Safety
Risk Disclosure
Risks users and reviewers should evaluate before depositing assets.
Risk matrix
| Risk | Lucida mitigation | Remaining risk |
|---|---|---|
| Smart contract risk | PDA validation, account constraints, checked arithmetic, and tests are used where implemented. | A bug, dependency issue, or upgrade can still cause failed transactions or loss of funds. |
| Strategy risk | Strategies are configured and validated before interaction. | Third-party strategy failures, liquidity issues, or accounting errors can reduce redeemable assets. |
| Liquidity risk | Withdrawals redeem through available Vault and strategy liquidity. | If liquidity is unavailable, a withdrawal can fail or receive less under the actual transaction constraints. |
| Stablecoin risk | USDC uses configured mint validation. | USDC can depeg, freeze, or face issuer, bridge, or regulatory risk. |
| SOL price volatility | SOL Vault accounting is in lamports, not USD. | SOL market price can move sharply and reduce USD-denominated display value. |
| Validator or staking risk | Strategy integrations are reviewed before configuration. | Validator, staking, or liquid-staking dependencies can underperform or fail if used by a strategy. |
| Oracle/display-data risk | Display prices are separated from Vault settlement. | Stale or wrong prices can mislead UI values and LUX calculations. |
| Governance risk | Sensitive operations require configured authority checks. | Governance key compromise or misconfiguration can affect protocol behavior. |
| Upgrade authority risk | Upgrade authority should be reviewed through official Lucida disclosures and wallet transaction details. | Upgradeable programs can change behavior after deployment. |
| Operational risk | Monitoring and reconciliation are expected. | RPC, indexer, database, deployment, or operator errors can affect reporting or availability. |
| Blockchain congestion | Transactions use Solana confirmation. | Congestion, dropped transactions, or expired blockhashes can interrupt use. |
| Wallet and key security | Lucida never needs seed phrases. | Users remain responsible for wallet security and transaction review. |
| Regulatory risk | Legal review is required before broad access. | Rules may change and may restrict access or functionality. |
| Complete loss risk | Risk disclosures and controls reduce but do not eliminate risk. | Users can lose some or all deposited assets. |
No absolute safety claim
Lucida does not guarantee principal, yield, liquidity, uptime, or complete protection from loss.