Glossary
Onchain / DeFi

Smart Contract Risk

The risk that a bug or exploit in protocol code causes loss of funds without any insurance loss event occurring.

Smart contract risk is the probability that errors in a protocol's code — or deliberate exploits of vulnerabilities — result in loss of capital. Unlike traditional financial risk, smart contract risk is not correlated with insurance loss events: a protocol can be drained by a hacker even if no catastrophe occurs.

For onchain reinsurance capital providers, smart contract risk is a primary concern. If Ensuro, onRe, or a similar protocol is exploited, capital providers may lose principal regardless of the actual loss experience of the underlying insurance book.

Mitigation strategies include third-party code audits, formal verification of smart contracts, bug bounty programmes, protocol insurance (e.g. via Nexus Mutual), and capital diversification across multiple protocols.

Example usage

Before depositing capital into an onchain reinsurance protocol, institutional investors conduct smart contract risk assessment alongside actuarial analysis of the insurance book.

Frequently asked questions

What is Smart Contract Risk?

The risk that a bug or exploit in protocol code causes loss of funds without any insurance loss event occurring. Smart contract risk is the probability that errors in a protocol's code — or deliberate exploits of vulnerabilities — result in loss of capital. Unlike traditional financial risk, smart contract risk is not correlated with insurance loss events: a protocol can be drained by a hacker even if no catastrophe occurs.

How is Smart Contract Risk used in practice?

Before depositing capital into an onchain reinsurance protocol, institutional investors conduct smart contract risk assessment alongside actuarial analysis of the insurance book.