# S&P launches DeFi vault risk scale as deposits reach $10 billion Author: KriptoMeta Editorial Team Language: English Published: 2026-10-05T07:20:06+03:00 Updated: 2026-10-05T07:20:06+03:00 ![Analyst examining a layered network structure in a conceptual S&P Global Ratings illustration](https://kriptometa.com/uploads/s-p-den-defi-kasalarina-risk-olcegi-pazar-milyar-dolara-ulasti-a13f69acdec9_article.webp) ## Key takeaways - S&P Global Ratings announced its Vault Risk Assessment service on October 4. - The firm says lending-vault deposits reached approximately $10 billion in September 2026. - A VRA is neither a credit rating nor a yield forecast; initial vault assessments will follow in later announcements. Blockchain transactions are visible, but the risks behind a vault’s investment strategy can be harder to judge. S&P’s new service aims to narrow that information gap. S&P Global Ratings has launched a service for comparing risks in [DeFi](https://kriptometa.com/en/glossary/defi) lending vaults. Announced on October 4, 2026, Vault Risk Assessment (VRA) examines the risk of impairment to a depositor’s position. It aims to make differences in assets, liquidity and management more visible than a displayed yield alone can show. According to the [official announcement](https://press.spglobal.com/2026-10-04-S-P-Global-Ratings-launches-Vault-Risk-Assessment-for-digital-asset-markets), deposits in these vaults rose from $1.5 billion in September 2024 to approximately $10 billion in September 2026. That figure describes the lending-vault market identified by S&P, rather than the total size of the DeFi sector. ## A vault’s size does not reveal its full risk Vaults pool users’ deposits and allocate them to lending markets under defined strategies. Depositors receive share tokens representing their proportional claim on the assets and returns. Transactions can be tracked on a [blockchain](https://kriptometa.com/en/glossary/blockchain), but that leaves separate questions about which markets are eligible, how far a strategy can change and how withdrawals will be funded. S&P’s [product description](https://www.spglobal.com/ratings/en/products/vault-risk-assessments) looks beyond a snapshot of today’s portfolio. The assessment considers portfolio credit quality, liquidity mismatch, the curator who sets the strategy, the blockchain, the protocol, and the vault’s security and governance arrangements. > “A VRA is not a credit rating or a commentary on yield levels.” S&P Global Ratings, in its product description. ## Security weaknesses can limit the outcome The [published methodology](https://www.spglobal.com/ratings/en/regulatory/article/analytical-approach-vault-risk-assessments-s101703754) first examines the assets and markets to which a vault can allocate deposits. It then considers the curator’s risk controls and liquidity mismatch. A significant weakness in the blockchain, protocol or vault’s security can limit how strong the final assessment may be, even when other aspects look robust. For example, a vault offering an expectation of instant withdrawals must be assessed for the pressure that simultaneous exits could create. A large deposit total is not sufficient: available liquidity and concentration among major depositors also matter. The method examines whether responsibility for selecting strategies is separated from the function that monitors risk. **Familiar letters, a different meaning:** AAA(v) represents the lowest relative risk on the scale. The “v” suffix identifies a vault assessment. Unlike a traditional credit rating, it does not assess full payment of obligations. It guarantees neither protection from losses nor achievement of an advertised yield. ## The first vault assessments are still to come The launch announcement does not contain a first list of assessed vaults. S&P says those results will be published in subsequent announcements. The immediate development is therefore the introduction of a comparison framework, rather than an endorsement of individual products. Assessments are also designed to change. Updates may reflect shifts in asset allocation, [smart-contract](https://kriptometa.com/en/glossary/smart-contract) features, liquidity or governance, while significant new information or a suspected exploit can trigger a review. The next concrete development for readers following [DeFi news](https://kriptometa.com/en/news/defi) will be which vaults enter the service and the assumptions behind their published assessments.