thBILL — Retail Risk Report

Elevated risk · 4.0/10

Read this first — thBILL is not a retail product any more. Theo has repositioned it as the reserve asset behind thUSD. You can check that without taking our word for it: the front-end routes new users to thUSD, the /thbill path redirects, the docs are written thUSD-first, and most thBILL outstanding now sits inside the thUSD reserve rather than in public hands.

What that means if you hold it, or are thinking about it. Primary redemption is KYC-gated and, on the evidence, closed — nothing has redeemed through it since 2026-07-09. The secondary market is a different question and it is open: you can buy and sell thBILL on a DEX today. The problem is the terms. Depth is under $1M against a roughly $87M fund, and the market has been trading persistently below NAV, in the region of 1.5% to 1.7% under — worse than the stress-peak band this report records for the April 2026 dislocation, in a quiet market with no stress event. Selling is possible; it means accepting that discount.

So read this page as a look-through, not a buy case. It exists because thBILL is what stands behind thUSD, and retail can hold thUSD. If you are deciding where to put money, the asset you can actually act on is thUSD — this report is here to tell you what backs it.

Yield	Exit method	Primary redemption	Age	Chains
about 3% APY	Sell on DEX at a NAV discount	KYC-gated, and not converting in practice	about 13 months	Ethereum, Arbitrum, Base, HyperEVM

2026-08-18 update — Overall 4.5 → 4.0, and this report has moved onto the correct scoring rubric.

The rubric fix comes first, because it is why the re-rate was overdue. thBILL is a vault share — a fund unit whose price tracks NAV — but this page had been scored on the stablecoin rubric (peg / backing / underlying / liquidity / issuer). That rubric has no redemption axis, so thBILL’s single most important retail fact — that you probably cannot redeem through the primary path — had nowhere to land on the page retail readers actually see. It has now moved to the vault-share axes used for every other fund-share report on this site: Stability / Contract & Admin / Redemption / Underlying / Liquidity / Issuer. Nothing was rescored to make the numbers fit; the peg and backing material has moved into the Liquidity and Underlying discussions, where it belongs.

Two axes then fell, and both fall out of one fact: thBILL has stopped being a product and become plumbing.

• Redemption 3.5 → 2.0. An issuer that no longer offers an asset externally does not have a working external redemption channel, whatever the contract permits. Publicly checkable: the last redemption of any kind was 2026-07-09, and the last non-operator redemption was 2026-07-08 — about six weeks ago. Supply is currently identical to its own 24-hour-ago reading to twelve decimal places (84,059,152.134528): no mint, no burn.
• Liquidity 3.5 → 2.0. As thBILL becomes an internal reserve asset there is progressively less of it outside the protocol to trade. Aggregate DEX liquidity is $671,715 against a fund of about $87.0M — 0.77%, on 24-hour volume of $89,364. This page previously described that liquidity as “low-single-digit-million” against “$130M+”. The float has shrunk in absolute terms, not just relative.

Stability holds at 8.0, and it is important not to misread it. That axis scores the NAV, which is behaving exactly as a T-Bill NAV should — 1.035365, smooth accrual, no drama. The dislocation is between the market price and NAV, and it is priced under Liquidity and Redemption instead. It is now the only high axis on the page. The honest summary: the underlying T-Bills are genuinely safe, and almost everything about getting at them is not.

Deeper analysis in the full institutional report → — free, email-gated. Note the two reports carry different overall scores (4.0 retail vs 4.8 institutional) because they run different rubrics — this page scores the retail experience, where there is no primary-redemption access; the institutional report weights smart-contract risk at 40% and assumes a reader who can redeem. See On the scoring rubric at the bottom.

What this asset is now (read first)

thBILL has been repositioned as a backing asset for Theo’s stablecoin product thUSD rather than a consumer-facing T-Bill wrapper. The majority of thBILL is held intra-protocol by the thUSD reserve (typically running in the 55-70% range); the external float — the portion accessible to retail and secondary markets — is materially smaller than the headline supply implies. The dedicated theo.xyz/thbill page redirects to docs only and app.theo.xyz has migrated its primary mint and transparency UI to thUSD-first. Live holder-attribution split on the dashboard.

If you’re a new retail allocator looking for Theo yield, see the thUSD report instead. thBILL is now best read as either (a) a backing asset for thUSD, useful to understand if you hold thUSD; or (b) institutional T-Bill exposure for KYC’d allocators with primary-redemption access.

Summary

thBILL is Theo Protocol’s onchain wrapper around a regulated US Treasury bill fund. You buy the token, hold it, and the price slowly goes up — around 3% a year — because the underlying T-bills accrue interest. There are no rewards to claim, no rebases, no vesting. On paper, it’s one of the cleanest “onchain savings account” products available in DeFi today.

As of June 2026 the basket holds two underlying funds, not one. The majority (about 83%) is the Singapore-regulated T-bill fund run by Wellington Management and Standard Chartered’s Libeara, reached through the tULTRA wrapper. In late June 2026 Theo added a second fund — Fidelity International’s tokenized dollar fund (FILQ, about 17% of the basket) — a Moody’s AAA-mf money-market fund, Fidelity-managed and tokenized by Sygnum. This is a modest positive: less reliance on a single fund, another household-name institution in the mix, and FILQ is actually the more transparent leg (thBILL holds it as a real, directly-readable on-chain token, whereas the tULTRA wrapper is synthetic — it holds no actual ULTRA and reports its value by attestation). Wellington, Standard Chartered and Fidelity are the strong part — household-name institutional players. Theo, the Panama-registered entity that issues thBILL, is the weak part: under a year old (launched July 2025), unlicensed, and your legal claim in the worst case is against a Panama corporation, not against the underlying T-bills directly.

Most retail allocators looking for Theo yield should look at thUSD instead. thBILL is now primarily a backing asset for thUSD; new retail mint flows have effectively migrated. This report remains useful for existing thBILL holders and KYC’d allocators evaluating institutional-grade T-Bill exposure.

I. Smart Contract Risk

One audit from Zenith Audits covering the vault and bridge contracts. No bug bounty program. About thirteen months of live operation with no reported exploits, forced pauses, or redemption failures — clean track record, but short.

The vault itself uses the standard ERC-4626 pattern (the common DeFi savings-vault interface), which is well-understood. Theo layers a proprietary “iToken” standard on top to handle pending-assets accounting across the 4-day off-chain settlement window. This is the novel part — it’s not battle-tested outside Theo’s own deployment.

Cross-chain model. thBILL uses LayerZero’s OFT (Omnichain Fungible Token) standard to move between Ethereum, Arbitrum, Base, and HyperEVM. Bridges are where recent attacks have concentrated — the rsETH exploit on 2026-04-18 ($292M loss) was a LayerZero OFT failure, the same architectural class thBILL uses. An on-chain audit across all four EVM deployments confirms thBILL is not structurally exposed to the same attack class. Every peered pathway across all four chains requires 3 independent DVNs — LayerZero Labs + Polyhedra/Google Cloud + Horizen Labs — an explicit upgrade above the 2-DVN default. rsETH’s exploit hit a pathway that only required 1 DVN; thBILL’s configuration would require compromising a quorum of independent providers across multiple operators, with no single-operator concentration. Zero exposed-and-peered pathways across all four chains. The admin Safe is the same Theo address on every chain (3-of-5 on Ethereum and Arbitrum, 3-of-4 on Base and HyperEVM). On Ethereum specifically, thBILL is structured as two contracts: the user-facing token vault (0x5FA487…DA0b, which is Pausable as an emergency lever) and a separate LayerZero OFTAdapter (0xfDD22Ce6…F55A5a) that handles cross-chain messaging.

The caveats: (1) Destination-chain adapter contracts were likely deployed after the single Zenith audit was completed, so that code surface is probably unaudited. A correct DVN config doesn’t protect against a buggy adapter. (2) No publicly confirmed kill-switch on the OFTAdapter itself (it’s not Pausable); pause control runs through the underlying token vault. The pauser identity on the vault is not publicly disclosed. (3) The Theo admin Safe at the same address operates with different thresholds across chains — 3-of-5 on Ethereum and Arbitrum, 3-of-4 on Base and HyperEVM. Small inconsistency worth confirming with Theo. (4) Several unpeered pathways have burn-address DVN defaults — not exploitable today (no peer set), but if Theo ever activates one of those chains the burn DVN would block message delivery until receive config is replaced.

Admin powers. A 2-of-4 multisig can pause the contract in emergencies. A 3-of-5 owner multisig controls upgrades and parameter changes. There is no timelock on admin actions — changes can take effect immediately. Signer identities are not publicly disclosed. Practically: if Theo decides to change how the protocol works tomorrow, there’s no notice period and no way for a holder to exit first.

What to watch: the Zenith audit report (publicly available) and any announcements of contract upgrades, parameter changes, or redemption-policy changes. Read them carefully before they take effect.

Clean track record so far, but single audit + no bug bounty + no timelock + novel iToken component + likely-unaudited bridge adapter = limited margin of safety.

II. Economic / Market Risk

How yield works

thBILL’s price goes up over time. At launch ($1.00), today (~$1.023), roughly +3% annualized. You pay nothing and claim nothing — yield is the difference between buy price and sell price. The underlying T-bills pay interest to the fund; the fund’s NAV ticks up; thBILL’s NAV ticks up with it.

Getting in and out

Getting in is easy — buy on a DEX. The deepest venues are typically Project X on HyperEVM (thBILL/USDT0) and Uniswap V3 on Arbitrum (thBILL/USDC); concentration between them shifts over time. The Ethereum Uniswap V3 pool exists but is thin; Base is a deployment chain with no live liquidity. The market price trades persistently below NAV by single bps to low hundreds of bps. The pre-Apr-2026 baseline ran around −20 bps; through April the discount widened to the −80 to −150 bps band following the April 27 stress event, then tightened back to a −20 to −60 bps daily-average regime by mid-May 2026 with intra-day prints crossing back to flat. The range and direction are not stable: a stress event can re-widen it materially, and recovery typically takes weeks rather than days because there is no competitive arbitrage market enforcing the peg.

As of 2026-08-18 the discount has broken out of that band entirely, and this is the number to pay attention to. The market is at −1.63% to NAV (volume-weighted price 1.0185 against a NAV of 1.0354), and the persistence flag on our tracker is firing. Put that next to the history: the calm regime is −20 to −60 bps, and the worst readings after the April 27 stress event were −80 to −150 bps. The market is now more dislocated than it was at the peak of a stress event, with no stress event. That is not a price signal about the T-Bills; it is what a market looks like when there is no arbitrageur left in it. The mechanism is covered under Getting out below — the people who could close this spread have stopped showing up. Live discount + per-chain peg history on the live dashboard.

Silent-supply mutation. thBILL’s contract emits zero on-chain events during mints and burns — direct polling of totalSupply() is the only way to see supply changes (same architectural pattern documented for tULTRA at the underlying layer). Practical implication: standard ERC-20 indexers (Etherscan, Dune, The Graph) cannot track thBILL flows. The live dashboard’s redemption-pulse panel surfaces these silent supply mutations directly.

Getting out is the catch — and it has got worse. Primary redemption (the official swap-back-to-USDC path) requires KYC and accredited-investor status, so for most retail DeFi users it was never available. What changed in 2026 is that the channel now looks closed rather than merely gated.

The evidence is on-chain and you can check it yourself. The last redemption of any kind through the primary path was 2026-07-09, and the last one not attributable to Theo’s own operator address was 2026-07-08 — roughly six weeks of nothing. Supply currently reads identical to its 24-hour-ago value to twelve decimal places. This sits alongside the repositioning described at the top of this report: Theo’s front-end routes new users to thUSD, the /thbill path redirects, and the docs are written thUSD-first. An issuer that has stopped offering an asset to outside holders does not have a functioning external redemption channel, whatever the contract still permits. That is the reason the Redemption axis is 2.0 rather than the 3.5 an earlier version of this report carried, and it is not a statement about the contract — the contract is fine.

Your practical exit is selling on a DEX.

The secondary market prices thBILL at a persistent discount to NAV. This discount is not a bug — it’s structural. The only participants who can close it via arbitrage are KYC’d institutions, and they only arbitrage when the spread exceeds their own costs (redemption fees at the underlying fund, gas, 4-day settlement carry). So the discount has a floor, and that floor is your real exit cost as a retail user. Empirically, primary redemption was historically dominated by a single Theo operator address; in May 2026 a recurring small-cadence redeemer (0x5e6f5946…, ~50K-thBILL bursts roughly weekly) became active alongside it — provenance not on-chain-disclosed. Even with a second burn-side participant, there is no competitive arbitrage market enforcing the peg, so the discount is not mechanically pulled back.

Exit sizing matters, and the market you would be selling into is very small. Live figures at 2026-08-18:

Aggregate DEX liquidity, all venues	$671,715
Fund size	about $87.0M (84,059,152 shares at NAV 1.0354)
Liquidity as a share of the fund	0.77%
24-hour secondary volume	$89,364
Where that volume happens	Arbitrum $69,567 · HyperEVM $19,614 · Ethereum $109

Earlier versions of this report described that liquidity as running “in the low-single-digit-million range” against a fund “on the order of $130M+.” Both numbers have fallen, but they have not fallen together: the fund shrank by roughly a third while the tradeable float shrank by considerably more. The external float has contracted in absolute terms, which is the expected consequence of thBILL becoming an internal reserve asset — every share that moves into the thUSD reserve is a share that is no longer available to trade against.

Note the Ethereum line in particular. Ethereum is the canonical deployment and holds the majority of supply, and it turned over $109 in a day. As a venue it is effectively dead; the only live markets are Arbitrum and HyperEVM. The two-deepest-pools structure typically holds more stablecoin than thBILL, so selling thBILL for stables has more depth than the reverse, and for sized retail exits the binding constraint is buy-side depth (which is what KYC arbitrageurs would need in order to close the spread). Live 2% buy/sell depth per venue on the live dashboard.

Stress-event data point (positive — April 27, 2026). The fund processed a single $65.3M redemption (~33% of supply at the time, the largest on record) cleanly via Theo’s primary path — no contract failure, no bridge incident, no backing-ratio break. The structural plumbing held under the largest stress test thBILL has seen. The cost paid was on the secondary peg, not on the redemption rails. The secondary discount did widen materially in the weeks following (peaks in the −80 to −150 bps band) before tightening back to a −20 to −60 bps daily-average regime by mid-May — i.e. the post-stress repricing wasn’t permanent, but it took roughly three weeks to normalize. The multi-week recovery window is itself the exit-cost signal — anyone forced to exit during the dislocation paid materially more than baseline. The underlying mechanics held throughout.

Fee note. The underlying fund’s fee schedule isn’t publicly disclosed with confidence — public sources (rwa.xyz, stomarket.com) actually disagree on whether a 0.45% figure is a redemption fee or a management fee. Net: the underlying layer takes somewhere between 30 and 100 bps annually, and part of that probably comes out on redemption. This matters mostly for KYC’d holders; for retail it’s baked into the DEX discount floor.

Farming it

Three paths most retail users consider:

1. Hold for yield. Buy, sit, accrue NAV. The simplest path, with the least stacking risk. Net yield is ~3% after the DEX buy-side discount amortizes over your holding period. No gas after purchase, no rewards to claim, no maintenance.

2. Pendle PT-thBILL. Pendle offers a fixed-yield version — you buy PT-thBILL (the Principal Token) and at maturity (18-Jun-2026) it redeems to thBILL worth $1 USDC at NAV — not 1 whole thBILL, and not USDC. Pendle’s accounting unit on this market is USDC, but settlement is in thBILL: you receive an amount of thBILL whose NAV equals $1 (slightly less than 1 token, since thBILL’s NAV accrues against USDC over the term). So PT fixes a USDC-denominated yield, but you exit holding thBILL and still face thBILL’s retail exit path (DEX, with the structural discount) to actually convert that into USDC. The Pendle UI shows this as “1 USDC in thBILL” — that framing is correct. PT markets are on Arbitrum only. What stacks: Pendle’s own smart-contract risk on top of thBILL’s. Pendle is well-audited and battle-tested, but you’re now trusting two protocols instead of one. The fixed-rate mechanic also means you don’t benefit if the thBILL NAV-vs-DEX discount narrows during your holding period — that upside goes to the YT buyer.

3. Lending collateral (Euler). You can supply thBILL to an Euler market to borrow stablecoins, giving you leverage on the T-bill yield. This is advanced, and the oracle model is everything: if the market uses a DEX-priced oracle, a temporary DEX dislocation (thin liquidity + a forced seller) can liquidate you even when the fund is perfectly healthy. If it uses a NAV-priced oracle, you’re materially safer. Read the oracle config for the specific Euler market before supplying, and size assuming the oracle can and will misbehave during stress. Not recommended unless you understand the liquidation engine at the market you’re using.

High-quality underlying, reached through an exit that has stopped working for outside holders. For retail the picture is structurally bad on both counts: no primary access, a DEX market with about $670K of depth, and a price that sits further below NAV than it did during the asset’s worst stress event. By the numbers, thBILL’s market price tracks fair value far more loosely than crvUSD or OUSD — the gap is roughly an order of magnitude larger and, unlike those, it does not mean-revert, because the mechanism that would pull it back is gated to participants who are no longer active. That is why Liquidity and Redemption both score 2.0, and it is why they are the two axes carrying this report’s score down.

thBILL as backing for thUSD — practical implications

The repositioning covered at the top of this report (majority of thBILL held intra-protocol by the thUSD reserve, typically 55-70% range; consumer-facing front-end migrated to thUSD; the relevant external float is materially smaller than the headline supply implies) has two retail-facing implications worth surfacing in the risk discussion specifically:

• The headline backing ratio surfaced on the live dashboard will periodically dip below 100% on the on-chain-only tier as Theo mints new thBILL ahead of the corresponding ULTRA arrival from Libeara (cyclic Stage A pattern, T+1 to T+7 settlement window). The economic tier (which credits the in-flight Libeara receivable) stays near 100%. This is structural, not a stress signal — escalation thresholds are a persistent dip past T+7 (warn) and past T+14 (escalate). The validator surfaces stage_a_warn / stage_a_escalate flags directly.
• A stress event in thUSD (e.g., a sized thUSD redemption rush) would propagate into thBILL via the reserve. thUSD’s “100% backed” claim relies on thBILL coverage at NAV, which itself relies on Libeara’s settlement infrastructure. Each layer attests honestly to the layer above, but the chain is only as resilient as its weakest link. For most use cases this works; in stress it’s a coupled system.

Live dashboard

A live monitoring view is available at tidresearch.com/dashboards/thbill — refreshed hourly from on-chain RPC reads, Libeara NAV attestation, and DEX depth probes. It surfaces the signals discussed above as standalone panels:

• Backing ratio (three tiers: physical / on-chain-only / economic — only the economic tier credits in-flight Libeara settlement, so the on-chain-only tier is the one that periodically dips during Stage A windows).
• Holder attribution (External float vs thUSD reserve vs OFT-adapter-locked) — answers “how much thBILL is actually accessible to retail vs intra-protocol?”
• Per-chain peg (VWAP vs NAV with 7-day premium/discount history, by chain).
• Pool depth and 2% buy/sell depth (the numbers you’d actually exit against).
• Redemption pulse (24h supply delta + days since last on-chain burn — catches the silent supply mutations that standard ERC-20 indexers miss).

For sizing decisions, the holder-attribution and per-chain peg panels are the two that bind first.

III. Project / Issuer Risk

thBILL sits on top of two very different counterparties, and the risk is concentrated in one of them.

The strong part: Wellington Management + Libeara (Standard Chartered), now joined by Fidelity International. The majority fund underneath everything (about 83%) — the Delta Wellington Ultra Short Treasury On-Chain Fund — is sub-managed by Wellington Management, one of the largest asset managers in the world (~$1.2T AUM). It’s tokenized by Libeara, Standard Chartered’s incubated RWA platform, and operated through FundBridge Capital, a MAS-regulated (Singapore) fund manager. Since late June 2026 about 17% of the basket sits in Fidelity International’s FILQ — a Moody’s AAA-mf money-market fund from another household-name manager, tokenized on the Swiss-regulated Sygnum stack. Custody and regulatory oversight on the actual T-bills and money-market instruments is institutional-grade. Adding FILQ modestly reduces the reliance on a single fund, though it also adds a new dependency on Sygnum’s custody and FILQ’s permissioning.

The weak part: Theo Protocol Corporation. Theo is the Panama-registered entity that issues thBILL and wraps tULTRA. Theo is not a licensed financial institution anywhere. The founders are public (ex-Optiver and IMC quant traders) and the protocol is backed by Hack VC with $20M raised in April 2025. Audits beyond the Zenith report are not publicly disclosed. The project is about thirteen months old.

What this means for your legal claim. When you hold thBILL, you do not own T-bills. You own a token issued by Theo that represents a contractual claim against Theo for a USDC-equivalent amount. If Theo becomes insolvent, your recovery depends on Panamanian corporate proceedings against a non-regulated issuer. There is no bankruptcy remoteness — no legal firewall between Theo’s other obligations and the assets backing thBILL. This is the structural gap between thBILL and its institutional peers (BUIDL, USTB, USYC), which use Cayman or 3(c)(7) fund structures that give holders direct legal claim on the fund’s assets.

The practical read: the T-bills backing thBILL are extremely safe, but the wrapper isn’t. Your risk is mostly about whether Theo (the Panama company) continues to exist and operate competently, not about whether US Treasuries default.

Strong asset quality undermined by a young, unlicensed, non-bankruptcy-remote issuer.

Bottom Line

Overall Risk	4.0/10 — Elevated	was 4.5
Stability	8.0/10	new axis
Contract & Admin	4.5/10	new axis
Redemption	2.0/10	new axis
Underlying	5.0/10	held
Liquidity	2.0/10	was 3.5
Issuer	4.5/10	held

On the scoring rubric — and why it changed. thBILL is a vault share: a unit in a fund, whose value tracks the fund’s NAV. This report used to score it on the stablecoin rubric (peg / backing / underlying / liquidity / issuer), which was the wrong lens and had a specific cost — that rubric has no redemption axis, so the most important thing a retail holder of this asset needs to know had nowhere to appear. It now scores on the same six axes as every other fund-share report on this site.

Where the old material went: the peg-mechanism content was never really about a peg — thBILL does not target $1, it tracks NAV — so the discount discussion now sits under Liquidity, which is where a price that will not converge to fair value actually belongs. The backing content merged into Underlying.

What each axis is doing here:

• Stability 8.0 — scores the NAV, not the market price. The NAV accrues smoothly at roughly 3% and has never misbehaved. Do not read this as “the asset is fine”; it is the only high number on the page, and the gap between NAV and what you could actually sell at is scored below.
• Contract & Admin 4.5 — one undisclosed audit, no timelock on admin actions, and a wrapper stack (thBILL → tULTRA → Libeara) in which the middle layer is an ERC-4626 vault that holds none of the asset it claims and reports its value by attestation. Both Theo-controlled layers can be upgraded with no notice period.
• Redemption 2.0 — the primary path is not just KYC-gated, it appears closed to outside holders; nothing has redeemed since early July.
• Underlying 5.0 — see below.
• Liquidity 2.0 — about $670K of tradeable depth against an $87M fund, with the discount outside its own stress band.
• Issuer 4.5 — a thirteen-month-old, unlicensed Panama company standing between you and some very good T-Bills.

Why Underlying stays at 5.0 while everything about access got worse. This axis scores the collateral itself, and none of this year’s evidence touches it — a market that has stopped trading says nothing about the quality of the Treasuries. The collateral is genuinely excellent: roughly 83% via Standard Chartered’s Libeara (Wellington Management as fund manager, FundBridge as MAS-regulated administrator) and about 17% via Fidelity International’s FILQ, a Moody’s AAA-mf money-market fund tokenized by Sygnum. On asset quality alone this would score in the high eights.

It sits at 5.0 because this axis has to answer a second question as well: can you verify the collateral is there? For the ~17% FILQ leg, yes — it is held as a real, directly-readable on-chain token. For the ~83% tULTRA leg, no: that wrapper holds zero of the ULTRA it names as its asset, and reports its value as an attested accounting figure reconciled off-chain against Theo’s treasury. So the honest read on this axis is excellent assets, most of which you are taking on trust rather than reading. That mid-point is what 5.0 encodes, and it is why the June 2026 FILQ addition mattered — it was the first leg of this basket a holder can actually check.

Who it’s for: Existing thBILL holders who want to understand current backing and exit dynamics. KYC’d allocators evaluating institutional-grade T-Bill exposure with primary-redemption access. Holders of thUSD who want to inspect the largest reserve component of that product. New retail allocators seeking Theo yield should look at thUSD instead — the consumer-facing front-end has migrated.

Who should avoid: Anyone who needs instant redemption, wants direct legal ownership of the underlying Treasuries, is risk-averse to issuers under one year old, or is sizing positions larger than DEX depth can clear without material slippage.

For deeper detail — full audit findings, bridge architecture, DVN configuration, peer comparison, governance, and primary-redemption mechanics — see the full institutional report (email-gated, ~13,500 words).

A note on what this report doesn’t cover. This analysis combines what we can verify on-chain with what’s publicly documented. Some attack classes — a recent example: the rsETH single-DVN bridge exploit in April 2026 — only become visible after they manifest in production; our methodology is retrospective on novel risks. We also cannot fully audit the underlying T-bill custody chain at Standard Chartered, Wellington Management’s portfolio composition, the MPC operator’s signer composition, or the Zenith audit report (acknowledged by Theo’s docs but not publicly linked). Sized positions should leave room for residual unknowns this analysis cannot enumerate.

Revision history

• 2026-08-18 — added the standing access banner at the top. No score change. The point it makes was already on the page, but it was inside the update box below, where a changelog entry reads as “what changed recently” — it gets skipped, gets superseded by the next entry, and frames a standing property of the asset as a recent event. That thBILL is no longer a retail-facing product is not news about August; it is what thBILL now is, so it belongs above the changelog. The banner also fixes an overstatement worth naming: it would be wrong to say you cannot transact. Primary redemption is closed in practice, but the secondary market is open and working — the accurate claim is that you can trade it and probably shouldn’t, because depth is thin and you sell into a persistent discount.
• 2026-08-18 — rubric migration + re-rate. Overall 4.5 → 4.0. Moved off the stablecoin rubric onto the vault-share axes this asset should always have used; the previous rubric had no redemption axis, so thBILL’s binding retail constraint could not be scored on the page. Peg-mechanism material moved into the Liquidity discussion, backing material into Underlying. Redemption 3.5 → 2.0 — the primary path is effectively closed to outside holders, not merely gated: nothing has redeemed since 2026-07-09, and Theo has repositioned thBILL as reserve plumbing for thUSD. Liquidity 3.5 → 2.0 — aggregate DEX depth is $671,715 against a fund of about $87.0M (0.77%), down from “low-single-digit-million against $130M+”; the external float has shrunk in absolute terms, and the Ethereum venue is dead at $109/day. Stability 8.0, Contract & Admin 4.5, Underlying 5.0 and Issuer 4.5 all held — the NAV and the collateral are unaffected; what deteriorated is access. Also corrected: the discount is now −1.63% to NAV, outside the −80 to −150 bps band this report describes as stress peaks, with no stress event.

Corrections

This report is based on publicly available documentation and on-chain analysis only — we don’t have access to any private information Theo or Libeara may hold. If anything here is wrong, reach us at info@tidresearch.com and we’ll correct the next revision.