This question separates durable products from the ones that show up in post-mortems. Rob answered it in six words.
“It just comes from a maturity transformation. That’s it.”
No leverage on the protocol’s own book. No emissions subsidising the headline rate. Illiquid positions pay more than liquid ones, and as long as the reserve covers redemptions at a reasonable frequency, the mismatch is a feature.
Then the honest part. “We’ve had, I think, four or five bank runs at this point in our life. We’ve never had a moment where we offered anything less than the same block liquidity.”
He described a February drawdown where a lender pulled out of Morpho markets after taking bad debt elsewhere, forcing borrowers to delever. infiniFi uses no leverage, but plenty of iUSD holders did. His summary: “60 mil drawdown in 48 hours. No illiquidity.”
He expects that record to break. When a one-week queue finally appears, the token starts behaving like a principal token, tradeable at a discount to whoever will hold it to maturity.
The security choices are legible. No centralised minting queue, so there is no queue to drain. A peg stability module instead, giving up the mint and redeem spread that funds competitors. The rebalancer is an off-chain key that can only move funds between whitelisted farms, and adding a farm takes a timelock.
“I could literally give you the private keys right now and you could shuffle money around and annoy me, but you couldn’t actually do anything that would allow you to financially profit off of those operations.”
Add a four-of-seven multisig on separate signing devices, an audit on every release including single-line changes, and formal verification of the core by Certora. Cover is available on Nexus Mutual, and Rob claims the premiums price cheaper than Morpho’s. “We’re going to have to go pay for an audit. We are that aggressive.”
Run this scorecard on any onchain yield product before capital moves.
| Check | What good looks like | Fails if |
|---|
| Yield source | One sentence naming the economic trade | The answer needs a diagram |
| Leverage | Protocol-level position stated separately from user behaviour | “Our users can choose” is the whole answer |
| Mint and redeem path | Fully onchain, no operator queue | A centralised queue holds custody between mint and settlement |
| Key scope | Operator keys reach whitelisted destinations only | Any address is reachable |
| Whitelist changes | Timelocked and public | Instant, or multisig-only |
| Loss waterfall | Named tranche takes first loss, sized against positions | “Diversification” stands in for a waterfall |
| Coverage ratio | Published per asset | Published only in aggregate |
| Stress history | Dated drawdowns with redemption outcomes | Marketing copy about resilience |
Every line a team cannot answer is a line their depositors answer later, at a worse moment.