wYLDS — Risk Report

Lower-to-moderate risk · 6.0 / 10 Wrapped token · Ethereum + Solana · Issuer: Hastra (Signum Ltd.), backed by Figure’s YLDS · ~$490M · verified 2026-07-30

Summary

wYLDS is Hastra’s 1:1 wrapper of YLDS, a face-amount certificate issued by Figure Certificate Company (FCC). Retail users mint wYLDS with USDC without KYC; Hastra, the regulated-market participant, acquires and holds YLDS. Yield of around 3% is distributed as additional wYLDS tokens, so the token price targets about $1 rather than appreciating; the rate floats with short-term interest rates. wYLDS is also the layer Hastra PRIME returns when a holder unstakes.

The strongest evidence for the underlying comes from outside Hastra. FCC is a full SEC reporting registrant (CIK 0001974395, also see ylds.com), filing 10-K and 10-Q financial statements with officer certifications. KPMG issued a clean audit opinion on the FY2025 annual statements without a going-concern qualification or material weakness. FCC’s own interim filing carries a liquidity and going-concern note in which it concludes it has twelve months of funding specifically because its parent has committed, by letter, to pay its invoices directly and periodically forgive intercompany balances. This is a conditional conclusion resting on parent support, not an independent one. At March 31, 2026, FCC’s unaudited Q1 interim filing disclosed $601.524M of Investment Company Act §28 qualified assets against a $599.706M certificate reserve—just over 100% coverage. Independent chain reads and Hastra’s proof of reserves also show wrapper coverage above 100%. These sources agree on the direction, but they measure different things on different dates.

The asset detail is unusually useful. Qualified assets consisted of $211.3M of Level 1 US Treasuries and money-market funds and $389.6M of Level 2 repo collateralized by US Treasuries, with no Level 3 assets. Cash held outside the investment portfolio was just $0.7M, at a single bank. Roughly 65% of the pool was repo rather than outright government securities, leaving counterparty and settlement exposure concentrated in one name: the entire repo book faced UMB Bank N.A., which was also the custodian holding the securities. A second repo facility was documented but unused at quarter-end. The collateral was overnight Treasuries, so quality was high; the concentration was nonetheless a single point of failure rather than a diversified book. The filings establish that YLDS backing is cash, Treasuries, and Treasury repo—not home-equity loans. Holding wYLDS on its own earns only the certificate’s own Treasury-linked rate; the HELOC facility is entered by staking into PRIME, which is what routes the underlying certificates into it.

The wrapper is less tidy than the underlying certificate. Independent chain reads found slightly more YLDS than the wYLDS it backs, consistent with full coverage, but most identified YLDS sat in Figure operational accounts rather than a clearly ring-fenced wYLDS reserve. An outside reader can verify balances but still depends on Hastra’s account mapping. There is no pre-funded buffer — the redeem vault holds cents while requests queue — so exits require administrator fulfillment and an off-chain YLDS sale.

Hastra is closer to Figure than an arm’s-length wrapper issuer. Figure’s filings name Signum Ltd., doing business as Hastra, as a related party, not a consolidated subsidiary. A December 2025 agreement grants Hastra a nontransferable licence to Figure software whose initial term runs to December 2028 and renews annually thereafter, and charges a 0.50% royalty on protocol transaction revenue. Figure records YLDS held by Hastra as “Debt, current to related parties.” This reduces the unknown-counterparty concern but increases correlated-failure and contractual dependency. The filings do not show that Hastra is controlled by Figure’s parent, and they do not establish that its YLDS belongs to FCC’s $473M parent-controlled holdings.

Ethereum is now the larger of the two deployments, while the overwhelming majority of Solana wYLDS is locked inside PRIME, leaving only a few million genuinely unstaked. wYLDS is therefore best understood as a wrapper and staking substrate with a thin standalone market, not a broadly liquid Treasury token.

At a glance

Backing	FCC’s filings reported $601.524M of qualified assets against a $599.706M YLDS reserve at 31 March 2026 — just over 100% coverage. Independent chain reads and Hastra’s own proof of reserves both also show wrapper coverage above 100%. Three separate channels agree on the direction, which matters more than any one figure: they measure different things on different dates. Identified wrapper reserves exist but are not demonstrably ring-fenced.
How to redeem	Request wYLDS→USDC and wait for Hastra to sell YLDS, or use a thin Solana DEX. Recent requests cleared 1:1, typically well under an hour.
Liquidity	Thin standalone DEX market. The overwhelming majority of Solana wYLDS is locked in PRIME, leaving only a few million genuinely unstaked.
Yield	Around 3%, paid monthly as additional tokens from the underlying YLDS return; the rate floats with short-term interest rates.
Admin & custody	Hastra runs redemption and retains freeze controls. It is a disclosed Figure related party using licensed Figure software, but is not a Figure subsidiary.
Regulated?	FCC/YLDS is SEC-registered and KPMG-audited. Hastra and wYLDS are not, so retail recourse still runs through the wrapper operator.
Biggest risk	Strong underlying assets sit beneath a non-segregated, admin-mediated wrapper with essentially no ready USDC redemption buffer.

Risk by axis

Underlying — 7.5. YLDS is a face-amount certificate issued by FCC and backed by qualified assets under §28 of the Investment Company Act. FCC is a reporting registrant in its own right, and KPMG has served as auditor since 2024. Its FY2025 audit carried a clean opinion, no going-concern qualification, and no identified material weakness. That opinion covers the annual statements. FCC’s own interim filing carries a liquidity and going-concern note in which it concludes it has twelve months of funding specifically because its parent has committed, by letter, to pay its invoices directly and periodically forgive intercompany balances. This is a conditional conclusion resting on parent support, not an independent one. This remains materially stronger evidence than a token dashboard or issuer attestation because the reserve and asset test appear in recurring SEC filings with officer certifications.

Figure, the company behind this token, is covered separately in Figure.

At March 31, FCC’s unaudited Q1 interim filing reported $601.524M of qualified assets against a $599.706M certificate reserve, approximately 100.3% coverage. The fair-value hierarchy showed $211.3M of Level 1 Treasuries and money-market funds, $389.6M of Level 2 Treasury-collateralized repo, and Level 3 assets of zero. This composition directly confirms that YLDS backing is not exposed to Figure’s HELOC business. The asset pool is high quality, and cash held outside the investment portfolio was just $0.7M, at a single bank.

One structural point deserves more weight than the coverage ratio. The certificates are explicitly unsecured obligations of Figure Certificate Company, backed solely by its assets. The qualified assets sit on deposit at a custodian because the Investment Company Act requires it, but that is a regulatory asset test, not a security interest — a certificate holder is an unsecured creditor of FCC, not the beneficiary of a bankruptcy-remote trust. Read together with the co-mingled reserve accounts on Provenance, this means there is no bankruptcy-remote ring-fence at either layer of the stack. Coverage can be 100.3% and that still be true.

Residual risks explain why this does not score still higher. About 65% of qualified assets were repo rather than outright Treasuries. The repo is short-dated and government-collateralized but adds counterparty and settlement exposure concentrated in one name: the entire repo book — 65% of qualified assets — faces UMB Bank N.A., which is also the custodian holding the securities. A second repo facility is documented but was unused at quarter-end. The collateral is overnight Treasuries, so quality is high; the concentration is nonetheless a single point of failure rather than a diversified book. FCC disclosure also arrives with roughly a 45-day lag—the March 31 quarter was filed May 15—so it is a confirming layer beneath live chain data. Most importantly, wYLDS holders do not own YLDS directly; they hold an unregulated wrapper claim mediated by Hastra. Strong base assets do not prove wrapper-level segregation or bankruptcy remoteness.

Volatility — 7.0. wYLDS targets $1 and distributes yield as additional tokens rather than allowing the quoted price to compound upward. It has generally traded close to par. Realistic observed drawdowns have been around 2–3%; the quoted $1.07 high appears to be a low-liquidity seed-pool print rather than evidence of meaningful appreciation. This is strong price behavior for a young wrapper.

The stability comes from a credible certificate reserve and working primary conversion, not deep secondary liquidity. Thin pools can print temporary discounts even when the backing remains sound. Ethereum’s majority supply and the very small freely trading Solana float mean a single aggregate price can hide materially different depth across venues. Issuer freeze controls also mean price stability is not the only risk a holder faces.

FCC’s filing data improves confidence in the reference value. Qualified assets exceeded the reserve, and certificate holders may surrender at face plus accrued interest. But wYLDS is one layer removed from that right: Hastra holds and redeems YLDS on users’ behalf. A disruption at Hastra, a delayed off-chain sale, or a loss of DEX incentives can create a wrapper discount without any impairment to FCC’s assets. More stress-period observations and deeper unincentivized pools would support a higher volatility score.

Liquidity — 4.0. This remains the weakest axis. Standalone DEX volume has been a few tens of thousands of dollars a day, small relative to a wrapper supply measured in hundreds of millions. Independent Solana reads found the overwhelming majority of Solana wYLDS locked inside PRIME, leaving only a few million of genuine unstaked float. Aggregators that treat the entire token supply as circulating materially overstate what can trade.

Ethereum is now the larger of the two deployments, but wYLDS primarily functions there as a route into PRIME rather than a deep standalone market. A holder can request primary redemption, yet that process is administered rather than atomic and depends on off-chain YLDS sales. There is no large trustless venue that reliably absorbs institutional size near par.

The thinness of that standalone market is a direct consequence of PRIME absorbing almost all of the supply — and PRIME is now itself the collateral behind a large amount of leveraged borrowing. An unwind there would return wYLDS to holders at exactly the moment there is nowhere liquid to sell it, since wYLDS’s own market is a fraction of the size. The wrapper’s exit therefore depends on Hastra’s administered redemption in precisely the scenario where it is most stressed. That is why wYLDS can score higher overall than PRIME while still being the less immediately exitable of the two.

FCC’s Q1 activity shows that the base certificate is not the obvious bottleneck: $530.5M was issued and $263.4M surrendered during the quarter against a roughly $600M ending reserve. This proves that the YLDS layer has processed large surrenders; it does not mean wYLDS or PRIME can redeem $263.4M on demand. Wrapper queue capacity, administrator responsiveness, chain settlement, and secondary depth remain separate constraints. A funded USDC reserve and sustained six- or seven-figure DEX depth would be the clearest improvements.

Structural — 6.0. The wrapper code is open source and has two meaningful reviews. Informal Systems identified and closed a critical vault-account validation bug plus a share-inflation issue. Sherlock later reviewed both Solana and Ethereum implementations and found no critical or high-severity issues. The sequence—serious flaws found, remediated, then reviewed again—is stronger than a clean but shallow one-off audit, although the original flaws show the consequences of implementation error.

Reserve architecture is the principal negative. Hastra’s proof of reserves and public-chain balances show wrapper coverage a little over 100%, while FCC’s filing separately shows its certificate reserve was covered above 100% at 31 March 2026. These are different measures on different dates, not a single matching ratio. Yet the PoR “pool” labels do not map cleanly to the accounts holding most YLDS. The identified balances sat in Figure operational accounts, including an account that also held tokenized loan assets. Total coverage can be checked; a clean, ring-fenced wYLDS reserve and its bankruptcy-remoteness cannot be established from balances alone.

The new corporate evidence adds positives and negatives rather than forcing a score change. Hastra is a disclosed Figure related party, not a consolidated subsidiary. Its YLDS is recorded as current debt to a related party; it pays a 50-basis-point revenue royalty and relies on a nontransferable Figure software licence whose initial term runs to December 2028 and renews annually thereafter. That reduces the uncertainty of dealing with an unidentified arm’s-length wrapper but increases correlated-failure and licence termination or breach risk. Separately, FCC reported 79% of certificates held by Figure’s parent and entities controlled by that parent. The filing does not place Hastra in that group, so no such inference is made here. FCC itself has only $292K of equity on a $601.8M balance sheet because Figure’s parent pays operating expenses directly—$471K in Q1—and records them as capital contributions. This is a pass-through structure, not evidence that reserve assets are missing or that FCC is distressed, but it is a parent-dependency channel. FCC’s interim filing concludes it has twelve months of liquidity specifically because its parent committed, by letter, to pay invoices directly and periodically forgive intercompany balances. That conclusion depends on continued parent support. Live mint and freeze authority, majority-Ethereum implementation exposure, and unproven wrapper segregation keep the structural score at 6.0 despite the stronger audited base layer.

Redemption — 6.5. Minting is permissionless and atomic: a user supplies USDC and receives wYLDS. The reverse path is a two-stage operational process. A holder submits a redemption request, Hastra sells YLDS through Figure Markets, and an administrator completes the wYLDS-to-USDC transaction. An eight-day sample showed about six redemptions a day, paid 1:1 to the cent and typically completed well under an hour. That is concrete evidence of a working normal-market process.

There is no pre-funded buffer behind that timing — the redeem vault holds cents while requests queue. Identified balances included about a million YLDS alongside pending amounts. Off-hours requests sometimes extended into the next business day. A single fulfiller, market-hour dependency, and the need to move value across Figure’s regulated venue leave the process exposed during a run even though it has behaved well in calm conditions.

The independent FCC channel materially improves the bottom of the stack. Certificates are surrenderable at face plus accrued interest, and $263.4M was surrendered in Q1 2026. That throughput supports the existing redemption score because it indicates YLDS liquidity is real. It does not repair the wrapper bottleneck or establish equivalent wYLDS capacity. Multiple fulfillers, a meaningful USDC buffer, explicit service levels, and performance through a stress period would justify moving above 6.5.

Bottom line

FCC’s audited FY2025 statements and unaudited Q1 interim filing show $601.524M of §28 qualified assets against a $599.706M reserve at 31 March 2026, just over 100% coverage. Independent chain reads and Hastra’s proof of reserves separately show wrapper coverage above 100%. The sources agree on the direction, not a single ratio: they measure different things on different dates. The assets are transparent and high quality: Treasuries, money-market funds, and Treasury-collateralized repo, with no Level 3 exposure. The filings also show substantial YLDS-layer redemption throughput.

The wrapper does not inherit all of those protections. wYLDS holders do not directly own or surrender YLDS. They rely on Hastra to map reserve accounts, sell certificates, return USDC, maintain two chain implementations, and exercise mint and freeze controls responsibly. Normal redemptions have been quick and exact, but the immediate USDC buffer is effectively zero and secondary liquidity is thin.

The corporate relationship is clearer but not simpler. Hastra is a Figure related party—not a subsidiary—and runs on licensed Figure software whose initial term runs through December 2028 and renews annually thereafter. Commercial closeness makes the operator less opaque while increasing correlated-failure and termination risk. FCC’s 79% parent-and-affiliate certificate concentration and parent-funded operating model add dependency at the base issuer. Those negatives offset the major evidentiary improvement from the reserve disclosure.

The 6.0 score therefore holds, but it now rests on a better-separated assessment: a strong, regulated, independently corroborated underlying; a functional but administrator-mediated redemption path; and a wrapper whose segregation, liquidity, and legal claim remain weaker than the certificate beneath it. wYLDS can fit holders comfortable with an operator-run Treasury wrapper. It does not provide direct regulated recourse, deep instant liquidity, or a stress-proven redemption reserve.

Watch items: reserve segregation and legal claim; standing USDC and redemption-queue growth; Ethereum/Solana supply reconciliation; post-incentive liquidity; FCC’s Q2 filing expected around mid-August; parent-related certificate concentration; and termination or breach of the Figure software licence the protocol runs on.

This report uses public documentation, market data, two published audits, independent Solana, Ethereum, and Provenance reads, and FCC filings available through EDGAR. YLDS is folded in as wYLDS’s backing. Corrections welcome to info@tidresearch.com.

Revision history: 2026-07-25 — published at 6.5, replacing the standalone YLDS report. 2026-07-27 — independent on-chain verification: backing confirmed 1:1, but reserve found co-mingled rather than segregated, liquid redemption buffer approximately nil, Ethereum now the majority deployment, and adverse independent Figure signals surfaced; structural 6.5 → 6.0, overall 6.5 → 6.0. 2026-07-28 — expanded to full-length format; added Figure Certificate Company’s KPMG-audited SEC filings and ICA §28 disclosure as independent corroboration of backing; corrected Democratized Prime to a senior facility collateralized by HELOCs; disclosed Hastra as a Figure related party with a software-licence dependency. Scores unchanged. 2026-07-30 — corrected the filing evidence: the March 2026 FCC figures are unaudited interim rather than audited, the going-concern conclusion depends on a parent commitment letter, the Figure software licence renews annually after its initial term, and cash at bank is $0.7M. Live figures (supply, collateralization, yield rate, standalone volume, staked share) are now given as ranges rather than point-in-time precision, since several had drifted since measurement. Corrected how the filing, proof-of-reserves and chain-read coverage figures relate — they independently agree that coverage exceeds 100% rather than matching a single ratio. Noted that the thin standalone market is a consequence of PRIME absorbing supply, and that the HELOC facility is entered by staking into PRIME rather than by holding wYLDS. Scores unchanged.