WebacyStablecoin Universe
OverviewAlertsBackingYieldUpcomingEventsVault IncidentsGraveyardSupply FlowsStablecoin BurnsFreeze IntelligenceModelDocsVault UniverseEcosystemVault StatsProtocolsAbout
← Back to vaultsDocumentation

Aave V3 USDC Lender

0xdb92b89ca415c0dab40dc96e99fc411c08f20780View on depeg monitor →

polstrategy vault45.5 (medium)Needs attention

Last scored: 6/10/2026, 3:59:51 AM

Low risk45.5/100High risk

Top 3 risk drivers

  1. Upgrade risk70 pts(+7.00 to score)
  2. Strategy50 pts(+2.50 to score)
  3. Protocol risk15 pts(+2.25 to score)

Share price: $1.1457

Score history (30d, 74 snapshots)+40 pts since 2026-03-25
646050100

Alert History

Loading alert history…

⚠ List with caution

Moderate risk — recommend disclosing risk tier to users.

What's in this vault

Deposits

USDC

What this vault is exposed to

You deposit USDC. Here's what backs your position.

USDC
100.0%
$4K

Source: inferred

Rating breakdown

Sub-scores sorted by contribution. Each bar is relative to the top contributor.

Webacy deployer100
Upgrade70
Strategy50
Webacy code40
audit_recency38.3
Asset25
oracle20
Protocol risk15
Webacy contract5

Score 46 (MEDIUM). Primary drivers: upgradeable contract, complex strategy, external protocol risk. Active signals: prior exploit.

Risk flags

3 audits on record · last 2.4yr ago
OpenZeppelin, Trail of Bits, SigmaPrime
aave_liq_proximity_riskExploit historyUpgradeable

Exploit history

via DeFiLlama

Incidents

3

Total lost

$22.8M

Worst incident

$11.5M

EcosystemProtocol LogicFlashloan Misconfiguration ExploitFlashloan Price Oracle Attackmisconfigured Fulcrum sUSD strategy

Funding regime

Perp funding rate data (healthy vs compressed/inverted) will indicate when vault yield is from stable vs stressed conditions. Coming soon.

Webacy code analysis (4 findings)

Security findings from static analysis. Critical issues (reentrancy, unchecked calls, etc.) may require attention.

delegatecall loop
c84d9fb2
dcfe5e42
8d03ea17
assembly
f428ef68
552079dc
is proxy
external function
8d03ea17
ERC20(_token).approve(_contract, _amount)