Risks
Token, governance, reward, migration, market, and external-dependency failure modes after DGP-003.
Deepstate combines a non-upgradeable order book, token governance, market reward hooks, legacy migration, Sablier streams, and concentrated Uniswap liquidity. Correct execution does not eliminate economic or governance risk.
Token and migration risks
The cap is governance-controlled
The live cap is 3 billion 2DEEP, but the Governor may raise or lower it. A malicious governance majority can authorize additional supply. Lowering the cap below total supply halts ordinary minting and both legacy redemption routes until headroom returns.
Redemptions compete for cap headroom
Legacy DEEP and STATE redemption remain open indefinitely, but neither has a reserve outside the shared cap. If other issuance consumes available headroom, a redemption reverts even though the legacy asset was otherwise eligible.
STATE is escrowed rather than burned
Redeemed STATE is permanently held by the 2DEEP contract because the legacy token has no holder-burn path used by the migration. Security therefore depends on that contract remaining unable to transfer the escrowed STATE.
External minting creates endowment supply
For two years, each role-authorized ordinary mint creates an additional 30 / 70 amount for Deepstate Inc. This is deliberate and means a nominal 100 million market mint increases total supply by approximately 142.857 million. Redemptions do not create this additional supply.
Reward risks
Hooks are best-effort
The Router swallows failing or over-budget hooks to preserve core trading. A missed callback can leave Rewarder V3 state stale and misallocate incentives even while user settlement remains correct.
Tiny or zero accrued claims can affect checkpoint timing
Claim paths may advance an active cursor even when fixed-point rounding produces zero payout. Repeated calls can suppress very small rewards by partitioning time into intervals that round down. This does not redirect funds to the caller, but it can reduce another maker's eventual reward.
Top-only incentives are gameable
Makers can repeatedly improve by one tick, and no oracle proves that the best book price is fair. Quantity and spread scaling encourage usable quotes but do not guarantee deep or economically honest liquidity.
Market removal is permanent
Factory removal freezes accrual, burns unearned funding, and permanently blocks that pool from redeployment through the same Factory. Operator error can therefore end a reward program irreversibly.
Replacement preserves old claims
Replacing an active V3 freezes the prior rewarder but does not burn its claim reserve. Users must claim against the specific rewarder where their rewards accrued.
Governance risks
No timelock
A successful proposal can execute immediately after voting. The proposal-start gate, voting delay, voting period, and late-quorum extension provide notice before success, not a guaranteed delay after it.
Voting power follows issued 2DEEP
Ordinary mints, endowment streams, market funding, redemptions, transfers, delegation, and burns change future governance thresholds and control. The Governor and Factory minter roles must be treated as high-value authorities even though issuance is capped.
Operator trust
The Treasury multisig can deploy or permanently remove markets. Fixed Factory rules constrain its actions, but they do not prevent poor token selection, poor quantity configuration within the limit, replacement at a bad time, or mistaken permanent removal.
Guardians can censor proposals
Governance may appoint guardians that can cancel unexecuted proposals. A guardian cannot execute arbitrary calls, but a compromised or malicious guardian can deny governance progress until removed through a proposal it does not successfully cancel.
Direct fee and asset control
The Governor receives Router fees and owns the v4 liquidity positions. A governance majority can redirect the fee, collect or remove liquidity, transfer assets, alter token roles, or change the cap through valid proposals.
Liquidity risks
Concentrated liquidity can become one-sided
The USDG/2DEEP positions span several ranges but can still become predominantly one token as price moves. Fee earnings do not guarantee protection from inventory loss or adverse selection.
Initial price is not a redemption floor
The pool was initialized at $0.01 per 2DEEP. That is a starting market price, not a promise, oracle, guarantee, or protocol redemption value.
Position fees require governance action
Uniswap v4 fees accrue in Governor-owned NFTs. They are not automatically transferred to token holders and remain uncollected until governance manages the positions.
External dependencies
2DEEP endowment streams depend on the deployed Sablier contracts. Liquidity depends on Uniswap v4 and the Robinhood Chain deployments. NVDA and USDG depend on their issuers and contract behavior. Chain outages, upgrades, token restrictions, corporate actions, sequencer behavior, indexer errors, and interface failures are outside Deepstate's control.
Legacy boundaries
The former Rewarder V1 has no native retirement method. DGP-003 disconnected it, installed sentinel top orders, and renounced ownership, but its bytecode and historical claim accounting remain onchain. The migration assumes those sentinel positions cannot be displaced through legitimate post-migration Router hooks.
Legacy governance was hardened and legacy token administration was made inaccessible, but those contracts were not destroyed. Integrators must use the new addresses rather than inferring the active system from contract age or token name.
Token behavior
Permissionless Router pools can contain fee-on-transfer, rebasing, callback-heavy, malicious, or otherwise non-standard tokens. The canonical configuration assumes standard exact-transfer behavior for USDG, NVDA, and 2DEEP. Pool existence is not an endorsement.