S&P Global Ratings announced on Monday that it has developed a risk assessment framework for digital asset lending vaults, a growing segment of the cryptocurrency market.

The framework evaluates vaults across six risk categories: portfolio credit quality, liquidity mismatch, curator oversight, blockchain integrity, protocol functionality, and security and governance controls. S&P clarified that the assessments focus on the likelihood of investor losses but do not constitute formal credit ratings or commentary on expected yields.

Lisa Schroeer, a senior analyst at S&P Global Ratings, explained that weaknesses in any single category can undermine overall risk positioning. "A material weakness in any factor can constrain the overall VRA," she said. "A strong score in one factor does not offset a material weakness in another."

According to the firm, approximately $10 billion in digital asset deposits were held across lending vaults in September, up from $1.5 billion two years prior. S&P plans to release its first Vault Risk Assessments in upcoming announcements, though specific vaults under review have not been disclosed.

The framework aims to increase transparency around operational and technical risks, enabling investors to make more informed allocation decisions in decentralized finance (DeFi) products.

Crypto lending vaults aggregate user deposits and deploy them through algorithmic strategies or human-curated approaches, often using smart contracts. Participants receive tokenized shares representing their stake and returns. These products have expanded rapidly, with exchanges and DeFi platforms launching yield-generating vaults in partnership with infrastructure providers.

In February, Telegram’s Wallet introduced self-custodial vaults for Bitcoin, Ethereum, and USDT, leveraging technology from Morpho, TAC, and Re7. In May, Kraken launched a Bitcoin yield vault powered by Veda and managed by Sentora, which attracted $30 million from 4,000 wallets within its first 10 hours. By September, Kraken had extended the model to tokenized equities and ETFs, including positions in Nvidia, the SPDR S&P 500, and Invesco QQQ.

Despite growth, risks remain. In August, the lending protocol Term Finance disclosed a loss of approximately $8.5 million after a governance exploit affected its Meta Vaults.

Regulatory uncertainty persists in the U.S. In July, SEC Commissioner Hester Peirce indicated that certain vault structures and onchain lending mechanisms could fall under federal securities laws, depending on design and operational control. She noted that vaults involving discretionary asset allocation, yield strategy decisions, or liquidation protocols may trigger regulatory obligations under securities, investment company, or investment adviser frameworks.

While the market evolves, S&P’s risk model seeks to standardize evaluation criteria in a space where technical complexity and regulatory ambiguity intersect.