DefiCareDefiCare
Checking auth...

Mochi

About

Mochi is a cross-chain, autonomously governed decentralized stablecoin protocol that lets users deposit a wide variety of crypto assets — including long-tail tokens, yield-bearing assets, LP tokens, and NFTs — as collateral to mint the USDM overcollateralized stablecoin. Vault parameters such as collateral factor, liquidation factor, credit cap, and stability fees are set algorithmically and updated dynamically based on on-chain liquidity depth and credit utilization, enabling ungated, condition-based listing without governance votes. The protocol is designed to unlock productivity from diverse collateral types that traditional lending protocols cannot safely support.

Where Does Yield Come From?

Mochi generates yield from several fees that keep the protocol healthy and reward different participants.

Borrowers (people who deposit collateral to mint USDM) pay two kinds of fees:

  • Origination fee — a one-time charge of 0.5% on the loan amount when the vault is first created.
  • Stability fee — an ongoing, variable annual fee (paid in USDM) that changes based on two things: the risk category of the collateral (called RFC, rated 1 to 6) and how much of the vault's credit limit is currently borrowed. The formula is a simple sliding scale: a base minimum fee plus extra cost that rises as the vault gets closer to its credit cap. The DAO (the protocol's governing community) sets the floor and ceiling for each risk category.

Liquidation fees kick in when a vault becomes undercollateralized (its collateral value drops to the liquidation threshold). A Dutch auction (a falling-price auction) sells off the collateral. The fee depends on the collateral's risk category, ranging from 4.5% to 20% of the debt. From this, the person who triggers the liquidation gets a reward (0.5% to 3% of the debt), and the rest goes to the protocol treasury.

Flash loan fees — USDM flash loans cost 0.1337%. These are single-transaction loans that let users run liquidations efficiently without needing their own capital.

On the deposit side, USDM holders can stake their USDM into the protocol's Curve pool (linked with Convex). This earns them swap fees and yield-bearing rewards from a stable-swap pool, which also helps keep USDM's value stable.

All protocol revenue — from stability fees, origination fees, liquidation fees, and flash loan fees — flows into the Mochi treasury. According to the whitepaper, this treasury funds early Curve and Convex voting incentives and ongoing protocol operations.

Audits

Audit / DateFindingsVerdict
Dedaub02-06-2021
  • Critical2
  • High5
  • Medium2
  • Low1
  • Info6
Dedaub found two critical and five high-severity issues, with the critical and most high-severity items already resolved, but one high-severity access-control issue (OracleRouter setter functions) and several medium/low items remained open at report time, and the audit notes the codebase was still in early development without full testing, so additional audits prior to deployment are recommended.
Dedaub02-07-2021
  • Critical0
  • High2
  • Medium3
  • Low0
  • Info5
The audit reveals significant design-level and implementation risks in the early-stage Mochi CSSR, particularly around the pricing mechanism that combines TWAP with non-time-weighted liquidity, which could enable undercollateralized loans; all findings remain open, and the auditors recommend comprehensive documentation, market simulations, and formal verification before deployment.
Code4rena21-10-2021 - 27-10-2021
  • Critical0
  • High13
  • Medium15
  • Low10
  • Info51
The contest uncovered critical accounting, liquidation, and access-control flaws across Mochi's vault, fee pool, treasury, and liquidator contracts, with all high and medium findings confirmed by the sponsor. The protocol would require substantial rework of debt tracking, liquidation mechanics, and permissioned functions before safe deployment.

Legal

Legal form

Foundation

Status and notes

The website footer displays "© 2021 Mochi Foundation", and the Terms of Service are provided under the Mochi Foundation name. The whitepaper is published by "Mochi Foundation" on HackMD. No registered address, registration number, or jurisdiction of incorporation is disclosed on any official page.