Skip to content
PROTOCOL RESEARCH

Tydro risk

Kraken/Ink Foundation white-label Aave v3 lending market on the Ink L2: battle-tested codebase and a cleanly handled oracle scare, but unnamed auditors, an unverified admin signer set, points-driven deposits, and an 88 percent TVL drawdown from the $506M January peak gate it to caution.
CautionResearched Jul 2, 2026

Scorecard

watch: Audits & contractsAave v3 core code is heavily audited, but Tydro's FAQ names no firm for its own deployment and DeFiLlama lists zero audits; deployment-specific reports are _refresh_.
watch: Admin controlPoolAdmin paused the whole pool for six days in May 2026; the oracle upgrade went through a 48-hour timelock, but the signer set behind the admin roles is unverified.
watch: OracleChainlink Data Feeds since the May 10 unpause; the prior provider (Chaos Labs) was attacked May 4, 2026. No bad prices reached the pool.
watch: Liquidity & exitExit is utilization-gated and was fully frozen for six days during the pause; TVL fell from a $506M ATH (Jan 15, 2026) to $62M, roughly 88 percent.
watch: Yield (real vs emission)Borrow interest is real but modest; the actual draw is INK points, with the airdrop confirmed for roughly Jul-Sep 2026 and conversion terms unconfirmed.
watch: Holder concentrationNo protocol token; depositor concentration on a young chain is unknown and likely lumpy. _refresh_.
watch: Track recordLive since Oct 15, 2025, no exploit and no bad debt, but under nine months and one full-market halt; untouched by the April 2026 Aave-mainnet rsETH bad debt.
🟢 strong🟡 watch / caveat🔴 weak / fund-loss risk
Verdict is a gate (worst flaw wins), not an average. Our read, not financial advice.

Live facts

auto-sourced now
TVL$56.6M
30d↑4%
Audits1
Last hacknone

DeFiLlama + our exploits feed. Cross-check the dated report against today.

TL;DR

Tydro is not a perp venue, whatever the watchlist label says; the perp DEX on Ink is Nado. Tydro is a white-label instance of Aave v3, deployed on Ink, the Kraken-incubated OP-stack L2, live since October 15, 2025. Non-custodial lending: supply, borrow, aTokens, health factors, the standard Aave machine with Ink branding and INK-points incentives on top. The codebase is the most battle-tested in lending, which is the good news. The bad news is everything around it: admin keys of unknown composition, a May 2026 oracle-provider attack that froze the whole market for six days, and a deposit base that peaked at $506M in mid-January and now sits at $62M because the capital was there for points, not for the thin lending interest. No user funds have been lost. That record is real but short, and it already includes one full halt.

Checklist

Audits & contracts. The underlying Aave v3 code has years of audits and formal verification behind it and no core exploit. Tydro's FAQ says its contracts have been "audited and formally verified by third parties" but names no firm and links no report for the Ink deployment itself, and DeFiLlama's registry lists zero audits for Tydro. Config and listing changes are where white-label forks go wrong, and that layer is unverified. refresh for named firms.

Admin control. The FAQ documents a PoolAdmin that can pause all pool interactions and an EmergencyAdmin that can pause individual reserves. Those powers are real, not theoretical: the whole market was paused for six days in May 2026. One partial reassurance surfaced during the incident: the Chainlink oracle upgrade had to sit in a 48-hour timelock before markets could resume, so at least that class of change is timelocked. But who signs for these roles, whether it is the Ink Foundation, Kraken-adjacent entities, or a mixed multisig, and whether the timelock binds all admin actions or only oracle swaps, is not confirmed anywhere public we found. Aave DAO governance does not control this deployment. refresh on signer set and timelock scope.

Oracle. On May 4, 2026 Tydro halted all markets after Chaos Labs, its then oracle provider, reported an attack on the provider with patterns the team described as consistent with a nation-state attacker. No bad prices were pushed on chain and no positions were hit. Tydro executed a migration to Chainlink Data Feeds on May 8, the 48-hour timelock expired late on May 9, and markets unpaused around 00:00 UTC on May 10 with a 4-hour no-liquidation grace period; Tydro confirmed the full migration on May 14. RedStone was named as a second push-feed provider being onboarded, though we found no evidence its feeds went live during the incident. The response was competent. The event still counts: the oracle stack was the weak link once already.

Liquidity & exit. Two separate exit risks. First, the normal Aave one: withdrawals need idle liquidity, so a high-utilization reserve can make you wait. Second, the demonstrated one: during the May pause nobody could withdraw for six days. Add the trend line, TVL down roughly 88 percent from the January peak as points farmers rotate ahead of the INK distribution, with most of that outflow in the last 90 days, and you should assume exit liquidity keeps thinning.

Yield: real vs emission. Supply interest comes from real borrow demand plus flash-loan fees (0.09 percent of flash-loan volume per the FAQ), but on a $62M market it is modest; current rate levels refresh. The headline attraction is INK points accruing on supply and borrow balances. The airdrop itself is now confirmed: Ink has named Tydro users as recipients, ecosystem coverage points to distribution between July and September 2026, and a $25M backstop from Kraken has been reported. Conversion terms and the exact date remain unconfirmed. Classic pre-TGE setup: the yield you can bank today is small, the yield you are betting on is a promise with a floor.

Holder concentration. Tydro has no token of its own, so the question shifts to depositor concentration. On a young L2 with heavy incentive campaigns, a handful of large farmers usually dominate, and their exit is what took TVL from $506M to $62M. Actual top-depositor share is unquantified. refresh.

Track record. Eight and a half months. Zero exploits, zero bad debt, one full-market halt handled without loss. When the April 2026 rsETH exploit at KelpDAO saddled Aave on Ethereum mainnet with nine figures of bad debt, Tydro was untouched and contributed to the DeFi United relief fund. That is a decent short record, not a long one, and the chain underneath (Ink) is itself young.

Worst case

The realistic bad path is not the Aave v3 core breaking. It is an admin-layer or config failure: a compromised or careless PoolAdmin key upgrades a contract or lists a bad asset, or a repeat oracle-provider incident this time does push a bad price before anyone pauses. Either way liquidations fire against wrong numbers or funds move where they should not, and there is no insurance backstop and no Aave DAO safety module behind this deployment. The mild version is a rerun of May: your funds are safe but frozen while you watch. Size positions so a multi-week freeze would be an annoyance, not a crisis.

Bottom line

Caution. The core contracts are the best-audited in the category and the team passed a live-fire oracle test without losing a dollar, behind a demonstrated timelock. But you are trusting an unnamed audit trail and an unverified admin key set on a young chain, the deposit base is mercenary and shrinking, and the real reason anyone is here is an INK airdrop whose terms do not exist yet. Fine for a small, monitored position where the points bet is understood as a bet. Not a place to park size.

Data appendix

  • TVL: $62.4M (DeFiLlama, slug tydro, 2026-07-02). ATH $506.1M on Jan 15, 2026; peak supplied including borrowed roughly $849M (DeFiLlama series). 90-day high was $410M, so most of the drawdown landed after early April.
  • Model: White-label Aave v3 lending market on Ink; launched Oct 15, 2025 (The Block; Aave's own launch post). Assets at launch: wETH, kBTC, USDG, USDT0, GHO.
  • Audits: FAQ claims third-party audits and formal verification, no firms named; DeFiLlama lists zero audits for Tydro; underlying Aave v3 audits are public. Tydro-deployment-specific reports and firm names: refresh.
  • Admin/governance: PoolAdmin (full-pool pause) and EmergencyAdmin (per-reserve pause) documented in FAQ; a 48-hour timelock demonstrably applied to the May 2026 oracle upgrade; signer composition, multisig threshold, timelock scope: refresh. Not governed by Aave DAO.
  • Oracle: Chainlink Data Feeds live at the May 10, 2026 unpause (DeFiLlama oracle registry: Chaos Labs primary through May 11, Chainlink from May 12; Tydro confirmed full migration May 14). Prior provider Chaos Labs attacked May 4, 2026; markets paused six days; no losses (tydrohq X timeline, The Defiant).
  • Incentives: INK airdrop confirmed for Tydro users; distribution expected Jul-Sep 2026 per ecosystem coverage; reported $25M Kraken backstop; terms refresh.
  • Holder concentration: No protocol token; top-depositor share: refresh.
  • Recent-news scan: May 2026 oracle incident resolved with no bad debt; April 2026 rsETH/KelpDAO exploit hit Aave mainnet, not Tydro, and Tydro joined the DeFi United relief contribution; June to July 2026 chatter is INK points farming (Tydro points Season 2 live) ahead of the expected Q3 distribution; no Tydro security events found. Note: a lookalike site tydro-v2.com serves a live Tydro-branded page but is not linked from the official site, whose only app domain is app.tydro.com; treat as possible phishing until verified.

Maintained monthly. Methodology: DeFi Research Instruction v2.

← all protocols