
Reserve Review
Open-source basket tokens with capped fees and 19 audits
of 10
Reserve scores 8.0 in DeFi protocols. Its DTF contracts are MIT and Blue Oak licensed, 19 dated audits are linked and fees are capped in the protocol, but rates and role holders vary per fund and some baskets hold freezable tokenized assets. Desk research checked November 6, 2026.
Overall score
8.0 = (8 + 10 + 9 + 7 + 6) / 5
Index DTF fee caps
TVL fee up to 10%/yr, mint fee up to 5%; default 33% platform share
Licences
Index Protocol MIT; Yield Protocol Blue Oak Model License 1.0.0
Audits
19 linked reports, eight firms, Aug 2022 to Jun 2025; $10M bounties
Timelock
Index DTF Admin actions gated by a timelock, default 48 hours
Scores
Each criterion carries equal weight. The overall score is the average of these 5 scores — (8.0 + 10.0 + 9.0 + 7.0 + 6.0) ÷ 5 = 8.0.
Pros
- Licence 10: Index Protocol is MIT, Yield Protocol is Blue Oak Model License 1.0.0
- Audits 9: 19 dated, linked reports from eight firms, August 2022 to June 2025
- Fee caps in the protocol: TVL fee up to 10% a year, mint fee up to 5%
- Index DTF Admin actions pass a timelock, default 48 hours
- Anyone can mint or redeem in kind, atomically, from the Folio contracts
Cons
- Each DTF sets its own fees within the caps; there is no single schedule
- Role holders vary per DTF; veto window and quorum values are not stated
- Some baskets hold tokenized assets whose issuers can freeze or limit redemptions
- No audit listed after June 2025; reports are not mapped to Folio 4.0.0 and 5.0.0
How Reserve scores in DeFi protocols
This entry rates Reserve, the protocols for Decentralized Token Funds (DTFs): ERC-20 tokens backed by a basket of other tokens that anyone can mint or redeem. Index DTFs track baskets rebalanced by on-chain auctions; Yield DTFs hold yield-bearing tokens and can be protected by staked RSR. The basis is desk research of the Reserve documentation, its security pages, its risks page and the two protocol repositories on GitHub, checked on November 6, 2026. No DTF was minted. The category has five criteria, each marked 0 to 10 and weighted equally, as set out in our DeFi protocols ranking and ratings methodology.
| Criterion | What the sources show | Mark |
|---|---|---|
| What it does & fees | Function stated plainly. Index DTF fees are capped by the protocol: TVL fee up to 10% a year, mint fee up to 5%, each with a 0.15% platform minimum and a default 33% platform share. Each DTF's governance sets its own rates within the caps. | 8 |
| Licence & code openness | The Index Protocol repository is MIT. The original Yield Protocol repository is Blue Oak Model License 1.0.0. Both are permissive open-source licences. | 10 |
| Audit disclosure | Two security pages list 19 dated, linked reports from eight firms, August 2022 to June 2025. Bug bounties of $10 million are offered through Immunefi and Cantina. | 9 |
| Backing & transparency | Anyone can mint or redeem in kind, atomically, at exchange ratios readable from the Folio contracts. Yield DTFs can carry staked RSR as first-loss capital. Some baskets hold tokenized assets whose issuers can freeze them. No attestation is described. | 7 |
| Governance & control | Each Index DTF is run by an on-chain DAO governor; all Admin actions pass a timelock (default 48 hours), within hard-coded fee ceilings. Role holders vary by DTF, and the risks page says a governance attacker could approve a malicious upgrade. | 6 |
The overall score is the plain average: (8 + 10 + 9 + 7 + 6) / 5 = 40 / 5 = 8.0, up from 5.2 at the July 24, 2026 check. All five marks moved because the July review read only the homepage and one licence file, and the documentation now answers the questions it left open. Audit disclosure rose from 3 to 9, fees from 5 to 8, licence from 8 to 10, governance from 4 to 6 and backing from 6 to 7.
Strongest criteria
Permissive, open code (10)
The reserve-index-dtf repository, which holds the Index Protocol, carries the MIT License, copyright ABC Labs, and was updated on November 4, 2026. The original protocol repository, which holds the Yield Protocol, carries the Blue Oak Model License 1.0.0. Both licences allow reuse and modification, including commercial use, with no change date or field-of-use limit. The category gives permissive or copyleft open-source code 10, as for dHEDGE and Nexus Mutual.
A long, linked audit record (9)
The Yield DTF security page lists 15 reports, each linked: Trail of Bits (August 2022), Solidified, Ackee and Halborn (late 2022), three Code4rena contests (2023) and later releases reviewed by Trust Security and Solidified through July 2024. The Index DTF page lists four more: Trust Security (December 2024), Cantina (January 2025), Trail of Bits (April 2025) and Pashov (June 2025). The docs say Trust Security "reviews every piece of Solidity code before it is deployed onchain". The mark stops at 9 because the newest listed report is from June 2025 and the pages do not map reports to the Folio 4.0.0 and 5.0.0 implementations now deployed.
Fee caps written into the protocol (8)
An Index DTF can charge two fees, both paid in the DTF token: a TVL fee that accrues continuously on basket value, and a mint fee taken from each mint. The platform fee page sets the ceilings at 10% a year and 5%, and the roles page says the Admin "cannot bypass hard-coded parameter ceilings". A platform share, 33% by default, is taken before the rest goes to recipients chosen by governance. The mark is not higher because each DTF sets its own rates and can change them by vote, so there is no single schedule, and the platform share's recipient is set by a platform owner multisig.
Weaker criteria
Backing that redeems in kind, with issuer exposure (7)
Minting and redeeming swap exact amounts of each basket token for DTF tokens in one on-chain transaction, and "Anyone can mint or redeem permissionlessly." The mark is held at 7, level with dHEDGE and Index Coop, for two reasons. Several featured baskets hold tokenized stocks with mainly off-chain liquidity, sourced by approved minters; the risks page warns that issuers or custodians may impose "freezes, blacklists, redemption limits". And for Yield DTFs, overcollateralization depends on staked RSR, which exists only where governance routes revenue to stakers. No reserve attestation is described.
Governance and control (6): mostly disclosed, configurable per fund
The roles page describes the default design. The Admin of an Index DTF is expected to be a DAO using the supplied governor and timelock contracts, with voting power from vote-locked tokens. It can change the basket, fees and roles, but "All actions are gated by a timelock (default 48 h)", and changes to the governor, timelock or staking vault must go through a full vote. Routine actions can use an optimistic fast path that passes unless holders veto it, and a guardian can cancel a fast proposal. The mark is not higher for three reasons: the veto window and quorum values are not given, each DTF can assign roles to multisigs or single keys, and the risks page states plainly that "governance attacks are possible".
What the score does not cover
The score rates the protocols' disclosure, not any individual DTF, its basket choices or its performance. A DTF's market price can drift from its basket value, and index tokens holding tokenized stocks carry the risks of those tokens' issuers. RSR stakers on a Yield DTF can lose their whole stake in a collateral default, and unstaking takes a governance-set delay. ABC Labs, LLC, which operates the site and app, states that it is not registered with the SEC, the CFTC or any other financial authority, and that DTFs and RSR are not deposits and are not insured. Our guide to how to assess a stablecoin covers the questions to ask of any dollar-denominated Yield DTF.
Reserve vs Index Coop and dHEDGE
Index Coop, the closest product match because it also issues basket tokens, scores 6.8. The two tie on fees (8) and backing (7). Reserve leads on licence (10 against 8), audits (9 against 8) and governance (6 against 3), because its timelock default is stated and Index Coop's is not. dHEDGE, now Chamber, scores 7.8 for managed on-chain vaults. It ties Reserve on fees (8), licence (10) and backing (7), and leads on audits (10 against 9), while Reserve leads on governance (6 against 4).
Who it suits
On these marks, Reserve suits holders who want a basket in one token with open-source contracts, a long audit record, protocol-level fee caps and the option to redeem into the underlying tokens. It suits less well anyone who cannot check each DTF's own fees and role holders before buying, since both vary by fund.
How it compares

Nexus Mutual
GPL code, an on-chain capital pool and a per-release audit log

dHEDGE
Open AGPL code and a full, linked audit archive

Maple Finance
Dated, linked audits for every release since V2

Index Coop
Per-product fees, Apache code and six named auditors

Ondo Finance
Thirteen named auditors and daily attestations on tokenized assets

Derive (formerly Lyra)
Options and perp fees published in full, with a named V3 audit

Term Finance
Fixed-rate loans with published fees and a worked example

Synthetix
A published, volume-tiered perps fee schedule
Sources
Scored from published primary sources rather than hands-on use. Every figure above comes from one of the pages below, on the date shown. Manufacturers change prices and specifications without notice — if something here no longer matches the source, tell us and we will correct it.
- 1.Reserve docs — platform fee and limits — checked
- 2.Reserve docs — Index DTF roles — checked
- 3.Reserve docs — Optimistic Governance — checked
- 4.Reserve docs — Index DTF minting and redeeming — checked
- 5.Reserve docs — Index DTF security and audits — checked
- 6.Reserve docs — Yield DTF security and audits — checked
- 7.Reserve docs — Yield DTFs overview — checked
- 8.Reserve docs — Risks — checked
- 9.Reserve — homepage and site operator notice — checked
- 10.GitHub — reserve-index-dtf LICENSE (MIT) — checked
- 11.GitHub — reserve-protocol/protocol LICENSE (Blue Oak 1.0.0) — checked
Frequently asked questions
Why does Reserve score 8.0?
It is the plain average of five equal marks: fees 8, licence 10, audits 9, backing 7 and governance 6. Open code and the audit record carry the score; per-fund governance and issuer exposure in some baskets hold it back.
Why did the score rise from 5.2?
The July review found no named audit, no fee figures and no governance detail. The documentation now lists 19 linked audits, protocol fee caps and a default 48-hour timelock, and the current Index Protocol is MIT-licensed. All five marks rose on those sources.
Does the score rate individual DTFs?
No. It rates the protocols' published disclosure. Each DTF's basket, fees, role holders and performance differ and were not measured; the docs tell users to check them on the DTF's own app page.
What would raise the governance mark?
Publishing the default veto window and quorum, and requiring DAO control rather than allowing multisigs or single keys in Admin roles, would address the gaps the mark is based on.
How does Reserve compare with Index Coop?
Index Coop scores 6.8. The two tie on fees and backing; Reserve leads on licence, audits and governance, mainly because its default timelock is stated.
Nothing here is financial advice. Editorial policy · How we score · How we're funded.