse and HypurrFi. I found no further incidents through 11 August 2026, checked against an incident database as well as news search.
The domain migration needs one precise correction, because it is easy to overstate. The old names have not gone away. neutrl.fi and docs.neutrl.fi still resolve, to Cloudflare, and still answer HTTPS, returning error 522, which means the zone is live and only the origin is switched off. Search engines still surface docs.neutrl.fi links. The current site is neutrl.finance, which redirects to www.neutrl.finance and returns 200. A name that was hijacked once is still resolving and still being linked to.
Worst case
The admin key leaks. Whoever holds it grants themselves MINTER_ROLE in one transaction and prints NUSD against nothing, or grants REDEEMER_ROLE and burns balances out of holders' wallets, or exercises whatever withdrawal authority the AssetReserve owner has over the collateral. There is no timelock, so there is no window in which anyone watching could react, and no multisig on these contracts, so there is no second signature to fail. The same key can grant itself denylist authority and freeze you while it works, and it can hold AssetLock's 19.44% of supply shut through enforceLock. A holder outside the redemption whitelist has one escape, and it is $1.59M of USDC in a single Curve pool against $53.65M outstanding. It will not absorb a crowd. The March hijack showed the team can pause quickly, which helps, but the pause authority traces back to the same key.
A softer and more likely path also exists. Supply falls roughly 20% a month, funding stays compressed, the reserve runs thin, the redemption queue lengthens with no contractual deadline, and the Curve pool drifts off peg while whitelisted participants exit at par first.
Bottom line
Avoid, unchanged from the 4 July report, and the reason is now firmer rather than merely repeated. Last time the admin question was open. It is closed, and the answer is worse than "unconfirmed": one plain private key controls every contract that touches the money, by deliberate design, while a working 2-of-4 Safe sits in the same deployment guarding only the bridge adapters. The audits are real, all nine core contracts are non-upgradeable, the peg is holding at $0.99858, and the yield is honest yield rather than emissions. None of that offsets a single key over the reserve on a fund-loss surface. Three dimensions are red, and worst-flaw-wins gives the answer.
If you already hold NUSD and are not on the redemption whitelist, the number to watch is not the $3.54M pool headline. It is the $1.59M of USDC on the other side of it, and it is shrinking alongside supply.
Data appendix
- TVL / supply: NUSD circulating $53,578,351 at $0.99858 (stablecoins.llama.fi, id 346, Ethereum only). On-chain
totalSupply53,654,807.59 NUSD. Changes: 1d -1.07%, 7d -8.59%, 30d -19.80%, and -23.8% against the ~$70.3M in the 2026-07-04 report. The daily series confirms an unbroken decline (06 Aug 55.94M, 09 Aug 54.53M, 11 Aug 53.65M). - sNUSD:
totalAssets35,022,072.95 NUSD;totalSupply32,929,905.22 shares; price per share 1.063534. The vault's NUSD token balance is 35,023,498.80, the small excess being yield not yet counted intototalAssets. That is 65.27% of NUSD supply staked. I could not reconcile this with the ~$119M sNUSD TVL and ~$170M protocol TVL carried in the July report; today's measurement shows DeFiLlama circulating is effectively equal to on-chain total supply and the staked balance is a subset of it, so a $119M vault could not have sat inside a $70M supply. What those prior figures measured: refresh. - DeFiLlama protocol page: still absent.
neutrl,neutrl-protocol,neutrl-nusdandnusdall return "Protocol not found". Only the stablecoin entry exists, so there is no protocol-level TVL series to cite. - Audits: Spearbit review, July 2025. Cantina review, July 2025. Sherlock competitive, August 2025. Spearbit follow-up on minor changes, September 2025. Spearbit, Instant Unstaking, March 2026. All five PDFs are hosted as Cantina reports; Spearbit and Cantina are one organization. Source: docs.neutrl.finance/resources-and-ecosystem/audits. Bug bounty: not listed, refresh.
- Upgradeability: all nine core contracts have non-empty bytecode with EIP-1967 implementation slot and beacon slot both zero, so none is a standard upgradeable proxy. Bytecode sizes range from 5,512 bytes (AssetReserve) to 22,699 (sNUSD). A non-standard upgrade pattern cannot be excluded from storage reads alone.
- Admin / governance:
0x51de41ec06e779715d7fb71ef83a736cfc903217, zero bytecode, nonce 42. Holds DEFAULT_ADMIN_ROLE andowner()on NUSD0xE556ABa6..., sNUSD0x08EFCC2F..., Router0xa052883e..., AssetReserve0x16C2C5Ab..., StableMinter0xFF0B98C0..., Redeemer0xE0De5A15..., AssetLock0x99161BA8..., YieldDistributor0x77D135A2..., InstantUnstaking0x4Bb8F67D....getRoleAdmin(MINTER_ROLE)= DEFAULT_ADMIN_ROLE. MINTER_ROLE held by StableMinter, REDEEMER_ROLE by Redeemer; the admin EOA currently holds neither, nor DENYLIST_MANAGER_ROLE, butgrantRoleis admin-gated and blocks only the admin role itself. Admin handover is two-step (transferAdminthenacceptAdmin); the admin role cannot be granted, revoked or renounced externally. Base class:SingleAdminAccessControl(verified source, AssetLock). - The one multisig: Gnosis Safe v1.4.1 at
0xccda7b3ead40c897e0befad4d9cb8e55cf5a70d2, threshold 2, four owners. It owns the NUSD OFTAdapter0x8E14D37b...and the sNUSD OFTAdapter0x2a3ac593...and nothing else in the published set. - AssetLock: holds 10,433,111.38 NUSD, 19.44% of supply. Verified source exposes
lockAsset,unlockAsset,setLockDuration(MANAGER_ROLE) andsetEnforceLock(DEFAULT_ADMIN_ROLE).enforceLock()currently reads true, so those locks cannot be exited early. Lock terms of 6 to 12 months earning points toward future emissions are described by secondary sources, not by the docs pages read this run. - Custody: Fireblocks and Copper, named in docs.neutrl.finance/protocol-mechanics/smart-contract-architecture. Ceffu, cited in the July report, does not appear on that page this run. Balances held at custodians: not independently verifiable, refresh.
- Oracle: Chainlink plus Euler ERC-7726, per Hypernative's write-up of Neutrl's settlement architecture. Not stated on Neutrl's architecture page and not verified on-chain, refresh.
- Holder concentration: sNUSD vault 65.27%, AssetLock 19.44%, combined 84.72%; free float 8,198,197 NUSD (15.28%); Curve pool 1,952,719 NUSD (3.64% of supply, 23.8% of free float); SY-NUSD 235,466. Per-wallet concentration: refresh, Nansen and Etherscan top-holder endpoints both returned 403/Pro-gated.
- Exit liquidity: Curve NUSD/USDC total $3,537,999, base APY 0.69%, 30d mean 0.35% (DeFiLlama pool
4fbc98be, underlying verified as0xE556ABa6...and USDC). Pool composition read on-chain: 1,952,719 NUSD plus 1,586,446 USDC, cross-checking DeFiLlama's TVL to within 0.03%. This is the only DEX pair for NUSD on DexScreener. Pendle sNUSD $4,294,896, PT to 24 Sep 2026 implied 8.93%. Morpho Blue sNUSD $1,207,837. Strata srNUSD $1,407,417 at 4.14%, jrNUSD $296,428 at 1.46%. AssetReserve on-chain USDC $1,460,666. - Redemption: whitelisted and KYC-gated,
redeem()on the Router, instant path when reserves allow, otherwise an order queued for authorized keepers with no stated timeline, plus an undisclosedmaxRedeemPerBlock. The redemption doc page states no cooldown; the 10-day sNUSD unstaking cooldown carried from the July report appears on neither the redemption nor the FAQ page read this run: refresh. - Recent-news scan: 2026-02-04, Pendle SY-NUSD integration exploit, tx
0x047fcfa2cfb51879f19769dd25e2768be42985f9c2d8f483f2a0c18703834061, attacker0x1f36068728b86ae4d65249f6f1c8c62cfaeb0675, SY-NUSD proxy0x29ac34026c369d21fe3b2c7735ec986e2880b347, 45,907.95 USDC. 2026-03-18, DNS hijack of the frontend, contracts paused, funds reported safe, domain and DNS provider migrated. No further incidents found through 2026-08-11. A July 2026 Ethena collaboration is reported by secondary sources but could not be confirmed against a primary one: refresh. - Domain state, verified today:
neutrl.fianddocs.neutrl.firesolve to Cloudflare (104.21.29.149, 172.67.149.103) and return HTTP 522, so the zone is live and the origin is offline.neutrl.financereturns 307 towww.neutrl.finance, which returns 200;docs.neutrl.financereturns 200 from Vercel.
Maintained monthly. Methodology: DeFi Research Instruction v2.