S&P Global Ratings has launched a Vault Risk Assessment framework for on-chain lending vaults as deposits in the sector reached $10 billion in September 2026. Summary S&P Global Ratings launc
S&P Global Ratings has launched a Vault Risk Assessment framework for on-chain lending vaults as deposits in the sector reached $10 billion in September 2026.
SummaryS&P Global Ratings launched the framework on Oct. 4, describing it as a forward-looking assessment of the relative risk that an investor’s position in a digital asset lending vault could become impaired. The company said deposits across such vaults had climbed from $1.5 billion in September 2024 to roughly $10 billion two years later.
S&P Global Ratings launched a risk framework for onchain lending vaults on October 5, as deposits hit $10 billion, up from $1.5 billion two years ago. The assessment covers credit, liquidity, curator, blockchain, protocol, security, and governance risks. Initial vault reviews… pic.twitter.com/MtBw838nWb
— Oldmoney 🔱🌸 ᛤ🦮 (@oldmoney_sats) October 5, 2026
The system uses familiar letter symbols with a “(v)” suffix. An AAA(v) assessment represents the lowest level of risk under the framework. S&P stressed that the assessment is not a conventional credit rating, does not measure expected yield and does not guarantee a vault’s credit quality.
You might also like: S&P Global agrees to acquire blockchain security firm OpenZeppelin
The Vault Risk Assessment looks at six areas: portfolio credit quality, liquidity mismatch, curator risk, blockchain risk, protocol risk, and vault security and governance. S&P said the combination is intended to show how different sources of risk can affect an investor’s position.
Portfolio credit quality examines the assets and lending markets a vault can use. Liquidity analysis considers whether a vault could face difficulty meeting withdrawals when assets cannot be converted or recovered quickly enough. Protocol and blockchain assessments cover risks tied to the underlying systems on which the vault operates.
Curator risk focuses on the people or entities responsible for deciding how deposited assets are allocated. Vaults may run fully through smart contracts or give human managers discretion over part of the strategy. S&P said smart contracts can hold pooled funds and enforce allocation limits set by a curator.
Security and governance form the final area of analysis. S&P’s methodology considers how a vault is controlled and how its technical structure could affect investors, alongside risks inherited from lending protocols and blockchains.
The framework is designed for lending vaults that place digital assets into blockchain-based lending markets. It can cover markets where loans are backed by crypto assets or tokenized real-world asset collateral.
S&P has deliberately separated the new scale from its traditional credit ratings.
A VRA represents S&P’s opinion on the relative chance of impairment to an investor’s vault position. It does not assess whether a borrower or issuer will meet financial obligations in the same way a standard credit rating does.
The “v” suffix identifies the assessment as vault-specific. AAA(v) sits at the lowest-risk end of the system, but S&P said even a strong assessment should not be read as a guarantee against losses.
Yield is outside the framework as well. A vault paying a higher or lower return does not receive a VRA based on the size of that return. The assessment instead concentrates on the risks surrounding the underlying assets, liquidity, management, protocols and technical infrastructure.
S&P Global Ratings President Yann Le Pallec said demand for “independent risk assessments” has grown as more financial activity moves onto blockchain networks. James Wiemken, head of Global Ratings Services, cited the complexity of vaults and their “varying disclosure standards” when explaining the new framework.
S&P’s methodology draws a line between lending against tokenized assets and directly investing in some tokenized securities.
Vaults that provide loans against tokenized real-world asset collateral can fall within the VRA framework. S&P’s published methodology says direct exposures to assets such as tokenized bonds or funds may instead fall outside VRA scope and be assessed under other criteria.
The same framework can apply to permissioned and permissionless lending structures. S&P examines what assets a vault is allowed to use, not only the holdings visible at one specific point in time.
Allocation limits written directly into smart contracts can form part of that analysis. The methodology gives more weight to hard technical limits because they can restrict how much capital enters a specific lending market without depending solely on a curator’s later decision.
Liquidity can change the assessment when a vault depends heavily on markets with few providers or assets that may be difficult to sell. Tokenized real-world assets may carry additional limits if transfers are restricted to approved participants, according to S&P’s methodology.
A VRA may therefore change when eligible assets, liquidity conditions, smart-contract controls or other parts of a vault’s risk profile change. S&P can review an existing assessment when material developments occur.
The vault framework follows several moves by S&P Global into digital asset analysis.
S&P Global Ratings previously created Stablecoin Stability Assessments, which grade the ability of stablecoins to maintain their target value. S&P’s stablecoin risk scores were brought on-chain through Chainlink in 2025, allowing DeFi applications to access the assessments through blockchain infrastructure.
The company has since extended its work to lending protocols. On Oct. 1, S&P affirmed a B- issuer credit rating on Sky Protocol with a stable outlook, citing factors including its capital position, liquidity, governance concentration and increased complexity from new lending strategies.
Security has become another area of investment. S&P Global announced in September that it had agreed to acquire smart-contract security company OpenZeppelin, subject to closing conditions. The company said OpenZeppelin had completed more than 900 security engagements and that contracts using its software had supported more than $37 trillion in transferred value.
Crypto.news reported on S&P Global’s planned OpenZeppelin acquisition and its plan to keep the security company operating as a separate business unit. Financial terms were not disclosed.
S&P Global led a strategic investment in crypto market-data company Kaiko three days earlier. As crypto.news reported, the investment expanded Kaiko’s Series B financing to $110 million, with several banks, exchanges and financial firms participating.
No individual lending vault received a VRA when S&P introduced the system on Oct. 4.
The company said its first Vault Risk Assessments will be released in future announcements but did not identify which vaults are being reviewed or provide a publication date.
S&P’s launch material compares lending vaults with managed investment vehicles because they pool investor deposits and deploy the funds under defined strategies. Depositors generally receive share tokens representing their proportional interest in the vault’s assets and accrued returns.
Vault strategies can be automated through smart contracts or managed with human discretion. S&P said the $10 billion held in such structures as of September 2026 was up from $1.5 billion in September 2024.
The ratings company said the first individual VRAs will be published separately after the framework’s launch. It has not yet named the vaults that will receive the initial assessments.
Read more: Bitcoin price prediction for October: Best and worst cases for BTC
