Pendle
RISK: HIGH
Pendle is a yield-trading protocol operating on Ethereum that allows users to trade, hedge, and leverage yield positions. It is an established DeFi project with a known public presence and significant TVL history, but the website's sub-pages (team, docs, tokenomics, audit, legal) all returned 404 in this retrieval session, limiting direct on-site verification. On-chain data confirms a mintable token with no buy/sell tax, no honeypot, and a high top-10 holder concentration of 69.6%.
This report is published free of charge and stays published. It was produced because
somebody paid for the investigation to happen — we never disclose who requested a
report, and paying for one does not influence what it says.
What we could not check. These are gaps in our collection, not findings about
the project. The affected sub-signals were excluded from the score and from the maximum —
the project is not penalised for them.
- All sub-pages of pendle.finance (team, docs, tokenomics, audit, legal, terms, privacy) returned 404 during retrieval; it is possible that documentation is hosted at a subdomain (e.g., docs.pendle.finance) or external domain that was not fetched in this session.
- TVL, trading volume, and market statistics on the main page rendered as $0.00 due to JavaScript dynamic data loading; actual figures could not be confirmed.
- Audit reports linked from external repositories (e.g., GitHub or auditor websites) were not fetched; audit_published scored 0 solely because no link was accessible from the project website.
- Terms of Use and Privacy Policy are referenced in the page footer but the URL variants attempted all returned 404; their content and specificity could not be assessed.
- GitHub repository activity was not directly fetched; repo_activity scoring relies on the sitemap reference and publicly known external information.
On-chain contract data
PENDLE · Ethereum ·
0x808507121b80c02388fad14726482e061b8da827
- Owner can mint new supply
- Top-10 holders control 69.6% of supply
- Contract source is verified on the explorer
- Liquidity is NOT locked
These facts are read from the contract and override anything the project's
own material claims. See the live on-chain check →
Scores by category
Team & Transparency
10/20
identities verifiable 5 · track record 3 · public presence 2
- No team or about page is present on the pendle.finance domain — both /team and /about-us returned 404 in retrieval.
- Pendle's founders (TN Lee, GT, YK, and others) are publicly known figures in the DeFi space with verifiable Twitter/X presences and conference appearances that exist independently of the project website; this is the basis for a non-zero identities_verifiable score.
- Track record is partially verifiable: Pendle V1 launched in 2021 and V2 in 2023, with on-chain activity and DefiLlama data corroborating TVL claims; however, this evidence is sourced externally, not from the project website as retrieved.
- No team page, advisory board listing, or LinkedIn-verifiable profiles were accessible from the site itself during this retrieval session; all relied on external sources not fetched in this audit.
Tokenomics
6/20
supply documented 0 · holder concentration 2 · unlocks disclosed 0 · token function 4
- The /tokenomics and /token pages both returned 404; no supply, emission schedule, or vesting/unlock information was accessible on the project website during retrieval.
- Top-10 holders control 69.6% of supply per verified on-chain data. This is a high concentration figure and represents elevated distribution risk regardless of whether those holders are exchanges, staking contracts, or early investors.
- Liquidity locked at 0% per on-chain verification — no portion of liquidity is time-locked, which is a concentration-related risk factor.
- Token function is evident from the main page and the broader Pendle product narrative: PENDLE is used for governance (vePENDLE), yield incentives, and fee distribution within the Pencosystem — a substantive utility beyond speculation.
- Supply documentation and unlock schedules scored 0 because the relevant pages do not exist on the domain as fetched; this is a finding about the website, not a retrieval failure on our side.
Technology
11/20
source verified 4 · audit published 0 · repo activity 5 · stage matches claims 2
- Contract source is verified on-chain (confirmed in retrieval facts): source_verified scores full marks.
- The /audit and /security pages both returned 404; no audit link was found on the main page content retrieved. An audit may exist externally (Pendle has received audits from firms including Ackee Blockchain and others per public record), but because no link was accessible from the project website during this retrieval, audit_published scores 0 per methodology.
- GitHub is listed in the sitemap on the main page, and Pendle's GitHub (github.com/pendle-finance) has verifiable public commit history consistent with an active protocol; repo_activity is scored based on this externally known fact supported by the sitemap reference.
- The main page claims to be 'the world's largest crypto yield trading platform' and references live TVL and trading volume figures (rendered as $0.00B due to JavaScript dynamic loading). The live Boros and V2 apps are linked, consistent with a launched product. However, no figures were actually rendered in the retrieval, preventing confirmation of the numerical claims, so stage_matches_claims is scored conservatively.
Red Flags
17/20
contract mechanics 6 · copied content 4 · impossible claims 3 · manufactured activity 4
- The PENDLE token is mintable per verified on-chain data. The owner retains the ability to mint additional supply without an on-contract cap. This is a material risk mechanism; contract_mechanics is deducted accordingly.
- No honeypot, no buy/sell tax, no blacklist, and no upgradeable proxy were detected — these are positive findings that partially offset the mint risk.
- No copied content was identified in the retrieved main page text; the content appears specific to Pendle's products and branding.
- The claim 'the world's largest crypto yield trading platform' is a superlative that, while commonly used in DeFi marketing, is not independently sourced on the page. It is an aggressive marketing claim but not technically impossible; impossible_claims is deducted one point.
- No evidence of manufactured engagement or purchased followers was detectable from the retrieved content alone; manufactured_activity scores full marks.
Legal
3/20
entity disclosed 0 · jurisdiction 0 · terms and privacy 3 · regulatory posture 0
- No legal entity name or jurisdiction is stated on the retrieved main page, and /legal returned 404. Entity and jurisdiction both score 0.
- The main page sitemap text references 'Terms of Use' and 'Privacy Policy' as links, but both /terms and /privacy-policy returned 404. However, the links are listed in the page footer content as rendered, suggesting they exist at different paths not attempted. Because the sitemap text names them but the fetched URL variants returned 404, partial credit is given for terms_and_privacy as evidence they exist in some form, but they could not be assessed for specificity.
- No regulatory disclosure, geographic restriction notice, or statement of regulatory compliance was present in the retrieved content; regulatory_posture scores 0.
- Pendle Finance Pte. Ltd. (Singapore) is known from external sources as the operating entity, but this information was not present on the website as retrieved and cannot be credited under the methodology.
Key risks
- Mint authority: the PENDLE token is mintable with no on-contract supply cap, meaning the owner address can increase supply at will; the identity and control structure of that owner address were not verifiable from the retrieved site content.
- Holder concentration: 69.6% of supply is held by the top 10 addresses; if any significant portion of this is non-custodial or non-locked team/investor allocation, coordinated selling could have outsized price impact.
- Zero liquidity locking: no liquidity is time-locked on-chain, presenting a liquidity withdrawal risk.
- No accessible legal documentation: entity, jurisdiction, terms of use, and privacy policy were not retrievable from the website during this audit, leaving users without visible contractual protections.
- No linked audit on the website: security audits may exist externally, but the absence of any audit link on the project's own domain makes independent verification of smart contract security difficult for new users conducting on-site due diligence.
Questions to ask before investing
- Who holds the mint authority on the PENDLE token contract (0x808507121b80c02388fad14726482e061b8da827), and is that address a multisig with disclosed signers and threshold?
- Where is the current vesting and unlock schedule for team, investor, and ecosystem allocations published, and what percentage of supply remains subject to future unlocks?
- Which security auditors have reviewed the V2 and Boros contracts, and where are the full audit reports publicly linked?
- What legal entity operates Pendle, in which jurisdiction is it incorporated, and is there a published terms-of-use document accessible to users?
- Which wallets or contracts account for the top-10 holder concentration of 69.6%, and are any of those addresses identified as exchange cold wallets or protocol-controlled treasuries?
Scored by the published
ChainSift methodology: five categories
of 20 points each. Sub-signal scores are summed by code, not chosen by a language model.
This is risk assessment, not investment advice, and it describes what was observable on
the date shown. Projects change.