Executive Summary: Pendle

Safety Rating: YELLOW_GREEN

Overall Score: 7.3/10 | Confidence: 0.78 | Data Completeness: 0.75 "Missing live admin addresses, multisig threshold, signer identities, timelock duration, quorum, voting thresholds, and execution-process data limit governance attack analysis."

Scores by Dimension

What This Protocol Does

Pendle is a yield trading protocol. It lets users separate a yield-bearing asset into principal and yield claims, then trade those claims in Pendle markets. "Pendle is a yield-derivatives protocol for managing and trading future yield." Boros extends Pendle into margin-based interest-rate and funding-rate markets. "Boros is a separate Pendle product for interest-rate swaps and funding-rate markets."

Key Strengths

• Pendle has unusually broad audit coverage across V2 core, liquidity mining, oracles, and MarketV6. "Pendle has unusually broad audit coverage across main V2 contracts, liquidity mining, oracle libraries, V2 core, and MarketV6"
• Later audit reports commonly show fixes, corrections, or verified resolutions. "later reports commonly record corrected or verified fixes"
• Captured DeFiLlama data shows large protocol scale, with TVL around $1.55B. "TVL near $1.55B"
• Contracts and repositories are presented as open source, supporting outside review. "All of Pendle's smart contracts are open source"
• TWAP-based oracle and mark designs reduce exposure to instant price spikes. "TWAP-based oracle and mark designs reduce sensitivity to instantaneous manipulation."

Key Risks

• Pendle depends on external yield-bearing assets and can inherit failures from those systems. "Pendle explicitly depends on many external yield primitives"
• Boros has no insurance fund, and extreme losses can involve ADL or bad-debt sharing. "no insurance fund, ADL, and possible bad-debt sharing"
• Governance and admin controls can affect upgrades, fees, treasury routing, pausing, and market parameters. "The admin surface is broad enough to affect upgrades, fees, treasury routing, pausing, and market parameters"
• Multi-chain deployment adds bridge, sequencer, and chain-specific risks. "expands bridge, sequencer, and chain-specific failure surfaces"
• Audit breadth is strong, but captured audit files have unverified publication provenance and live deployments were not fully verified. [07-cross-analysis.md:"audit breadth is strong, but the code report says all captured audit artifacts have "unverified publication provenance""]

Critical Findings

• No critical findings identified in the reviewed source material. "No critical findings were identified in the source material reviewed."
• Historical high-severity findings cited by the code report were reported as fixed or verified, not as open critical issues. "Status: resolved and verified"

Recommendation

Pendle is suitable for experienced DeFi users who understand yield assets, maturity-based markets, and cross-chain risk. The protocol has strong maturity signals, high captured TVL, broad audit coverage, and open-source transparency. "Pendle's composite risk profile is that of a mature, high-TVL, heavily reviewed yield-derivatives protocol" Users with low risk tolerance should be cautious, especially with Boros margin markets, less liquid markets, and markets tied to unfamiliar underlying assets. "its yield-tokenization, maturity, multi-chain, and Boros margin surfaces make it structurally more complex than simpler spot AMMs or lending markets."

Report Sections

• Protocol Overview
• Code Security
• Economic Security
• Social & Team
• Governance
• Cross-Risk Analysis