DeFiPunk'd

Origami Finance

Leveraged Farming

TVL $59.8M
Type Leveraged Farming
Chains Ethereum, Plasma, Berachain
View on DeFiLlama ↗
Control criteria
Upgradeability Unknown Bug bounty — Governance forum — Docs docs.origami.finance
About

Origami Finance is an automated leveraged farming protocol on Ethereum, Berachain, and Plasma that allows users to deposit assets into Tokenised Balance Sheet (TBS) vaults and receive amplified yield exposure through one-click 'folding' — recursively borrowing against collateral from third-party lenders (Morpho, Spark, Euler). The protocol's lov-Strategy vaults (e.g. lovSUSDe, lovWSTETH, lovOriBGT) manage leverage ratios automatically via smart rebalancing, minimising liquidation risk without requiring users to monitor health factors. On Berachain, Origami operates auto-staking and auto-compounding vaults for Infrared LP positions. A single Gnosis Safe multisig (0x781B4c57100738095222bd92D37B07ed034AB696) owns all protocol contracts and collects fees.

Risk analysis

One card per dimension, sorted by severity. Only Verifiability and Autonomy carry automated signals in Phase 0. See methodology for scope.

Audit a dimension yourself · DEFI@home Contribute an LLM-run assessment — any model, any dimension. Three agreeing runs merge automatically into the public record.

DEFI@home is a distributed audit network modeled on SETI@home: instead of CPU cycles, it crowdsources LLM reasoning. Paste a slice prompt into Claude, ChatGPT, Gemini, or any browsing-capable model, and submit the JSON output as a pull request. The quorum bot merges it once ≥3 independent runs (from different models) reach the same grade — no single model, and no single contributor, can move the needle alone. How it works →

  • Address discovery 143 addresses on file · 1 run Submit run ↗
  • Verifiability Unverified Submit run ↗
  • Control Unverified Submit run ↗
  • Ability to exit Unverified Submit run ↗
  • Autonomy Unverified Submit run ↗
  • Open Access Unverified Submit run ↗
  • Audit all 5 dimensions · one prompt Submit run ↗
  1. Verifiability tentative
    Open source + 22 audits

    Protocol publishes a GitHub repository and has at least one audit on record. This is a coarse Phase-0 signal only: auditor reputation, scope, and post-audit review coverage are not yet weighted.

    Run your own prompt Submit run ↗
4 dimensions not yet assessed (Control, Ability to exit, Autonomy, Open Access)
  1. Control unknown Unverified
    Not yet assessed

    Who holds admin privileges, how contracts can be upgraded, and how quickly. No automated heuristic grades this at Phase 0; a real assessment arrives when onchain discovery reads roles, owners, and timelocks.

    No model has graded this dimension yet. Run the slice prompt through any LLM and submit the JSON — once ≥3 independent runs agree, the quorum bot merges the verdict here.

    Submit run ↗
  2. Ability to exit unknown Unverified
    Not yet assessed

    Whether users can exit on their own terms if the team disappears or acts adversarially. Requires per-protocol review; not available at Phase 0.

    No model has graded this dimension yet. Run the slice prompt through any LLM and submit the JSON — once ≥3 independent runs agree, the quorum bot merges the verdict here.

    Submit run ↗
  3. Autonomy unknown Unverified
    No Phase-0 autonomy signal

    Neither the category heuristic nor the forkedFrom signal fires for this protocol. A real autonomy graph (oracles, bridges, fallbacks, governance-mutable dependencies) arrives with Phase-2 onchain discovery.

    No model has graded this dimension yet. Run the slice prompt through any LLM and submit the JSON — once ≥3 independent runs agree, the quorum bot merges the verdict here.

    Submit run ↗
  4. Open Access unknown Unverified
    Not yet assessed

    Whether the protocol depends on privileged operators, whitelists, geo-restrictions, or off-chain infrastructure. This is not a signal DeFiLlama carries in a usable form; crawler-based detection lands in a later phase.

    No model has graded this dimension yet. Run the slice prompt through any LLM and submit the JSON — once ≥3 independent runs agree, the quorum bot merges the verdict here.

    Submit run ↗

Stage

Preview of the Phase-3 maturity framework. DeFiPunk'd will adopt DeFiScan v2's stages verbatim; the section is rendered below in its intended shape so the structure is visible today.

Origami Finance has not yet been assessed under the DeFiScan v2 stage framework.
The walkaway test is the central criterion. Once stages land, protocols reach Stage 1 only if users can exit in the presence of malicious operators even when the emergency council disappears.
Scope of assessment
Stages are assessed per-protocol against DeFiScan v2's criteria: governance structure, upgradeability path, timelock durations, emergency-council scope, and the walkaway test. The analysis depends on onchain discovery (roles, owners, timelocks) and deeper review of deployed contracts — neither of which DeFiPunk'd automates at Phase 0.
Stage 0 requirements pending
Governance is largely off-chain, contracts are upgradeable with short or no timelock, and the protocol depends on a multisig or team with full discretion. At Phase 0 DeFiPunk'd does not automatically evaluate these; the assessment lands with crawler-based onchain discovery.
Stage 1 requirements pending
Users can exit or opt out on their own terms even if the team disappears. Upgrades run through a meaningful timelock with an emergency security council clearly scoped. The walkaway test is the headline criterion.
Stage 2 requirements pending
Protocol is fully permissionless and immutable, or upgrades require a supermajority of token holders with a long timelock and no emergency override. This is the terminal stage of the DeFiScan v2 framework.
Learn more about DeFiScan v2 stages →
Stages are an opinionated assessment of maturity, not a rating of security or safety. A protocol can sit at Stage 2 and still carry substantial technical or economic risk; the framework exists to incentivize decentralization, not to rank protocols.

Contract surface

Every contract in scope for this protocol — pooled from DeFiLlama's TVL adapter (mechanical) and DEFI@home discovery submissions (LLM-curated). Verified-source flags come from Etherscan + Sourcify; owner / multisig metadata is read on-chain when available. Reviewer audit context, not a slice score. A lending protocol's adapter set will list third-party collateral tokens alongside its own contracts; attribution is the grader's job.

  • 143addresses
  • 0verified source
  • 0proxies

TVL adapter pinned at 683d369. Sourcecode fetched 2026-05-06. Control fetched 2026-10-01.

Berachainother (INFRARED_AUTO_COMPOUNDER_BYUSD_HONEY_A OVERLORD_WALLET)0x961e…bd83discovery————
Berachainother (INFRARED_AUTO_COMPOUNDER_IBERA_IBGT_A OVERLORD_WALLET)0x8929…0880discovery————
Berachainother (INFRARED_AUTO_COMPOUNDER_IBERA_OSBGT_A OVERLORD_WALLET)0x4e0a…df0ddiscovery————
Berachainother (INFRARED_AUTO_COMPOUNDER_OHM_HONEY_A OVERLORD_WALLET)0xa309…952ediscovery————
Berachainother (INFRARED_AUTO_COMPOUNDER_RUSD_HONEY_A OVERLORD_WALLET)0xf9c9…8c73discovery————
Berachainother (INFRARED_AUTO_COMPOUNDER_WBERA_HONEY_A OVERLORD_WALLET)0x9683…17f7discovery————
Berachainother (INFRARED_AUTO_COMPOUNDER_WBERA_IBERA_A OVERLORD_WALLET)0xaf89…f893discovery————
Berachainother (INFRARED_AUTO_COMPOUNDER_WBERA_IBGT_A OVERLORD_WALLET)0xf9dd…55fddiscovery————
Berachainother (INFRARED_AUTO_COMPOUNDER_WBTC_HONEY_A OVERLORD_WALLET)0x395f…bd3adiscovery————
Berachainother (INFRARED_AUTO_COMPOUNDER_WBTC_WBERA_A OVERLORD_WALLET, also SWBERA_OSBGT_A)0xcac5…6c94discovery————
Berachainother (INFRARED_AUTO_COMPOUNDER_WBTC_WETH_A OVERLORD_WALLET)0x4169…445fdiscovery————
Berachainother (INFRARED_AUTO_COMPOUNDER_WETH_WBERA_A OVERLORD_WALLET)0xe0ef…8ceddiscovery————
Berachainother (LOV_ORIBGT_A OVERLORD_WALLET)0x882b…f299discovery————
Berachainother (ORIBGT OVERLORD_WALLET)0xbe10…d1fcdiscovery————
Berachainpool (LOV_ORIBGT_A EULER_V2_BORROW_LEND)0xee67…4b72discovery————
Berachainrouter (INFRARED_AUTO_COMPOUNDER_BYUSD_HONEY_A SWAPPER)0xe7c1…3a53discovery———router
Berachainrouter (INFRARED_AUTO_COMPOUNDER_IBERA_IBGT_A SWAPPER)0xe141…d24cdiscovery———router
Berachainrouter (INFRARED_AUTO_COMPOUNDER_IBERA_OSBGT_A SWAPPER)0xd6d5…b3bcdiscovery———router
Berachainrouter (INFRARED_AUTO_COMPOUNDER_OHM_HONEY_A SWAPPER)0x564f…1999discovery———router
Berachainrouter (INFRARED_AUTO_COMPOUNDER_RUSD_HONEY_A SWAPPER)0xd8c2…e1b9discovery———router
Berachainrouter (INFRARED_AUTO_COMPOUNDER_WBERA_HONEY_A SWAPPER)0xd88d…3bebdiscovery———router
Berachainrouter (INFRARED_AUTO_COMPOUNDER_WBERA_IBERA_A SWAPPER)0xb923…f0e1discovery———router
Berachainrouter (INFRARED_AUTO_COMPOUNDER_WBERA_IBGT_A SWAPPER)0x1511…eb47discovery———router
Berachainrouter (INFRARED_AUTO_COMPOUNDER_WBTC_HONEY_A SWAPPER)0xb9c3…c384discovery———router
Berachainrouter (INFRARED_AUTO_COMPOUNDER_WBTC_WBERA_A SWAPPER, also SWBERA_OSBGT_A)0x8b21…e305discovery———router
Berachainrouter (INFRARED_AUTO_COMPOUNDER_WBTC_WETH_A SWAPPER)0x345c…539ddiscovery———router
Berachainrouter (INFRARED_AUTO_COMPOUNDER_WETH_WBERA_A SWAPPER)0xab35…4ec4discovery———router
Berachainrouter (ORIBGT SWAPPER)0x23d7…80dbdiscovery———router
Berachaintoken (INFRARED_AUTO_COMPOUNDER_BYUSD_HONEY_A TOKEN)0x081e…e7e4discovery———token
Berachaintoken (INFRARED_AUTO_COMPOUNDER_IBERA_IBGT_A TOKEN)0x90b7…c557discovery———token
Berachaintoken (INFRARED_AUTO_COMPOUNDER_IBERA_OSBGT_A TOKEN)0x7c6e…44c5discovery———token
Berachaintoken (INFRARED_AUTO_COMPOUNDER_OHM_HONEY_A TOKEN)0xa777…cc69discovery———token
Berachaintoken (INFRARED_AUTO_COMPOUNDER_RUSD_HONEY_A TOKEN)0xaa78…4387discovery———token
Berachaintoken (INFRARED_AUTO_COMPOUNDER_WBERA_HONEY_A TOKEN)0xcdb9…72c8discovery———token
Berachaintoken (INFRARED_AUTO_COMPOUNDER_WBERA_IBERA_A TOKEN)0x0a37…8b30discovery———token
Berachaintoken (INFRARED_AUTO_COMPOUNDER_WBERA_IBGT_A TOKEN)0x32bc…c1f6discovery———token
Berachaintoken (INFRARED_AUTO_COMPOUNDER_WBTC_HONEY_A TOKEN)0xbd88…d263discovery———token
Berachaintoken (INFRARED_AUTO_COMPOUNDER_WBTC_WBERA_A TOKEN, also SWBERA_OSBGT_A)0x0f67…e111discovery———token
Berachaintoken (INFRARED_AUTO_COMPOUNDER_WBTC_WETH_A TOKEN)0xbd2f…fb92discovery———token
Berachaintoken (INFRARED_AUTO_COMPOUNDER_WETH_WBERA_A TOKEN)0x7a1b…3afcdiscovery———token
Berachaintoken (LOV_ORIBGT_A TOKEN)0x0059…6c06discovery———token
Berachaintoken (ORIBGT TOKEN)0x69f1…a30adiscovery———token
Berachainvault (INFRARED_AUTO_COMPOUNDER_BYUSD_HONEY_A MANAGER)0xe386…3521discovery———vault
Berachainvault (INFRARED_AUTO_COMPOUNDER_IBERA_IBGT_A MANAGER)0xa128…5b58discovery———vault
Berachainvault (INFRARED_AUTO_COMPOUNDER_IBERA_OSBGT_A MANAGER)0x8571…7207discovery———vault
Berachainvault (INFRARED_AUTO_COMPOUNDER_OHM_HONEY_A MANAGER)0x3ed8…9896discovery———vault
Berachainvault (INFRARED_AUTO_COMPOUNDER_RUSD_HONEY_A MANAGER)0x6834…45e6discovery———vault
Berachainvault (INFRARED_AUTO_COMPOUNDER_WBERA_HONEY_A MANAGER)0xc6a9…ac7bdiscovery———vault
Berachainvault (INFRARED_AUTO_COMPOUNDER_WBERA_IBERA_A MANAGER)0xf47a…ed40discovery———vault
Berachainvault (INFRARED_AUTO_COMPOUNDER_WBERA_IBGT_A MANAGER)0xa163…b9c2discovery———vault
Berachainvault (INFRARED_AUTO_COMPOUNDER_WBTC_HONEY_A MANAGER)0xe8bd…a671discovery———vault
Berachainvault (INFRARED_AUTO_COMPOUNDER_WBTC_WBERA_A MANAGER, also SWBERA_OSBGT_A)0x6a3b…9207discovery———vault
Berachainvault (INFRARED_AUTO_COMPOUNDER_WBTC_WETH_A MANAGER)0x05d3…7b79discovery———vault
Berachainvault (INFRARED_AUTO_COMPOUNDER_WETH_WBERA_A MANAGER)0x87ec…5237discovery———vault
Berachainvault (INFRARED_AUTO_STAKING_BYUSD_HONEY_A)0x252c…6384discovery———vault
Berachainvault (INFRARED_AUTO_STAKING_EWBERA_4_OSBGT_A)0xe3a2…7b78discovery———vault
Berachainvault (INFRARED_AUTO_STAKING_HOHM_HONEY_A)0x50c1…7e91discovery———vault
Berachainvault (INFRARED_AUTO_STAKING_IBERA_IBGT_A)0xdfd2…9a60discovery———vault
Berachainvault (INFRARED_AUTO_STAKING_IBERA_OSBGT_A)0xfcb6…df8adiscovery———vault
Berachainvault (INFRARED_AUTO_STAKING_OHM_HONEY_A)0x1a07…f67fdiscovery———vault
Berachainvault (INFRARED_AUTO_STAKING_RUSD_HONEY_A)0xe49b…88fadiscovery———vault
Berachainvault (INFRARED_AUTO_STAKING_SOLVBTCBNB_XSOLVBTC_A)0x5374…796fdiscovery———vault
Berachainvault (INFRARED_AUTO_STAKING_SWBERA_OSBGT_A)0x9e5c…2aa4discovery———vault
Berachainvault (INFRARED_AUTO_STAKING_WBERA_HONEY_A)0x3190…7b89discovery———vault
Berachainvault (INFRARED_AUTO_STAKING_WBERA_IBERA_A)0xd7f5…fb0cdiscovery———vault
Berachainvault (INFRARED_AUTO_STAKING_WBERA_IBGT_A)0xdb15…b754discovery———vault
Berachainvault (INFRARED_AUTO_STAKING_WBTC_HONEY_A)0x2a66…0b21discovery———vault
Berachainvault (INFRARED_AUTO_STAKING_WBTC_WBERA_A)0x294d…242bdiscovery———vault
Berachainvault (INFRARED_AUTO_STAKING_WBTC_WETH_A)0xa109…dd1adiscovery———vault
Berachainvault (INFRARED_AUTO_STAKING_WETH_WBERA_A)0x6823…0823discovery———vault
Berachainvault (LOV_ORIBGT_A MANAGER)0xb195…3fb3discovery———vault
Berachainvault (ORIBGT MANAGER)0x8e00…602bdiscovery———vault
Ethereummultisig (owner of all protocol contracts and fee collector)0x781b…b696discovery———multisig
Ethereumoracle (STETH_WETH)0x1b18…55e4discovery———oracle
Ethereumoracle (SUSDE_DAI)0x784f…831ddiscovery———oracle
Ethereumoracle (TOKEN_PRICES)0x76cf…e407discovery———oracle
Ethereumoracle (USDE_DAI)0x39cf…32f5discovery———oracle
Ethereumoracle (WEETH_WETH)0xe0db…c32bdiscovery———oracle
Ethereumoracle (WSTETH_WETH)0x2848…ad77discovery———oracle
Ethereumother (FLASHLOAN_PROVIDER SPARK)0x8846…e006discovery————
Ethereumother (hOHM MIGRATOR)0x6b34…5e26discovery————
Ethereumother (hOHM OVERLORD_WALLET)0x0e03…3af1discovery————
Ethereumother (hOHM SWEEP_SWAPPER)0xf7ed…8cdcdiscovery————
Ethereumother (hOHM TELEPORTER - likely cross-chain bridge to Plasma)0xce39…932adiscovery———bridge
Ethereumother (LOV_PT_SUSDE_OCT24_A OVERLORD_WALLET)0x6f4c…a822discovery————
Ethereumother (LOV_RSWETH_A OVERLORD_WALLET)0x7784…ec11discovery————
Ethereumother (LOV_SUSDE_A OVERLORD_WALLET)0xd42c…3bcddiscovery————
Ethereumother (LOV_SUSDE_B OVERLORD_WALLET)0xca06…2fdddiscovery————
Ethereumother (LOV_USD0pp_A OVERLORD_WALLET)0xfa18…fa80discovery————
Ethereumother (LOV_USDE_A OVERLORD_WALLET)0xebf8…5c4fdiscovery————
Ethereumother (LOV_USDE_B OVERLORD_WALLET)0xcd74…6ce0discovery————
Ethereumother (LOV_WEETH_A OVERLORD_WALLET)0x4055…d229discovery————
Ethereumother (LOV_WETH_DAI_LONG_A OVERLORD_WALLET)0x0354…3550discovery————
Ethereumother (LOV_WOETH_A OVERLORD_WALLET)0x9564…1fa0discovery————
Ethereumother (LOV_WSTETH_A OVERLORD_WALLET)0x4616…d037discovery————
Ethereumother (LOV_WSTETH_B OVERLORD_WALLET)0x5a03…4c2cdiscovery————
Ethereumother (OVERLORD_WALLET SKY+ and LOV_AAVE_USDC_LONG_A)0x3377…a0c4discovery————
Ethereumother (SKY+ COW_SWAPPER)0x6801…1925discovery————
Ethereumpool (LOV_AAVE_USDC_LONG_A SPARK_BORROW_LEND)0xb266…2d96discovery————
Ethereumpool (LOV_PT_SUSDE_OCT24_A MORPHO_BORROW_LEND)0x0340…3e3bdiscovery————
Ethereumpool (LOV_RSWETH_A SPARK_BORROW_LEND)0xe6b1…8f17discovery————
Ethereumpool (LOV_SUSDE_A MORPHO_BORROW_LEND)0xb48a…6df2discovery————
Ethereumpool (LOV_SUSDE_B MORPHO_BORROW_LEND)0xefc8…7e93discovery————
Ethereumpool (LOV_USD0pp_A MORPHO_BORROW_LEND)0x3963…efe6discovery————
Ethereumpool (LOV_USDE_A MORPHO_BORROW_LEND)0x5504…8299discovery————
Ethereumpool (LOV_USDE_B MORPHO_BORROW_LEND)0xc8a2…e32cdiscovery————
Ethereumpool (LOV_WEETH_A MORPHO_BORROW_LEND)0xf919…322cdiscovery————
Ethereumpool (LOV_WETH_DAI_LONG_A MORPHO_BORROW_LEND)0x235e…1394discovery————
Ethereumpool (LOV_WOETH_A MORPHO_BORROW_LEND)0x4e56…5ea2discovery————
Ethereumpool (LOV_WSTETH_A SPARK_BORROW_LEND)0xaedd…212ediscovery————
Ethereumpool (LOV_WSTETH_B SPARK_BORROW_LEND)0x42cd…d342discovery————
Ethereumrouter (DIRECT_1INCH_SWAPPER)0x5bf1…0234discovery———router
Ethereumrouter (ERC4626_AND_1INCH_SWAPPER)0xe488…3baediscovery———router
Ethereumtoken (hOHM TOKEN)0x1db1…44f6discovery———token
Ethereumtoken (LOV_AAVE_USDC_LONG_A TOKEN)0x26df…21a7discovery———token
Ethereumtoken (LOV_PT_SUSDE_OCT24_A TOKEN)0xb9da…7187discovery———token
Ethereumtoken (LOV_RSWETH_A TOKEN)0x7152…f26adiscovery———token
Ethereumtoken (LOV_SUSDE_A TOKEN)0x7fc8…9edadiscovery———token
Ethereumtoken (LOV_SUSDE_B TOKEN)0xe567…bf4ediscovery———token
Ethereumtoken (LOV_USD0pp_A TOKEN)0x78f3…a8e6discovery———token
Ethereumtoken (LOV_USDE_A TOKEN)0xc65a…d2e5discovery———token
Ethereumtoken (LOV_USDE_B TOKEN)0x9fa6…e53cdiscovery———token
Ethereumtoken (LOV_WEETH_A TOKEN)0x9c1f…5247discovery———token
Ethereumtoken (LOV_WETH_DAI_LONG_A TOKEN)0x2432…b678discovery———token
Ethereumtoken (LOV_WOETH_A TOKEN)0xc242…c6dediscovery———token
Ethereumtoken (LOV_WSTETH_A TOKEN)0x117b…845ddiscovery———token
Ethereumtoken (LOV_WSTETH_B TOKEN)0xc03c…7ea5discovery———token
Ethereumtoken (SKY+ TOKEN)0x07c5…f5a2discovery———token
Ethereumvault (hOHM MANAGER)0xe6c5…f3ffdiscovery———vault
Ethereumvault (LOV_AAVE_USDC_LONG_A MANAGER)0xed95…e83cdiscovery———vault
Ethereumvault (LOV_PT_SUSDE_OCT24_A MANAGER)0x7157…a22adiscovery———vault
Ethereumvault (LOV_RSWETH_A MANAGER)0x2f80…1709discovery———vault
Ethereumvault (LOV_SUSDE_A MANAGER)0x0b53…d4d4discovery———vault
Ethereumvault (LOV_SUSDE_B MANAGER)0x7d76…6603discovery———vault
Ethereumvault (LOV_USD0pp_A MANAGER)0x180f…8129discovery———vault
Ethereumvault (LOV_USDE_A MANAGER)0x2ec7…8b79discovery———vault
Ethereumvault (LOV_USDE_B MANAGER)0x5383…3b79discovery———vault
Ethereumvault (LOV_WEETH_A MANAGER)0x4394…d111discovery———vault
Ethereumvault (LOV_WETH_DAI_LONG_A MANAGER)0xbfa7…9ce6discovery———vault
Ethereumvault (LOV_WOETH_A MANAGER)0x051d…1ec3discovery———vault
Ethereumvault (LOV_WSTETH_A MANAGER)0xc963…e3a9discovery———vault
Ethereumvault (LOV_WSTETH_B MANAGER)0xc1a2…03cddiscovery———vault
Ethereumvault (SKY+ MANAGER)0xc522…dc9ediscovery———vault

Protocol Info

Links

[defillama] Source: DeFiLlama [:] Source: DEFI@home quorum
Twitter
@origami_fi

Security

[:] Source: DEFI@home quorum
Audits
20 audits
Bug bounty
unknown
Security contact
unknown

Technical

[:] Source: DEFI@home quorum
Upgradeability
Unknown

Provenance

[defillama] Source: DeFiLlama
Review status
listed
Updated
2026-09-28 12:50 UTC