
Nexus Mutual Review
GPL code, an on-chain capital pool and a per-release audit log
of 10
Nexus Mutual scores 8.2 in DeFi protocols. Its contracts are GPL-3.0, cover is backed by an on-chain Capital Pool, and every release is listed with its auditor and report. Governance gives a five-member Advisory Board the lead behind a 24-hour timelock. Desk research checked November 1, 2026.
Overall score
8.2 = (8 + 10 + 8 + 9 + 6) / 5
Licence
GPL-3.0 (NexusMutual/smart-contracts)
Audits listed
23, Apr 2019 to Apr 2026: iosiro, Chaos Labs, G0 Group, Solidified
Backing
Capital Pool contract holding ETH, USDC and cbBTC
Governance
5-member Advisory Board; 15% of NXM to reject; 24-hour timelock
Fees stated
0.0020 ETH membership; 0.05 ETH claim deposit; formula-based cover price
Scores
Each criterion carries equal weight. The overall score is the average of these 5 scores — (8.0 + 10.0 + 8.0 + 9.0 + 6.0) ÷ 5 = 8.2.
Pros
- Licence 10: smart-contracts repository is GPL-3.0 and still updated (Oct 28, 2026)
- Backing 9: NXM backed by the on-chain Capital Pool; all cover fees paid into it
- Audits 8: 23 reviews listed with auditor, report and deploying proposal
- Fees 8: pricing formula published with a worked example; membership fee 0.0020 ETH
Cons
- Governance 6: Advisory Board proposals pass by default unless 15% of NXM supply rejects
- Only a 24-hour timelock before upgrades can be executed
- Recent audits rely on one firm, iosiro; two 2026 changes have no separate report
- Cover is discretionary, not insurance, and membership requires KYC
How Nexus Mutual scores in DeFi protocols
This entry rates Nexus Mutual, a member-owned discretionary mutual on Ethereum that sells cover against crypto losses, in our DeFi protocols ranking. Its documentation states that cover is not a contract of insurance: the mutual has a discretion, not a legal obligation, to pay a claim. The basis is desk research of the Nexus Mutual documentation, its audits page and its GitHub repository, checked on November 1, 2026. No membership was opened and no cover was bought. The category has five criteria, each marked 0 to 10 and weighted equally, as set out in our ratings methodology.
| Criterion | What the sources show | Mark |
|---|---|---|
| What it does & fees | Function stated plainly. The pricing formula is published with a worked example. Membership costs 0.0020 ETH, a claim needs a 0.05 ETH deposit, and 50% of each cover fee is minted as NXM rewards for the underwriting pool. Live prices vary by listing. | 8 |
| Licence & code openness | The smart-contracts repository is GPL-3.0 and was last updated on October 28, 2026. | 10 |
| Audit disclosure | The audits page lists 23 reviews from April 2019 to April 2026 by iosiro, Chaos Labs, G0 Group and Solidified, most with a linked report and the governance proposal that deployed the code. | 8 |
| Backing & transparency | NXM is backed by the Capital Pool contract, which holds ETH, USDC and cbBTC. All cover fees are paid into it, and the docs link a public dashboard of its assets. | 9 |
| Governance & control | A five-member Advisory Board proposes default outcomes that members can reject with 15% of NXM supply. A 24-hour timelock applies before execution. Members can replace Board members on-chain. | 6 |
The overall score is the plain average: (8 + 10 + 8 + 9 + 6) / 5 = 41 / 5 = 8.2, up from 6.8 at the July 24, 2026 check. Three marks changed because the documentation now answers questions the July review left open. Audit disclosure rose from 3 to 8 after we read the audits page, which names every firm and links the reports. What it does & fees rose from 7 to 8 because the pricing formula is now published. Governance & control rose from 5 to 6 because the governance page states the voting thresholds and a 24-hour timelock. Licence and backing are unchanged.
Strongest criteria
Open code (10)
The NexusMutual/smart-contracts repository carries the GPL-3.0 licence and is still being updated, with a push on October 28, 2026. Anyone can read and reuse the code that runs cover, staking, claims and the Capital Pool, as long as derivative work stays under the same licence. That is the top mark in this category, shared with dHEDGE and Reserve.
On-chain backing (9)
The Capital Pool documentation says the assets backing NXM sit in the Capital Pool contract and that all cover fees go into it in full. Because the pool is a contract, its holdings can be checked on-chain rather than taken from an attestation. The docs link a dashboard of the pool's assets. The Minimum Capital Requirement (MCR) is set as total active cover divided by a gearing factor, currently 4.8. The mark stops short of 10 because part of the pool is put into investment strategies chosen by member vote, and the Capital Pool page does not name them.
Weakest criteria
Governance: disclosed, but a short timelock (6)
This mark reflects a stated arrangement, not a gap in our reading. The Advisory Board raises each proposal with a default outcome. Members can vote it down on Snapshot, but only if votes equal to 15% of NXM supply oppose it. Three of the Board's five on-chain votes carry a proposal, and such proposals can contain arbitrary transactions, including contract upgrades and Capital Pool allocations. After voting closes, a 24-hour timelock applies. The Board, and a separate Emergency Pause Safe multisig, can pause the protocol or the RAMM swap contract; the Safe's signing threshold is not stated. Members can replace a Board member with an on-chain vote once 15% of supply takes part. A stated timelock and a member veto put Nexus Mutual above Derive's 5. A day is still a short window for members to react to an upgrade.
Audits: complete record, one main firm (8)
The audits page is organized by release. Each entry gives the scope, the auditor and the deploying proposal. Every release since mid-2021 was reviewed by iosiro. Chaos Labs reviewed the 2023 token-model economics, G0 Group reviewed contracts in 2020 and 2021, and Solidified did the 2019 pre-launch audit. Two 2026 changes have no separate report, because the page treats them as changes to audited contracts. The mark sits below the peers that name seven or more firms (Reserve at 9; dHEDGE, Maple Finance and Ondo Finance at 10), because recent releases rely on one firm. A bug bounty on Immunefi pays up to $50,000 for a critical finding.
Fees: a formula, not a price list (8)
The pricing page gives the formula: the spot price is the higher of the bumped price minus the time-based price drop, and the pool manager's target price. Each purchase raises the price by 0.05% a year for every 1% of pool capacity used. Pool managers take a management fee from staking rewards, capped at a maximum fixed when the pool is created. What a buyer pays for a given listing is shown in the app, not in the docs, so the mark is not higher.
What the score does not cover
The score covers published disclosure. It does not measure how fairly or quickly claims are decided, whether the pool would cover a large loss, or the value of NXM. Nexus Mutual says it has paid more than $18.5 million in claims as of August 2026; we have not checked that figure claim by claim. Cover is discretionary, so a buyer depends on the Claims Committee, three named assessors, two of whom must approve. Membership requires a KYC check with government ID. Staked NXM can be burned to pay claims on covers its pool underwrote. Our risk management guide covers sizing positions you would want covered.
Nexus Mutual vs dHEDGE and Maple Finance
dHEDGE scores 7.8 (8, 10, 10, 7, 4). It matches Nexus Mutual on fees and licence and leads on audits (10 against 8). Nexus Mutual leads on backing (9 against 7), because its pool is a single on-chain contract while a dHEDGE vault's value depends on oracle prices, and on governance (6 against 4). Maple Finance scores 7.0 (8, 5, 10, 7, 5). It ties on fees and leads on audits (10 against 8), but its BUSL-1.1 licence (5), backing (7) and governance (5) sit behind Nexus Mutual's 10, 9 and 6.
Who it suits
On these marks, Nexus Mutual suits DeFi users who want to read the code, the capital backing and the audit history before they buy cover, and who accept that a claim is decided by a committee rather than paid as of right. It suits less well anyone who needs a contract of insurance, wants to avoid KYC, or wants a long delay before governance can upgrade the contracts.
How it compares

Reserve
Open-source basket tokens with capped fees and 19 audits

dHEDGE
Open AGPL code and a full, linked audit archive

Maple Finance
Dated, linked audits for every release since V2

Index Coop
Per-product fees, Apache code and six named auditors

Ondo Finance
Thirteen named auditors and daily attestations on tokenized assets

Derive (formerly Lyra)
Options and perp fees published in full, with a named V3 audit

Term Finance
Fixed-rate loans with published fees and a worked example

Synthetix
A published, volume-tiered perps fee schedule
Sources
Scored from published primary sources rather than hands-on use. Every figure above comes from one of the pages below, on the date shown. Manufacturers change prices and specifications without notice — if something here no longer matches the source, tell us and we will correct it.
- 1.Nexus Mutual docs — Overview — checked
- 2.Nexus Mutual docs — FAQ (cover is not insurance) — checked
- 3.Nexus Mutual docs — Pricing — checked
- 4.Nexus Mutual docs — Staking (50% of cover fee to stakers) — checked
- 5.Nexus Mutual docs — Staking pools (management fee) — checked
- 6.Nexus Mutual docs — Membership — checked
- 7.Nexus Mutual docs — Claim assessment — checked
- 8.Nexus Mutual docs — Audits and security — checked
- 9.Nexus Mutual docs — Capital Pool — checked
- 10.Nexus Mutual docs — Minimum Capital Requirement — checked
- 11.Nexus Mutual docs — Governance — checked
- 12.Nexus Mutual docs — Claims history — checked
- 13.GitHub — NexusMutual/smart-contracts (GPL-3.0) — checked
Frequently asked questions
Why does Nexus Mutual score 8.2?
It is the plain average of five equal marks: fees 8, licence 10, audits 8, backing 9 and governance 6. Open code and an on-chain capital pool lift it. Governance, where the Advisory Board leads and the timelock is one day, is the lowest mark.
What changed since the July 2026 score?
The overall score rose from 6.8 to 8.2. Audits went from 3 to 8 because the audits page names every firm and links the reports. Fees went from 7 to 8 because the pricing formula is published. Governance went from 5 to 6 because thresholds and a 24-hour timelock are now stated.
What holds Nexus Mutual back?
Control. The Advisory Board's proposals, which can include contract upgrades, go ahead unless members holding 15% of NXM supply vote them down, and only 24 hours pass before execution. Audits are also concentrated on one firm for recent releases.
Was Nexus Mutual tested hands-on?
No. The score rests on desk research of the documentation, the audits page and GitHub, checked November 1, 2026. Claims handling, payout speed and pool solvency under stress were not measured.
How does Nexus Mutual compare with dHEDGE?
Nexus Mutual scores 8.2 and dHEDGE 7.8. They tie on fees (8) and licence (10). dHEDGE is two points ahead on audits. Nexus Mutual is two points ahead on backing, because its pool is a single on-chain contract, and two points ahead on governance (6 against 4).
Nothing here is financial advice. Editorial policy · How we score · How we're funded.