Version 2026-10-14 · Forms part of the Terms of Use
This disclosure covers two different things, and you should be clear which applies to you:
/router/. Real money on Ethereum mainnet,
routed to a protocol we do not control. This is the one that can cost you money today.Your funds sit in the lending protocol's contracts, not ours. That protocol is audited and has held billions for years, which is exactly why we route to it rather than to our own code, which is still in development — but audited protocols have still been exploited, and no audit is a guarantee. If the protocol suffers a critical exploit, your supplied funds can be lost, and StaterFi cannot recover them, compensate you, or intervene in any way.
Supplying requires granting a contract permission to move your tokens. We request the exact amount for each action rather than an unlimited allowance, which limits this substantially — but any approval you have granted anywhere, to us or to anyone, is a standing permission until revoked. If a contract you approved is later compromised, that allowance can be used.
What to do: review your allowances periodically with any revocation tool and remove ones you no longer need. This is good practice across all of DeFi, not specific to us.
Every transaction is final the moment it is included in a block. A wrong amount, a wrong network, a compromised device, or a phishing site impersonating this one all lead to permanent, unrecoverable loss. There is no support desk that can reverse a blockchain transaction — not ours, not the protocol's.
Check the URL before you sign anything. Interfaces like this one are a standard phishing target precisely because they ask for signatures.
A lending protocol can lose money with no flaw in its own code. When collateral it accepted turns out to be worth less than the loans made against it, the protocol is left holding debt that nobody will repay. In April 2026 an exploit of another project's token, which this protocol accepted as collateral, left it with bad debt that press reports put between 123 and 230 million dollars, and about 6 billion dollars of deposits were withdrawn within days. How such a loss is shared between the protocol's own reserves and its depositors is decided by the protocol's governance, not by us. A deposit made through this page is exposed to it exactly as any other deposit is.
You are not exposed only to the assets you choose. A pool's safety depends on every asset the protocol accepts as collateral, including ones this page does not list.
The protocol lends deposits out. What can be withdrawn at any moment is what is not lent at that moment. On most days that is far more than any one person holds. When many depositors leave at once it can fall to nothing, and a withdrawal is then refused until borrowers repay or new deposits arrive. Interest rates rise steeply in the meantime to pull that along, but nothing guarantees how long it takes. The app limits its withdraw maximum to what the pool has on hand when you open the form, and says so when that is the limit. Do not deposit money you will need on a particular day.
Every asset here except ETH is a token issued by someone. USDC and USDT are claims on dollars held by their issuers, Circle and Tether. Each issuer can freeze the tokens at an address and has done so, and either token can trade below a dollar if confidence in its issuer falls. cbBTC, WBTC and tBTC are claims on Bitcoin held by Coinbase, by a BitGo and BiT Global multisig, and by the Threshold network's signers. None of them is Bitcoin on the Bitcoin network. Coinbase can freeze cbBTC, and each token depends on its custodian staying solvent and honest. A frozen or broken token inside the protocol is a loss for whoever holds it or lent it, and can become one for the pool.
A loan opened here, or anywhere else against the same deposit, can be liquidated: if your collateral's value falls far enough that the loan crosses the protocol's liquidation threshold, collateral is sold to repay the debt, with a penalty: 5% on ETH and WBTC and 7.5% on cbBTC and tBTC when this version was written. There is no warning and no grace period. While the loan or the collateral behind it is worth less than 2,000 dollars, a liquidator may repay the whole loan in one transaction, not a part of it. The protocol liquidates when your health factor falls below 1.00, which can happen from a price move alone while you sleep.
Before you confirm a loan, the app shows the health factor after it and the price at which liquidation would begin, and suggests a smaller amount when the request is aggressive. While a loan is open, the maximum withdrawal it offers is a conservative one that keeps your position within its borrow limit. Those are guides, not protection: the protocol liquidates on its own rules whatever this page shows.
The protocol values collateral using external price oracles. A manipulated, stale, or failed feed can cause wrongful liquidation, or allow borrowing against collateral valued incorrectly. This risk belongs to the protocol's design and is outside our control.
Prices, rates, balances and health factors are read from the protocol and its oracles at the moment of display, over public infrastructure that can be slow, rate-limited, or stale. A number can change between the moment you read it and the moment your transaction executes. Treat the protocol's own interface as the authoritative view of your position, and never make a decision that depends on a figure here being exact.
Being candid about our own maturity: this page is newly written. Its calldata construction is verified by automated tests against live mainnet, and it has been manually tested with a real wallet — but it has not been used at scale, and it has not been independently reviewed. Software this young contains bugs that testing has not yet found. Start with an amount you would not mind losing.
The supply rate shown is the protocol's current rate, set algorithmically by utilization. It can fall to near zero. Nothing on this page is a promise of yield, and past or present rates say nothing about future ones.
We may take this page down at any time, without notice, and we are under no obligation to keep operating it. Your funds are unaffected by that — they are in the protocol, reachable through its own interface, which is the point of a non-custodial design. But do not rely on this page continuing to exist.
Supplying, withdrawing and earning interest may be taxable events where you live, and the obligation to report them is yours. Whether using this software is lawful in your jurisdiction is also your responsibility. We give no advice on either.
It is not on mainnet, and no real deposits are accepted. Nothing on the /router/
page touches it. Disclosed here so that its state is on the record:
When StaterFi's protocol does launch, it will be behind a published independent audit with a completed fix-verification pass, and this disclosure will be updated with its specific risks. Until then, treat any figure, rate or projection shown for StaterFi's own protocol as illustrative.
Commit an amount whose total loss would not change your circumstances. Verify the contract address shown on the page before signing. Review your token approvals afterwards. And if anything here was confusing, that is a reason to stop, not a reason to proceed carefully.