Risks
Catpound Finance strives to be transparent about the risks involved. This page outlines the key risk factors you should understand before depositing.
Smart Contract Risk
The Catpound vaults have been through multiple audit passes and internal security reviews. All known findings have been resolved. However, no audit guarantees absolute safety. Smart contracts may contain undiscovered vulnerabilities. The vaults use multiple layers of protection:
- SafeMath for all arithmetic (no overflow/underflow)
- Reentrancy guard preventing re-entry attacks
- Donation-proof accounting preventing share price manipulation
- Dead shares preventing inflation attacks on empty vaults
- Hard caps on fees enforced at the contract level
Despite these protections, smart contract risk can never be fully eliminated.
Admin Trust Assumptions
The vault owner has control over certain operational parameters:
| Admin Action | Risk | Mitigation |
|---|---|---|
| Compound rewards | Owner / compounder controls when rewards are harvested and re-deposited | Rewards accrue into the farm regardless; delayed compounds only delay share-price uplift, they do not lose funds |
| Set protocol fee | Owner can adjust the flat protocol fee | Hard cap of 20% enforced by contract; current rate is 10% |
| Set treasury address | Owner can redirect the 10% fee portion | Does not affect the 90% re-stake portion |
| Pause deposits | Owner can temporarily block new deposits | Withdrawals always remain available |
emergencyUnstake | Owner can pull all vault assets out of the farm in a single tx | Withdrawals remain open; emergency mode only means each user's withdrawal no longer needs to touch the farm (see adminForceWithdraw and emergencyWithdraw in the v2 source) |
adminForceWithdraw | Owner can process withdrawals on behalf of a user into that user's wallet — never to the admin's wallet | Destination is the original depositor, not the admin; fully traceable |
| MotoChef migration | Owner can propose moving to a new staking contract | 144-block timelock (~24 hours) before execution |
The vault includes a two-step ownership transfer (propose + accept) to prevent accidental ownership changes.
Liquidity Risk
Withdrawals unstake the caller's share of LP / underlying token from MotoChef in the same transaction — there is no separate reserve buffer and no silent phase. If the farm itself is paused or unreachable, withdrawals can be processed in "emergency mode" directly from the vault's idle balance once the owner has called emergencyUnstake to pull liquidity out ahead of time.
OPNet Platform Risk
OPNet is newer infrastructure compared to established platforms like Ethereum. As early-stage technology, there are inherent risks:
- The OPNet consensus layer is still maturing
- The ecosystem has fewer battle-tested tools and protocols
- Network effects and liquidity are still developing
MotoChef Dependency
The vault's yield comes entirely from staking MOTO in MotoChef. If MotoChef changes its reward structure, pauses, or experiences issues, it directly affects the vault's yield. The vault includes a MotoChef migration mechanism with a 144-block timelock to allow moving to a new staking contract if needed.
Not Financial Advice
This documentation is provided for informational purposes only. It does not constitute financial advice. Cryptocurrency investments carry significant risk, including the potential loss of your entire investment.
Only deposit what you can afford to lose. Past performance and projected yields do not guarantee future results. Do your own research before making any investment decisions.