WebacyStablecoin Universe
OverviewAlertsBackingYieldUpcomingEventsVault IncidentsGraveyardSupply FlowsStablecoin BurnsFreeze IntelligenceModelDocsVault UniverseEcosystemVault StatsProtocolsAbout
← Back to vaultsDocumentation

USDC CompoundV3 Lender

0xcacc53bacce744ac7b5c1ec7eb7e3ab01330733bView on depeg monitor →

arbstrategy vault44.4 (medium)Needs attention

Last scored: 6/10/2026, 3:59:51 AM

Low risk44.4/100High risk

Top 3 risk drivers

  1. Upgrade risk70 pts(+7.00 to score)
  2. Strategy50 pts(+2.50 to score)
  3. Protocol risk15 pts(+2.25 to score)

Share price: $1.2284

Score history (30d, 74 snapshots)+38 pts since 2026-03-25
644050100

Alert History

Loading alert history…

⚠ List with caution

Moderate risk — recommend disclosing risk tier to users.

What's in this vault

Deposits

USDC

What this vault is exposed to

You deposit USDC. Here's what backs your position.

USDC
100.0%
$23K

Source: inferred

Rating breakdown

Sub-scores sorted by contribution. Each bar is relative to the top contributor.

Upgrade70
Strategy50
Webacy code40
Asset25
oracle20
Protocol risk15
Webacy contract5

Score 44 (MEDIUM). Primary drivers: upgradeable contract, complex strategy, external protocol risk. Active signals: prior exploit.

Risk flags

Exploit historyUpgradeable

Recursive lending & looping

Loop exposure

0.0%

Morpho looping markets

ARB → USDC
$0
EZETH → USDC
$0
GMX → USDC
$0
RETH → USDC
$0
RSETH → USDC
$0
TBTC → USDC
$0
WBTC → USDC
$0
WEETH → USDC
$0
WETH → USDC
$0
WSTETH → USDC
$0
wBTC → USDC
$0
wstETH → USDC
$0

Exploit history

via DeFiLlama

Incidents

3

Total lost

$22.8M

Worst incident

$11.5M

EcosystemProtocol LogicFlashloan Misconfiguration ExploitFlashloan Price Oracle Attackmisconfigured Fulcrum sUSD strategy

Funding regime

Perp funding rate data (healthy vs compressed/inverted) will indicate when vault yield is from stable vs stressed conditions. Coming soon.

Webacy code analysis (4 findings)

Security findings from static analysis. Critical issues (reentrancy, unchecked calls, etc.) may require attention.

assembly
f428ef68
552079dc
is proxy
is blacklisted
bbf376b5
External boolean calls without try/catch or validation in '_harvestAndReport'
external function
8d03ea17
ERC20(_token).approve(_contract, _amount)