Skip to content
Nexus Mutual logo

Nexus Mutual Review

GPL code, an on-chain capital pool and a per-release audit log

of 10

Nexus Mutual scores 8.2 in DeFi protocols. Its contracts are GPL-3.0, cover is backed by an on-chain Capital Pool, and every release is listed with its auditor and report. Governance gives a five-member Advisory Board the lead behind a 24-hour timelock. Desk research checked November 1, 2026.

Overall score

8.2 = (8 + 10 + 8 + 9 + 6) / 5

Licence

GPL-3.0 (NexusMutual/smart-contracts)

Audits listed

23, Apr 2019 to Apr 2026: iosiro, Chaos Labs, G0 Group, Solidified

Backing

Capital Pool contract holding ETH, USDC and cbBTC

Governance

5-member Advisory Board; 15% of NXM to reject; 24-hour timelock

Fees stated

0.0020 ETH membership; 0.05 ETH claim deposit; formula-based cover price

Scores

What it does & fees
8.0
Licence & code openness
10.0
Audit disclosure
8.0
Backing & transparency
9.0
Governance & control
6.0

Each criterion carries equal weight. The overall score is the average of these 5 scores — (8.0 + 10.0 + 8.0 + 9.0 + 6.0) ÷ 5 = 8.2.

Pros

  • Licence 10: smart-contracts repository is GPL-3.0 and still updated (Oct 28, 2026)
  • Backing 9: NXM backed by the on-chain Capital Pool; all cover fees paid into it
  • Audits 8: 23 reviews listed with auditor, report and deploying proposal
  • Fees 8: pricing formula published with a worked example; membership fee 0.0020 ETH

Cons

  • Governance 6: Advisory Board proposals pass by default unless 15% of NXM supply rejects
  • Only a 24-hour timelock before upgrades can be executed
  • Recent audits rely on one firm, iosiro; two 2026 changes have no separate report
  • Cover is discretionary, not insurance, and membership requires KYC

How Nexus Mutual scores in DeFi protocols

This entry rates Nexus Mutual, a member-owned discretionary mutual on Ethereum that sells cover against crypto losses, in our DeFi protocols ranking. Its documentation states that cover is not a contract of insurance: the mutual has a discretion, not a legal obligation, to pay a claim. The basis is desk research of the Nexus Mutual documentation, its audits page and its GitHub repository, checked on November 1, 2026. No membership was opened and no cover was bought. The category has five criteria, each marked 0 to 10 and weighted equally, as set out in our ratings methodology.

CriterionWhat the sources showMark
What it does & feesFunction stated plainly. The pricing formula is published with a worked example. Membership costs 0.0020 ETH, a claim needs a 0.05 ETH deposit, and 50% of each cover fee is minted as NXM rewards for the underwriting pool. Live prices vary by listing.8
Licence & code opennessThe smart-contracts repository is GPL-3.0 and was last updated on October 28, 2026.10
Audit disclosureThe audits page lists 23 reviews from April 2019 to April 2026 by iosiro, Chaos Labs, G0 Group and Solidified, most with a linked report and the governance proposal that deployed the code.8
Backing & transparencyNXM is backed by the Capital Pool contract, which holds ETH, USDC and cbBTC. All cover fees are paid into it, and the docs link a public dashboard of its assets.9
Governance & controlA five-member Advisory Board proposes default outcomes that members can reject with 15% of NXM supply. A 24-hour timelock applies before execution. Members can replace Board members on-chain.6

The overall score is the plain average: (8 + 10 + 8 + 9 + 6) / 5 = 41 / 5 = 8.2, up from 6.8 at the July 24, 2026 check. Three marks changed because the documentation now answers questions the July review left open. Audit disclosure rose from 3 to 8 after we read the audits page, which names every firm and links the reports. What it does & fees rose from 7 to 8 because the pricing formula is now published. Governance & control rose from 5 to 6 because the governance page states the voting thresholds and a 24-hour timelock. Licence and backing are unchanged.

Strongest criteria

Open code (10)

The NexusMutual/smart-contracts repository carries the GPL-3.0 licence and is still being updated, with a push on October 28, 2026. Anyone can read and reuse the code that runs cover, staking, claims and the Capital Pool, as long as derivative work stays under the same licence. That is the top mark in this category, shared with dHEDGE and Reserve.

On-chain backing (9)

The Capital Pool documentation says the assets backing NXM sit in the Capital Pool contract and that all cover fees go into it in full. Because the pool is a contract, its holdings can be checked on-chain rather than taken from an attestation. The docs link a dashboard of the pool's assets. The Minimum Capital Requirement (MCR) is set as total active cover divided by a gearing factor, currently 4.8. The mark stops short of 10 because part of the pool is put into investment strategies chosen by member vote, and the Capital Pool page does not name them.

Weakest criteria

Governance: disclosed, but a short timelock (6)

This mark reflects a stated arrangement, not a gap in our reading. The Advisory Board raises each proposal with a default outcome. Members can vote it down on Snapshot, but only if votes equal to 15% of NXM supply oppose it. Three of the Board's five on-chain votes carry a proposal, and such proposals can contain arbitrary transactions, including contract upgrades and Capital Pool allocations. After voting closes, a 24-hour timelock applies. The Board, and a separate Emergency Pause Safe multisig, can pause the protocol or the RAMM swap contract; the Safe's signing threshold is not stated. Members can replace a Board member with an on-chain vote once 15% of supply takes part. A stated timelock and a member veto put Nexus Mutual above Derive's 5. A day is still a short window for members to react to an upgrade.

Audits: complete record, one main firm (8)

The audits page is organized by release. Each entry gives the scope, the auditor and the deploying proposal. Every release since mid-2021 was reviewed by iosiro. Chaos Labs reviewed the 2023 token-model economics, G0 Group reviewed contracts in 2020 and 2021, and Solidified did the 2019 pre-launch audit. Two 2026 changes have no separate report, because the page treats them as changes to audited contracts. The mark sits below the peers that name seven or more firms (Reserve at 9; dHEDGE, Maple Finance and Ondo Finance at 10), because recent releases rely on one firm. A bug bounty on Immunefi pays up to $50,000 for a critical finding.

Fees: a formula, not a price list (8)

The pricing page gives the formula: the spot price is the higher of the bumped price minus the time-based price drop, and the pool manager's target price. Each purchase raises the price by 0.05% a year for every 1% of pool capacity used. Pool managers take a management fee from staking rewards, capped at a maximum fixed when the pool is created. What a buyer pays for a given listing is shown in the app, not in the docs, so the mark is not higher.

What the score does not cover

The score covers published disclosure. It does not measure how fairly or quickly claims are decided, whether the pool would cover a large loss, or the value of NXM. Nexus Mutual says it has paid more than $18.5 million in claims as of August 2026; we have not checked that figure claim by claim. Cover is discretionary, so a buyer depends on the Claims Committee, three named assessors, two of whom must approve. Membership requires a KYC check with government ID. Staked NXM can be burned to pay claims on covers its pool underwrote. Our risk management guide covers sizing positions you would want covered.

Nexus Mutual vs dHEDGE and Maple Finance

dHEDGE scores 7.8 (8, 10, 10, 7, 4). It matches Nexus Mutual on fees and licence and leads on audits (10 against 8). Nexus Mutual leads on backing (9 against 7), because its pool is a single on-chain contract while a dHEDGE vault's value depends on oracle prices, and on governance (6 against 4). Maple Finance scores 7.0 (8, 5, 10, 7, 5). It ties on fees and leads on audits (10 against 8), but its BUSL-1.1 licence (5), backing (7) and governance (5) sit behind Nexus Mutual's 10, 9 and 6.

Who it suits

On these marks, Nexus Mutual suits DeFi users who want to read the code, the capital backing and the audit history before they buy cover, and who accept that a claim is decided by a committee rather than paid as of right. It suits less well anyone who needs a contract of insurance, wants to avoid KYC, or wants a long delay before governance can upgrade the contracts.

How it compares

Sources

Scored from published primary sources rather than hands-on use. Every figure above comes from one of the pages below, on the date shown. Manufacturers change prices and specifications without notice — if something here no longer matches the source, tell us and we will correct it.

  1. 1.Nexus Mutual docs — Overview — checked
  2. 2.Nexus Mutual docs — FAQ (cover is not insurance) — checked
  3. 3.Nexus Mutual docs — Pricing — checked
  4. 4.Nexus Mutual docs — Staking (50% of cover fee to stakers) — checked
  5. 5.Nexus Mutual docs — Staking pools (management fee) — checked
  6. 6.Nexus Mutual docs — Membership — checked
  7. 7.Nexus Mutual docs — Claim assessment — checked
  8. 8.Nexus Mutual docs — Audits and security — checked
  9. 9.Nexus Mutual docs — Capital Pool — checked
  10. 10.Nexus Mutual docs — Minimum Capital Requirement — checked
  11. 11.Nexus Mutual docs — Governance — checked
  12. 12.Nexus Mutual docs — Claims history — checked
  13. 13.GitHub — NexusMutual/smart-contracts (GPL-3.0) — checked

Frequently asked questions

Why does Nexus Mutual score 8.2?

It is the plain average of five equal marks: fees 8, licence 10, audits 8, backing 9 and governance 6. Open code and an on-chain capital pool lift it. Governance, where the Advisory Board leads and the timelock is one day, is the lowest mark.

What changed since the July 2026 score?

The overall score rose from 6.8 to 8.2. Audits went from 3 to 8 because the audits page names every firm and links the reports. Fees went from 7 to 8 because the pricing formula is published. Governance went from 5 to 6 because thresholds and a 24-hour timelock are now stated.

What holds Nexus Mutual back?

Control. The Advisory Board's proposals, which can include contract upgrades, go ahead unless members holding 15% of NXM supply vote them down, and only 24 hours pass before execution. Audits are also concentrated on one firm for recent releases.

Was Nexus Mutual tested hands-on?

No. The score rests on desk research of the documentation, the audits page and GitHub, checked November 1, 2026. Claims handling, payout speed and pool solvency under stress were not measured.

How does Nexus Mutual compare with dHEDGE?

Nexus Mutual scores 8.2 and dHEDGE 7.8. They tie on fees (8) and licence (10). dHEDGE is two points ahead on audits. Nexus Mutual is two points ahead on backing, because its pool is a single on-chain contract, and two points ahead on governance (6 against 4).

Nothing here is financial advice. Editorial policy · How we score · How we're funded.