Skip to main content
Using any DeFi protocol involves risk. This page explains the specific risks you take on when using Robin Markets and how they are managed, so you can make an informed decision before staking your outcome tokens.

​
Smart Contract Risk

All DeFi protocols carry the risk of code vulnerabilities or exploits, regardless of audit coverage. A well-audited contract can still contain undiscovered bugs, and no audit eliminates risk entirely. In Robin Markets, this applies to both Robin’s own contracts and the third-party yield sources where your funds are deployed to generate yield (see Yield sources). Each of these protocols carries its own independent risk profile. When you stake with Robin Markets, you are indirectly exposed to the security of each underlying protocol in the yield stack.
No smart contract is risk-free, even after audits. Only stake funds you can afford to lose.

​
Temporary Liquidity Risk

Lending pools can prevent lenders from immediately withdrawing all funds if borrow utilization is too high. This happens when too much of the available liquidity has been borrowed and not yet repaid. This situation is temporary, it resolves naturally as borrow utilization decreases and liquidity returns to the pool. What this means for you: even though Robin is designed to always allow withdrawals, you may be temporarily unable to:
  • Withdraw your outcome tokens from Robin
  • Redeem your winning tokens for USDC
Temporary liquidity constraints are a well-known DeFi risk shared across all lending-based yield protocols — they are not unique to Robin Markets. Robin’s architecture is designed to minimize the frequency and duration of these events, but it cannot eliminate them entirely. The currently used “Split Vault” does not have any liquidity constraints.

​
What Robin Does to Mitigate Risk

Robin Markets takes an active approach to risk management throughout the product lifecycle:
  • Independent security audits — Phage Security audited the beta product in September 2025, the V1 system in February 2026, and the V2 upgrade in the most recent release cycle.
  • Proxy upgrade architecture — Contracts use a proxy pattern, which allows the team to patch vulnerabilities and ship improvements without requiring a full redeployment.
  • Governance controls — All protocol changes are gated by a TimeLock controller and require team multi-sig approval, preventing any single party from making unilateral changes.
  • Non-custodial design — Your funds remain on-chain and under your control at all times. Robin Markets never takes custody of your assets.

Audit Reports

Review the independent Phage Security audits for every Robin Markets release.

Contract Addresses

View all V2 and V1 smart contract addresses deployed on Polygon.