S&P Global Ratings launches risk assessment framework for onchain lending vaults

S&P Global Ratings now has a way to grade onchain lending vaults. On October 4, 2026, the firm published a framework built specifically to measure the risks inside these vaults.

The framework is called “Analytical Approach: Vault Risk Assessments,” or VRA. It aims to tell investors how likely their positions are to be impaired.

What S&P is actually grading

Onchain lending vaults pool digital assets and route them into blockchain-based lending markets. Under the new framework, S&P’s scope covers vaults pooling digital assets backed by crypto or tokenized real-world assets. Vaults lending against tokenized RWA collateral are included, while direct exposure to tokenized bonds falls outside the VRA’s scope.

The VRA is forward-looking. It tries to estimate the potential for investor positions to be impaired, not just describe what has already happened.

S&P is explicit on one point: the VRA is not a credit rating. The scale borrows familiar letter grades but adds a “v” suffix. A top score reads AAA(v), which signals minimal impairment risk.

The four factors under the hood

S&P’s evaluation rests on four main factors: portfolio quality, liquidity pressures, protocol risks and curator oversight.

Portfolio quality looks at what the vault is actually lending against.

Liquidity pressures address whether depositors can get out when they want, including consideration of liquidity mismatches.

Protocol risks cover the infrastructure the vault plugs into. Vaults depend on underlying lending markets, and those markets carry their own technical and design risks.

Curator oversight focuses on the people or entities deciding where capital goes. In vault structures, curators set the allocation strategy.

S&P treats allocation caps written into smart contracts as strong risk limits. A cap coded into the contract limits how much capital can flow into a given market, regardless of what anyone decides in the moment. The framework applies to both permissioned and permissionless vault structures.

What this means for vaults, curators and institutions

For vault operators and curators, the framework creates a public checklist. If S&P rewards coded allocation caps and strong oversight, operators chasing a high score have an incentive to adopt both.

The evaluation principles outlined in the VRA — addressing factors such as liquidity and portfolio quality — are likely to become benchmarks for other financial instruments utilizing DeFi assets.

A grade can create a false sense of safety if users treat AAA(v) as a guarantee rather than an assessment. S&P’s own insistence that this is not a credit rating suggests the firm wants that line kept clear.