Onboarding Asset Risk Review
Summary
LlamaRisk supports the onboarding of syrupUSDG on Aave V4 Global Dollar Hub, contingent upon the successful bootstrapping of sufficient market liquidity. syrupUSDG is a yield-bearing stablecoin issued through Maple’s immutable ERC-4626 vault architecture, where each share represents a pro rata claim on the pool’s net asset value. The vault is backed by overcollateralized institutional loans underwritten and managed by Maple Direct, with yield accruing from active loan exposure and, potentially, from future DeFi strategy allocations.
As of July 14, 2026, the syrupUSDG vault manages approximately 90.7M USDG, with 76.07M syrupUSDG circulating on Ethereum and an additional 12.52M locked in escrow and bridged via Chainlink CCIP. The credit book is primarily BTC-collateralized, representing approximately 90% of outstanding exposure at a portfolio-weighted collateralization ratio of approximately 1.46x. Current considerations include the absence of Ethereum DEX liquidity and reliance on Maple’s off-chain underwriting, custody arrangements, and operational processes for collateral management. Additionally, multisig controls are recommended for GovernorTimelock-controlled wallets unless these roles are secured through MPC-based custody.
1. Asset Fundamental Characteristics
1.1 Asset
According to the Asset Classification Framework (AAcA), syrupUSDG is classified as a yield-bearing stablecoin backed by overcollateralized institutional loans underwritten and managed by Maple Direct. It is an immutable ERC-4626 vault whose shares represent a pro rata claim on the pool’s net asset value. As yield accrues, the value of each share increases continuously, making syrupUSDG a non-rebasing token. The vault currently manages 90.7M USDG through a single syrupUSDG OpenTermLoan strategy. Approximately 3.11M USDG of this balance is held as unallocated liquidity for redemptions, which may be deployed in the future across DeFi protocols such as Aave to generate additional yield alongside returns from active loans.
1.2 Architecture
syrupUSDG reuses the same Maple pool architecture as syrupUSDC and syrupUSDT. The vault delegates all administration, accounting, and operational logic to a surrounding set of modules, including the PoolManager, WithdrawalManager, one or more loan-managing strategies (the credit book), and a shared PoolPermissionManager, which enforces access control.
Minting
User deposits are routed through the SyrupRouter rather than by calling the Pool directly. The router checks the caller against the PoolPermissionManager before forwarding the USDG into the vault.
First-time lenders call authorizeAndDeposit(), providing a Maple-signed authorization that records their permission bitmap. Subsequent deposits use the standard deposit() function. The Pool transfers the specified USDG and mints syrupUSDG shares based on the current exchange rate, with each share appreciating as yield accrues. The exchange rate used for deposits convertToShares is defined as:
\text{convertToShares}=\frac{\text{totalSupply}}{\text{totalAssets}}
Redemption
Since the pool assets are lent out at any moment, exits are not instantaneous and are handled through a FIFO queue managed by the WithdrawalManager. Redemption follows a two-step request-then-process flow. The lender calls requestRedeem(), transferring shares to the WithdrawalManager, where they are queued for redemption. Pending requests can be reduced or canceled, but the standard ERC-4626 withdraw() path is disabled. Maple periodically calls processRedemptions(), processing requests in queue order using available liquidity.
Filled requests are redeemed for USDG at the current exchange rate and transferred directly to the lender, while partially filled requests remain in the queue until sufficient liquidity is available.
The exchange rate used for withdrawals convertToExitAssets() is defined as:
\text{convertToExitAssets}=\frac{\text{totalAssets}-\text{unrealizedLosses}}{\text{totalSupply}}
So lenders redeeming while unrealizedLosses are non-zero receive fewer USDG per share than if they wait for recoveries to be realized. Maple maintains a liquidity buffer, so redemptions typically settle within two days but can take up to 30 days if liquidity must be freed from outstanding loans. Alternatively, lenders can exit immediately by selling syrupUSDG on the secondary market at the prevailing market price.
Source: LlamaRisk, July 14, 2026
Since its launch, 100% of syrupUSDG redemption requests have been processed within one hour. The median processing time is approximately 3 minutes, with the longest taking 13 minutes. Notably, the largest redemption to date, 8.16 million USDG (72% of total redemption volume), was processed in under 4 minutes, suggesting the liquidity buffer has comfortably handled the largest observed exit. However, given the protocol’s recent launch, the sample size remains limited, so these figures should not yet be viewed as representative of long-term redemption performance.
Source: LlamaRisk, July 14, 2026
Yield
syrupUSDG’s primary yield source is overcollateralized loans to institutional borrowers handled by Maple. Operationally, the Pool Delegate directs the PoolManager to move idle cash into a loan-managing strategy, which in turn funds individual loan contracts.
syrupUSDG currently runs a single Open-Term Loan Manager as its only registered strategy, holding 87.6M USDG of principal with zero unrealized losses. Open-term loans have no fixed maturity: the borrower draws USDG, pays interest on a recurring paymentInterval, and either side can wind the loan down (the lender via a “loan call” with a notice period).
Loan Collateral
Maple’s institutional loans are backed by off-chain crypto collateral held by qualified custodians or institutional MPC wallets under Master Lending Agreements. If collateral falls below the margin threshold, borrowers have approximately 24 hours to post additional collateral before Maple liquidates it, typically through OTC desks. For delinquent loans, Maple may first impairLoan, reducing the pool’s value to reflect expected losses, and later triggerDefault, writing off unrecovered principal while crediting any liquidation proceeds. Any losses are socialized pro rata through the vault’s exchange rate. There is no protocol-level insurance backstop.
The Maple credit book is predominantly BTC-collateralized, with 78.6M USDG (90% of outstanding principal) backed by BTC at a size-weighted collateralization ratio of 1.52x. The remainder consists of effectively cash-secured loans backed by PYUSD (6M USDG) and USDG (3M USDG), both at approximately 1.0x collateralization. Overall, the portfolio has a weighted average collateralization ratio of approximately 1.46x (146%).
Source: LlamaRisk, July 14, 2026
The credit book consists of six live loans across five borrowers, with four BTC-backed loans across three borrowers:
- The largest position is a $50M loan (borrower 0xd0e4294c) secured by approximately 1,089 BTC. Its 72.4% LTV is below the 82.0% margin call and 90.0% liquidation thresholds, leaving 9.6% of headroom to a margin call and 17.6% to liquidation. This is the closest loan to its risk thresholds.
- One borrower (0xa6633ae7) has two loans of $20M and $7.6M, with LTVs of 56.9% and 57.7%. Both have 70% margin calls and 80% liquidation thresholds, providing 13.1 and 12.3 percentage points of margin call headroom.
- A $1M BTC-backed loan (borrower 0x33822017) has a 58.4% LTV, with 76.9% margin call and 90.0% liquidation thresholds.
- The PYUSD ($6.0M) and USDG ($3.0M) loans are fully collateralized by their underlying stablecoins and therefore maintain an effective LTV of 100%. Their thresholds (105.3% margin call, 111.1% liquidation) reflect the stablecoin accounting rather than directional risk, and the LTV on these positions does not move with market prices.
For Aave, the primary market risk comes from the four BTC-backed loans, particularly the $50M position. A BTC price decline of roughly 12% would bring it to its margin call threshold, while a decline of about 19% would reach liquidation. Margin calls are managed off-chain, so Aave would only observe an on-chain impact if a loan becomes impaired or defaults, thereby increasing unrealizedLosses.
Capital that is not actively lent out can be allocated to external DeFi strategies such as Aave, Sky/SSR, or other vetted ERC-4626 vaults to earn additional yield while remaining available to satisfy redemptions. At the time of writing, however, syrupUSDG has no active strategy allocation. Its 3.1M USDG liquidity buffer is held entirely as cash in the Pool, and the DeFi yield component remains an available but unused feature.
Bridging
syrupUSDG is natively issued on Ethereum, with the only active cross-chain lane being to Robinhood Chain via Chainlink’s Cross-Chain Interoperability Protocol (CCIP). The bridging mechanism follows a lock-and-mint model from Ethereum to Robinhood Chain and a burn-and-release model for transfers back to Ethereum. On Ethereum, the underlying tokens are escrowed in the LockReleaseTokenPool contract, which is controlled by Chainlink’s RBAC Timelock and governed through a Chainlink MCMS-controlled wallet.
The attester set on CCIP comprises a Decentralized Oracle Network (DON) of 16 node operators (the same operator set used by Chainlink’s price feeds), which includes two off-chain plugins: the Commit DON and the Execute DON. The on-chain commit threshold requires 6-of-16 signatures, while the off-chain libOCR consensus protocol requires 11-of-16 operators to agree before a commit report can leave the DON.
An inbound/outbound rate limit of 25M/day syrupUSDG is set on Ethereum <> Robinhood transfers.
1.3 Tokenomics
The syrupUSDG total supply has no fixed cap and increases/contracts based on users depositing USDG. As of July 14, 2026, the total supply of syrupUSDG on Ethereum stands at 90.59M.
1.3.1 Token Holder Concentration
As of July 14, 2026, a single EOA user holds 79.35% of the total supply, and 20.34% of the remaining supply is held in Chainlink CCIP’s LockReleaseTokenPool contract.
2. Market Risk
syrupUSDG currently has no DEX liquidity pools on Ethereum. The proposed Aave onboarding is therefore contingent on the Maple team bootstrapping sufficient on-chain liquidity, which is expected to occur over the coming days.
As shown in the circulating supply chart below, syrupUSDG is still in the early stages of adoption following its launch. Of the total supply, 76.07M syrupUSDG is circulating on Ethereum, while the remaining 12.52M is locked in escrow on Ethereum and represented on Robinhood Chain via Chainlink CCIP. This bridged supply is held in the Ethereum escrow contract as part of CCIP’s lock-and-mint mechanism rather than circulating on Ethereum itself.
Source: LlamaRisk, July 14, 2026
3. Technological Risk
3.1 Smart Contract Risk
Since our earlier assessments, six additional Audits have been conducted on Maple smart contracts:
- Governor Timelock Contract Upgrade Audits
- Withdrawal Manager Upgrade Audits
- Maple CCIP Receiver Release Audits:
3.2 Bug Bounty Program
Maple has a live bug bounty program on Immunefi offering rewards of up to $500,000 (10% of affected funds) for critical smart contract bugs.
3.3 Price Feed Risk
syrupUSDG loans are open-term and rely on off-chain custody and risk management. Loan LTVs, margin calls, and liquidations are managed by Maple’s operations desk, with collateral liquidated off-chain via OTC desks and proceeds returned to the pool. As a result, Aave has no on-chain oracle or direct visibility into the collateral backing syrupUSDG. Credit assurance depends on Maple’s underwriting and custody processes.
Maple’s internal contracts do not rely on a price oracle for USDG, as the fund asset is treated at par. The syrupUSDG/USDG exchange rate exposed through convertToExitAssets() reflects the pool’s underlying loan principal and accrued interest used for redemptions. For Aave markets, the Chainlink USDG/USD feed, classified as low market risk, can be combined with the internal vault exchange rate to derive the syrupUSDG price. Additionally, CAPO can be configured to mitigate potential upward price deviations.
3.4 Dependency Risk
The dependency risks associated with syrupUSDG on Ethereum remain unchanged from our syrupUSDC Core onboarding review and are omitted here for brevity, as the underlying architecture is identical.
4. Counterparty Risk
4.1 Governance and Regulatory Risk
syrupUSDG has no reserve in the fiat-stablecoin sense. Its value is derived from a dynamically managed pool whose assets are (i) overcollateralized loans originated to institutional borrowers under Master Lending Agreements and (ii) capital allocated to supporting yield strategies, expressly including futures basis trading, other delta-neutral/market-neutral approaches, and DeFi liquidity provision. Yield accrues to the token’s value; the value can fall, and there is no guarantee a holder can redeem for the amount of USDG originally deposited.
Because the pool holds credit and trading positions rather than a segregated cash/T-bill reserve, the instrument’s stability depends on underwriting quality, collateral coverage, and strategy performance rather than on a reserve-and-attestation model. Supporting strategies introduce risks “distinct from lending activities,” including exchange/counterparty insolvency, basis compression, forced liquidation, and impermanent loss.
Loans in the pool are overcollateralized and governed by Master Lending Agreements with posted collateral. Public Maple materials indicate loans are typically backed by 120–170% collateralization, and the sibling Syrup pools’ collateral disclosure reported a collateral ratio of roughly 147% (collateral value ~US$1.3B against loans ~US$904M) as at the disclosed snapshot. The issuer confirms there is no single fixed portfolio-wide ratio: all syrupUSDG loans sit under Maple’s overcollateralized framework with LTVs set per loan by collateral analysis, varying by collateral asset, amount, and borrower counterparty, with live ratios published at https://app.maple.finance/earn/details.
Maple operates margin-call and liquidation procedures: if collateral falls below thresholds, the borrower is called for additional collateral, failing which the collateral is liquidated. Critically, overcollateralization protects the pool at the borrower level; it is not a protocol-level safety module or insurance fund for token holders. If liquidation proceeds are insufficient in stressed markets, the pool incurs a net loss shared pro rata among lenders. No insurance pool or dedicated backstop for syrupUSDG holders is described.
The issuer states that redemption expectations for syrupUSDG are in line with syrupUSDC, and that Maple aims to maintain a liquidity buffer to facilitate day-to-day redemption flow.
Loan collateral is held with institutional-grade, qualified custodians under a tri-party structure. Maple’s own documentation confirms that collateral is “held in qualified custody” and, in third-party materials, that tri-party arrangements sit among the borrower, the custodian, and Maple Institutional — but Maple’s primary documentation does not itself name the custodians. For the syrupUSDG portfolio specifically, the issuer has confirmed that collateral is stored either with a third-party custodian — Anchorage and BitGo were cited as examples — or in an institutional-custody MPC wallet, on the same basis as syrupUSDC and syrupUSDT. Third-party sources additionally identify Copper and Hex Trust among Maple’s platform-wide custody partners.
Neither the issuer (Maple International Operations SPC) nor the interface operator (Syrup Ltd) is presented as holding a specific license for the syrupUSDG credit product. The interface Terms of Use affirmatively disclaim registration. The regulatory posture instead relies on a combination of (i) a permissionless protocol design, (ii) KYC/accreditation gating at the access layer, and (iii) jurisdictional exclusion of higher-enforcement markets (notably the United States and Australia). The only clearly regulated element in the stack is the deposit asset, USDG, whose issuer, Paxos, holds MAS (Singapore MPI) and EU MiCA (via Paxos Issuance Europe) authorizations — but that regulation attaches to USDG, not to syrupUSDG.
Sanctions controls operate at the access layer. The interface Terms define a broad “Prohibited Person” (US SDN list, Commerce Denied Persons/Entity List, EU/UK consolidated sanctions lists, embargoed/“terrorist-supporting” countries, and a list of Prohibited Jurisdictions), and Maple uses IP-based geofencing to enforce restrictions. At the KYC layer, all lender wallets are screened with TRM Labs as a condition precedent to deposit, and wallets that hit risk factors (including interaction with high-risk counterparties) are blocked.
Maple performs KYC on all lenders and borrowers, including identification of ultimate beneficial owners and directors for entities, accreditation checks on lenders, and PEP/sanctions screening on all users, in addition to the TRM Labs wallet screening noted above. The interface Terms require users to be 18+ and not a Prohibited Person, and reserve the right to request additional AML/CTF documentation. Onboarding gates access to the Maple pools.
4.2 Access Control Risk
4.2.1 Contract Modification Options
Here are the syrupUSDT controlling wallets on Ethereum:
- GovernorTimelock: 24-hour RBAC timelock controlled by Maple, handles protocol-wide admin functions such as redemptions, role/parameter changes.
- PoolDelegate: Syrup-controlled MPC, with upgrade functionality over PoolManager, WithdrawalManagerQueue, and LoanManagers.
- SecurityAdmin: 3/6 Safe multisig, can call emergency pause function (freezes the protocol entirely).
- OperationalAdmin: 3/5 Safe multisig, can execute a subset of operational functions.
The following contracts power syrupUSDG on Ethereum:
- syrupUSDG Pool: Immutable ERC4626 standard vault, allows users to exchange USDG for syrupUSDG token.
- PoolManager: Upgradeable contract managing core accounting of the pool contract, controlled by PoolDelegate.
- OpenTermLoanManager: Upgradeable contract, manages open-term loan type.
- WithdrawalManagerQueue: Upgradeable contract, used to process user withdrawal requests.
- PoolDelegateCover: Immutable contract facilitating funds transfer and the recipient of liquidation funds.
- SyrupRouter: Immutable, permissioned deposit entry point.
- MapleGlobals: Upgradeable contract, responsible for storing Maple-wide system parameters. It is controlled by the GovernorTimelock.
4.2.2 Timelock Duration and Function
A delay of 1 day (86400 seconds) has been implemented on the syrupUDSG contract upgrades via the GovernorTimelock.
4.2.3 Multisig Threshold / Signer identity
Maple DAO Multisig (4/7 Safe) and EOA 1 are the admins of the GovernorTimelock contract, which has the following role-based access control:
| Controlling Addresses |
Role |
Functionality |
| Maple DAO Multisig, EOA 1 |
ROLE_ADMIN |
Can update roles, including the role admin role itself |
| EOA 2, OperationalAdmin |
EXECUTOR_ROLE |
Can execute all proposals, including role updates |
| Maple DAO Multisig |
PROPOSER_ROLE |
Can schedule proposals, but can not schedule role updates |
| SecurityAdmin |
CANCELLER_ROLE |
Can unschedule proposals, but can not unschedule role updates |
Using multisig wallets instead of EOA addresses is recommended to reduce the risk of a single private key compromise.
Note: This assessment follows the LLR-Aave Framework, a comprehensive methodology for asset onboarding and parameterization in Aave V3. This framework is continuously updated and available here.
Aave V4 Specific Parameters
We recommend adding syrupUSDG as a collateral-only asset to a new Maple USDG Spoke and onboarding native USDG to enable correlated looping strategies while reducing reliance on credit lines from the Core Hub.
Dynamic Liquidation Bonus Configuration
| Hub |
Spoke |
Liquidation Bonus Factor |
Target Health Factor |
HF for Max Bonus |
| Global Dollar Hub |
Maple Spoke |
100.00% |
1.0277 |
0.99 |
Spoke Parameters
| Hub |
Spoke |
Reserve |
Collateral Factor |
Max Liquidation Bonus |
Borrowable |
Collateral Risk |
Liquidation Fee |
| Global Dollar Hub |
Maple Spoke |
syrupUSDG |
92.00% |
4.00% |
FALSE |
0 |
10.00% |
| Global Dollar Hub |
Maple Spoke |
USDG |
0.00% |
- |
TRUE |
- |
- |
Add and Draw Caps
| Hub |
Spoke |
Reserve |
Add Cap |
Draw Cap |
| Global Dollar Hub |
Maple Spoke |
syrupUSDG |
10,000,000 |
0 |
| Global Dollar Hub |
Maple Spoke |
USDG |
10,000,000 |
9,500,000 |
| Global Dollar Hub |
Tokenized Spoke |
USDG |
1,000,000 |
0 |
Interest Rate Curve
| Hub |
Spoke |
Reserve |
Base |
Slope 1 |
Slope 2 |
Uoptimal |
Liquidity Fee |
| Global Dollar Hub |
Maple Spoke |
USDG |
0.00% |
4.00% |
35.00% |
90.00% |
20.00 |
Price feed Recommendation
We recommend pricing syrupUSDG on Aave using Maple’s syrupUSDG/USDG internal exchange rate (convertToExitAssets) in combination with Chainlink’s USDG/USD feed and CAPO adapter.
CAPO Configuration
The syrupUSDG 7-day and 14-day APYs have stabilized near 5%, in line with the yield profiles observed for syrupUSDC and syrupUSDT, which recorded 30-day APYs of 4.98% and 4.11%, respectively. We recommend setting the Snapshot Delay to 7 days and the maxYearlyRatioGrowthPercent to 8.45%.
Source: LlamaRisk, July 14, 2026
Disclaimer
This review was independently prepared by LlamaRisk, a DeFi risk service provider funded in part by the Aave DAO. LlamaRisk is not directly affiliated with the protocol(s) reviewed in this assessment and did not receive any compensation from the protocol(s) or their affiliated entities for this work.
The information provided should not be construed as legal, financial, tax, or professional advice.
