Vault Curator Risk: What Stream Finance Taught DeFi
Quick answer. A vault curator decides which markets a DeFi lending vault supplies, and how much. In November 2025, Stream Finance said an external fund manager lost about $93 million, and vaults that lent against its xUSD took losses.
Video transcript
The path ran through vault curators. Stream Finance's xUSD collapsed in November 2025, and losses reached depositors who never held it.
Depositors pick a vault, and a curator picks its markets and limits. Curators cannot take custody of funds, but their listings set the exposure.
Euler, Silo, Morpho and Gearbox markets accepted Stream's tokens as collateral. One trader estimated about 170 million dollars backing xUSD against 530 million borrowed. Many markets priced it at fundamental value.
On November 3, 2025, Stream said an external fund manager lost about 93 million dollars. A day later, xUSD traded at 26 cents.
MEV Capital's Morpho vaults took haircuts, an Elixir token depegged almost completely, and Euler says its Plasma deployment was effectively wiped out.
In a Morpho V2 vault, every shareholder absorbs bad debt through the share price. Euler says curators with strong monitoring got users out early.
Score the curator, not the yield. Ask what backs each collateral, how it is priced and how concentrated the vault is. Then check rehypothecation, timelocks and whether curator capital takes a first loss.
Guardian's allocator ratings assess each position's code, who controls it and its inherited exposure, then score it from 0 to 100. Guardian keeps watching for upgrades, signer changes and swapped oracles.
Read the full article for the complete scorecard, or talk to Guardian about underwriting the vaults you hold.
On Morpho, Euler and Kamino, depositors can lend through curated vaults. They pick a vault; a curator picks the markets and the limits.
Stream Finance showed what one listing decision can cost. Its xUSD token collapsed in November 2025, and losses reached depositors who never held it.
Here is what curators control, where the losses landed and how to judge a curator.
What Vault Curators Do
A vault takes one deposit asset, such as USDC, and lends it across several markets. Each market pairs it with a collateral token, an oracle and a liquidation threshold.
Morpho defines a curator as "an entity or individuals who configures vault risk parameters and liquidity allocation rules."
Curators cannot take custody of depositors' funds, Morpho says. But the markets they approve decide what those funds are exposed to.
| Protocol | What the curator controls | Safeguards in the docs |
|---|---|---|
| Morpho (Vault V2) | Markets, caps by collateral or oracle, fees, allocators | Most changes timelocked; sentinels can only reduce risk |
| Euler | Collateral, oracle routes, LTVs and caps; Earn strategies | Configurable timelocks, pause paths and signer policy |
| Kamino | Market LTVs, caps and oracles; vault weights and caps | Squads multisig; an insurance pool of curator capital |
On Morpho, adding a market or raising a cap waits out the vault's timelock, while cutting a cap is instant.
The curator sets that timelock, and it can be zero. A long one gives depositors time to leave before new risk arrives.
Vault code has its own risks, such as share price manipulation, covered in our ERC-4626 inflation attack guide. This post is about listing decisions.
How xUSD Entered Curated Vaults
xUSD, or Staked Stream USD, was Stream Finance's yield-bearing token. Some of Stream's funds were overseen by an external fund manager.
Lending markets on Euler, Silo, Morpho and Gearbox accepted Stream's tokens as collateral. Curated vaults supplied the stablecoins borrowed against them.
Stream itself was a large borrower. Euler says Stream borrowed much of the capital on Plasma, then Euler's largest chain after Ethereum.
The research group Yields and More estimated about $285 million of loans secured by Stream's xUSD, xBTC and xETH. The most exposed curators, per Coinspeaker:
- TelosC: $123.64 million
- Elixir: $68 million, 65% of the backing of its deUSD stablecoin
- MEV Capital: $25.42 million
Signals before the loss
Doubts were public days earlier. A trader known as Cbb0fe had estimated about $170 million of assets behind xUSD against $530 million of borrowing, Decrypt reported.
Many markets also priced xUSD with a fundamental-value oracle, not its market price, Coinspeaker reported. So some positions were not liquidated as xUSD fell.
November 3, 2025
Stream then said "an external fund manager overseeing Stream funds disclosed the loss of approximately $93 million in Stream fund assets."
- Stream suspended withdrawals and deposits, and said it was engaging law firm Perkins Coie to investigate.
- xUSD fell to about $0.50, per PeckShield, and to $0.26 on CoinGecko by November 4.
- By November 18, Protos described xUSD as 95% depegged.
Where the Losses Landed
The loss began with an external fund manager, Stream said. It reached depositors through the markets that accepted Stream's tokens, and the vaults that supplied them.
| Who | Exposure | Reported outcome |
|---|---|---|
| MEV Capital USDC vaults on Morpho | xUSD and Elixir's sdeUSD | Haircuts of 3.5% (Ethereum) and 12% (Arbitrum) |
| Elixir's deUSD | $68 million lent to Stream | sdeUSD 99.8% depegged by November 18 |
| Euler on Plasma | Stream borrowed much of the capital | Deployment "effectively wiped out," Euler says |
| Hyperithm's USDT vault on Euler (Plasma) | Part of its deposits sat in a Re7 Labs vault | 30% of deposits locked |
Figures as reported by Protos, Decrypt and Euler.
Losses also traveled in layers. Decrypt reported that Treeve's scUSD had indirect exposure "through complex rehypothecation chains."
A depositor several steps from Stream could still be hit.
How a vault absorbs a loss
When a market's collateral is worthless, the unpaid debt becomes bad debt. In a Morpho V2 vault, no shares are burned: every shareholder absorbs it through the share price.
Depositors who leave first can avoid it. Euler says curators with strong monitoring got their users out early.
Depositors left behind found liquidity depleted, Euler says.
Isolation That Worked
Euler credits isolation with containing the damage. Morpho's test for it is simple: "can a failure in Market A cause losses in Market B?"
Morpho markets are immutable and isolated. Kamino says liquidations, interest and risk "all stay inside" each market's boundaries.
On Euler, the DAO's own markets "had zero direct exposure to Stream's toxic assets," Euler wrote in April 2026.
Where isolation fell short
Euler's review also names the limits. In immutable markets, oracles kept reporting stale prices, and borrowers withdrew real assets against worthless collateral.
Nobody could pause borrowing or change parameters. Isolation contained the loss; it did not stop it.
Governance carries its own risk. Euler's DAO nearly listed Elixir-linked collateral that later defaulted. Its primary risk advisor endorsed it, and another advisor stopped it.
Euler's conclusion: governed markets "are only as good as the people governing them." In the same post, Euler Labs said it would recommend that the DAO sunset its directly managed markets and vaults.
How to Judge a Curator
Score the curator, not the yield. Ask these questions of every vault you hold.
| Check | What good looks like | Red flag |
|---|---|---|
| Collateral backing | Reserves verifiable onchain or independently attested | Funds run by an undisclosed external manager |
| Oracle design | Market price, with staleness limits | Fixed or fundamental value that never liquidates |
| Concentration | Caps per collateral and per issuer | One issuer behind most of the vault |
| Rehypothecation | Every collateral traced to its underlying assets | Vault tokens backed by other vault tokens |
| Roles and timelocks | Multisig owner, real timelock, active sentinel | Single-key owner or no timelock |
| Incident record | Caps cut and markets removed quickly, losses reported | Slow updates and no loss accounting |
| Skin in the game | Curator capital in a first-loss position | No curator capital at risk |
| Disclosure | Published listing criteria and current exposures | Exposures first found by outside researchers |
Curators are starting to put capital at risk. Steakhouse Financial seeded one of its vaults with $2.5 million as "skin in the game," Protos reported.
Kamino lets curators lock their own capital in an insurance pool for depositors. On disclosure, Morpho's app warns when over 10% of a vault's assets sit in markets flagged for bad debt.
For the wider failure modes of lenders, perps and AMMs, see our guide to DeFi security by protocol type.
How Guardian Helps Allocators
Guardian's risk ratings for capital allocators underwrite a position on evidence: the deployed code, who controls it, and everything it depends on to stay solvent.
Oracles, bridges, keepers and upstream protocols are "assessed as inherited exposure." Each position gets a score from 0 to 100, with every input visible.
Guardian then keeps watching for upgrades, signer and timelock changes, and swapped oracles, as our risk monitoring page describes.
Material moves reach you the day they happen.
Frequently Asked Questions
What does a DeFi vault curator do?
A curator chooses which lending markets a vault can supply, sets exposure caps and fees, and appoints the allocators who move funds. On Morpho, most changes that add risk wait out a timelock. Curators cannot take custody of depositors' funds.
What happened to Stream Finance's xUSD?
On November 3, 2025, Stream Finance said an external fund manager had lost about $93 million of its funds. It suspended withdrawals and deposits, and xUSD traded at $0.26 on CoinGecko the next day, Decrypt reported.
Were Morpho and Euler hacked?
The loss did not start with a code bug: Stream said an external fund manager lost the money. Lenders lost where markets had accepted Stream's tokens as collateral. Euler says its DAO-managed markets had no direct exposure.
How do you evaluate a vault curator?
Check what backs each collateral asset, how it is priced, how concentrated the vault is, and who can change it under what timelock. Then check the curator's record in past incidents and whether its own capital takes a first loss.
Sources
- Decrypt: Stream Finance Stablecoin Plunges 77% After Protocol's Fund Manager Loses $93 Million (November 4, 2025)
- Bitcoin.com News: Stream Finance Rocked by $93M Blow, Project's Stablecoin XUSD Peg Craters to $0.24 (November 4, 2025)
- Coinspeaker, via Yahoo Finance: Stream Finance Freezes Withdrawals After $93M Loss Amid Fraud Concerns (November 4, 2025)
- Protos: High Yields to Haircuts: Has DeFi Learned Anything From Yield Vault Collapse? (November 18, 2025)
- Euler: Euler Q1 and a Retrospective: The Protocol Works. Here's What Did Not. (April 7, 2026)
- Morpho Docs: Curator
- Morpho Docs: Roles and Capabilities
- Morpho Docs: Variable Rate Market (Morpho Blue)
- Morpho Docs: Handling Bad Debt, Morpho Vault V2
- Morpho: Curators Explained
- Morpho: Risk Isolation Is How We Scale DeFi Safely
- Euler Docs: Market Operators
- Kamino Docs: Curator Markets
- Kamino Docs: Curator Vaults
Underwrite the vaults you hold
Guardian scores each position on its code, its controls and every collateral it depends on, then tells you the day that changes.