Skip to content
Reserve logo

Reserve Review

Open-source basket tokens with capped fees and 19 audits

of 10

Reserve scores 8.0 in DeFi protocols. Its DTF contracts are MIT and Blue Oak licensed, 19 dated audits are linked and fees are capped in the protocol, but rates and role holders vary per fund and some baskets hold freezable tokenized assets. Desk research checked November 6, 2026.

Overall score

8.0 = (8 + 10 + 9 + 7 + 6) / 5

Index DTF fee caps

TVL fee up to 10%/yr, mint fee up to 5%; default 33% platform share

Licences

Index Protocol MIT; Yield Protocol Blue Oak Model License 1.0.0

Audits

19 linked reports, eight firms, Aug 2022 to Jun 2025; $10M bounties

Timelock

Index DTF Admin actions gated by a timelock, default 48 hours

Scores

What it does & fees
8.0
Licence & code openness
10.0
Audit disclosure
9.0
Backing & transparency
7.0
Governance & control
6.0

Each criterion carries equal weight. The overall score is the average of these 5 scores — (8.0 + 10.0 + 9.0 + 7.0 + 6.0) ÷ 5 = 8.0.

Pros

  • Licence 10: Index Protocol is MIT, Yield Protocol is Blue Oak Model License 1.0.0
  • Audits 9: 19 dated, linked reports from eight firms, August 2022 to June 2025
  • Fee caps in the protocol: TVL fee up to 10% a year, mint fee up to 5%
  • Index DTF Admin actions pass a timelock, default 48 hours
  • Anyone can mint or redeem in kind, atomically, from the Folio contracts

Cons

  • Each DTF sets its own fees within the caps; there is no single schedule
  • Role holders vary per DTF; veto window and quorum values are not stated
  • Some baskets hold tokenized assets whose issuers can freeze or limit redemptions
  • No audit listed after June 2025; reports are not mapped to Folio 4.0.0 and 5.0.0

How Reserve scores in DeFi protocols

This entry rates Reserve, the protocols for Decentralized Token Funds (DTFs): ERC-20 tokens backed by a basket of other tokens that anyone can mint or redeem. Index DTFs track baskets rebalanced by on-chain auctions; Yield DTFs hold yield-bearing tokens and can be protected by staked RSR. The basis is desk research of the Reserve documentation, its security pages, its risks page and the two protocol repositories on GitHub, checked on November 6, 2026. No DTF was minted. The category has five criteria, each marked 0 to 10 and weighted equally, as set out in our DeFi protocols ranking and ratings methodology.

CriterionWhat the sources showMark
What it does & feesFunction stated plainly. Index DTF fees are capped by the protocol: TVL fee up to 10% a year, mint fee up to 5%, each with a 0.15% platform minimum and a default 33% platform share. Each DTF's governance sets its own rates within the caps.8
Licence & code opennessThe Index Protocol repository is MIT. The original Yield Protocol repository is Blue Oak Model License 1.0.0. Both are permissive open-source licences.10
Audit disclosureTwo security pages list 19 dated, linked reports from eight firms, August 2022 to June 2025. Bug bounties of $10 million are offered through Immunefi and Cantina.9
Backing & transparencyAnyone can mint or redeem in kind, atomically, at exchange ratios readable from the Folio contracts. Yield DTFs can carry staked RSR as first-loss capital. Some baskets hold tokenized assets whose issuers can freeze them. No attestation is described.7
Governance & controlEach Index DTF is run by an on-chain DAO governor; all Admin actions pass a timelock (default 48 hours), within hard-coded fee ceilings. Role holders vary by DTF, and the risks page says a governance attacker could approve a malicious upgrade.6

The overall score is the plain average: (8 + 10 + 9 + 7 + 6) / 5 = 40 / 5 = 8.0, up from 5.2 at the July 24, 2026 check. All five marks moved because the July review read only the homepage and one licence file, and the documentation now answers the questions it left open. Audit disclosure rose from 3 to 9, fees from 5 to 8, licence from 8 to 10, governance from 4 to 6 and backing from 6 to 7.

Strongest criteria

Permissive, open code (10)

The reserve-index-dtf repository, which holds the Index Protocol, carries the MIT License, copyright ABC Labs, and was updated on November 4, 2026. The original protocol repository, which holds the Yield Protocol, carries the Blue Oak Model License 1.0.0. Both licences allow reuse and modification, including commercial use, with no change date or field-of-use limit. The category gives permissive or copyleft open-source code 10, as for dHEDGE and Nexus Mutual.

A long, linked audit record (9)

The Yield DTF security page lists 15 reports, each linked: Trail of Bits (August 2022), Solidified, Ackee and Halborn (late 2022), three Code4rena contests (2023) and later releases reviewed by Trust Security and Solidified through July 2024. The Index DTF page lists four more: Trust Security (December 2024), Cantina (January 2025), Trail of Bits (April 2025) and Pashov (June 2025). The docs say Trust Security "reviews every piece of Solidity code before it is deployed onchain". The mark stops at 9 because the newest listed report is from June 2025 and the pages do not map reports to the Folio 4.0.0 and 5.0.0 implementations now deployed.

Fee caps written into the protocol (8)

An Index DTF can charge two fees, both paid in the DTF token: a TVL fee that accrues continuously on basket value, and a mint fee taken from each mint. The platform fee page sets the ceilings at 10% a year and 5%, and the roles page says the Admin "cannot bypass hard-coded parameter ceilings". A platform share, 33% by default, is taken before the rest goes to recipients chosen by governance. The mark is not higher because each DTF sets its own rates and can change them by vote, so there is no single schedule, and the platform share's recipient is set by a platform owner multisig.

Weaker criteria

Backing that redeems in kind, with issuer exposure (7)

Minting and redeeming swap exact amounts of each basket token for DTF tokens in one on-chain transaction, and "Anyone can mint or redeem permissionlessly." The mark is held at 7, level with dHEDGE and Index Coop, for two reasons. Several featured baskets hold tokenized stocks with mainly off-chain liquidity, sourced by approved minters; the risks page warns that issuers or custodians may impose "freezes, blacklists, redemption limits". And for Yield DTFs, overcollateralization depends on staked RSR, which exists only where governance routes revenue to stakers. No reserve attestation is described.

Governance and control (6): mostly disclosed, configurable per fund

The roles page describes the default design. The Admin of an Index DTF is expected to be a DAO using the supplied governor and timelock contracts, with voting power from vote-locked tokens. It can change the basket, fees and roles, but "All actions are gated by a timelock (default 48 h)", and changes to the governor, timelock or staking vault must go through a full vote. Routine actions can use an optimistic fast path that passes unless holders veto it, and a guardian can cancel a fast proposal. The mark is not higher for three reasons: the veto window and quorum values are not given, each DTF can assign roles to multisigs or single keys, and the risks page states plainly that "governance attacks are possible".

What the score does not cover

The score rates the protocols' disclosure, not any individual DTF, its basket choices or its performance. A DTF's market price can drift from its basket value, and index tokens holding tokenized stocks carry the risks of those tokens' issuers. RSR stakers on a Yield DTF can lose their whole stake in a collateral default, and unstaking takes a governance-set delay. ABC Labs, LLC, which operates the site and app, states that it is not registered with the SEC, the CFTC or any other financial authority, and that DTFs and RSR are not deposits and are not insured. Our guide to how to assess a stablecoin covers the questions to ask of any dollar-denominated Yield DTF.

Reserve vs Index Coop and dHEDGE

Index Coop, the closest product match because it also issues basket tokens, scores 6.8. The two tie on fees (8) and backing (7). Reserve leads on licence (10 against 8), audits (9 against 8) and governance (6 against 3), because its timelock default is stated and Index Coop's is not. dHEDGE, now Chamber, scores 7.8 for managed on-chain vaults. It ties Reserve on fees (8), licence (10) and backing (7), and leads on audits (10 against 9), while Reserve leads on governance (6 against 4).

Who it suits

On these marks, Reserve suits holders who want a basket in one token with open-source contracts, a long audit record, protocol-level fee caps and the option to redeem into the underlying tokens. It suits less well anyone who cannot check each DTF's own fees and role holders before buying, since both vary by fund.

How it compares

Sources

Scored from published primary sources rather than hands-on use. Every figure above comes from one of the pages below, on the date shown. Manufacturers change prices and specifications without notice — if something here no longer matches the source, tell us and we will correct it.

  1. 1.Reserve docs — platform fee and limits — checked
  2. 2.Reserve docs — Index DTF roles — checked
  3. 3.Reserve docs — Optimistic Governance — checked
  4. 4.Reserve docs — Index DTF minting and redeeming — checked
  5. 5.Reserve docs — Index DTF security and audits — checked
  6. 6.Reserve docs — Yield DTF security and audits — checked
  7. 7.Reserve docs — Yield DTFs overview — checked
  8. 8.Reserve docs — Risks — checked
  9. 9.Reserve — homepage and site operator notice — checked
  10. 10.GitHub — reserve-index-dtf LICENSE (MIT) — checked
  11. 11.GitHub — reserve-protocol/protocol LICENSE (Blue Oak 1.0.0) — checked

Frequently asked questions

Why does Reserve score 8.0?

It is the plain average of five equal marks: fees 8, licence 10, audits 9, backing 7 and governance 6. Open code and the audit record carry the score; per-fund governance and issuer exposure in some baskets hold it back.

Why did the score rise from 5.2?

The July review found no named audit, no fee figures and no governance detail. The documentation now lists 19 linked audits, protocol fee caps and a default 48-hour timelock, and the current Index Protocol is MIT-licensed. All five marks rose on those sources.

Does the score rate individual DTFs?

No. It rates the protocols' published disclosure. Each DTF's basket, fees, role holders and performance differ and were not measured; the docs tell users to check them on the DTF's own app page.

What would raise the governance mark?

Publishing the default veto window and quorum, and requiring DAO control rather than allowing multisigs or single keys in Admin roles, would address the gaps the mark is based on.

How does Reserve compare with Index Coop?

Index Coop scores 6.8. The two tie on fees and backing; Reserve leads on licence, audits and governance, mainly because its default timelock is stated.

Nothing here is financial advice. Editorial policy · How we score · How we're funded.