Staking risks
userThe eight xHISS staking risk disclosures, stated plainly: contract risk, no promised outcome, exit timing, price risk, pause scope, admin trust, review scope, self-custody.
Staking $HISS for xHISS carries real risks. This page states them plainly — the same eight disclosures rendered on /app/stake, with the reasoning behind each. Nothing here is softened, and nothing on any HISS surface may contradict it.
The eight disclosures
- Smart-contract risk. The vault is immutable once deployed — that removes upgrade-rug risk but also means a bug cannot be patched. A defect could impair or lose staked HISS.
- No promised outcome. Reward injections are discretionary fee routing under a disclosed split. If no verified HISS-token trading fees arrive, the share value does not increase. Historical fee distributions are not forecasts.
- Exit timing risk. Unstaking takes a 72-hour cooldown, then a 2-day redeem window. You cannot exit during the cooldown, and a missed window means restarting it. Escrowed shares keep repricing with the vault in both directions of time — the rate at redeem is the rate you get.
- Token price risk. HISS can lose value. Staking does not hedge, protect, or offset a falling HISS price — xHISS is denominated in HISS, not dollars.
- Pause risk. The Safe can pause staking and injections (for example during an incident). Exits are deliberately not pausable — cooldown and redeem always function.
- Admin trust assumptions. The 2-of-3 Treasury Safe controls the injector list and the pause switch. The 50/30/10/10 sourcing policy is enforced by fail-closed off-chain tooling — the contract itself accepts any HISS an approved injector sends.
- Review scope. No known unresolved Critical or High findings after internal launch review. That is an internal review, not an external audit — it reduces risk; it does not eliminate it.
- Self-custody risk. Transactions are irreversible. A wrong receiver address on redeem, a lost key, or a compromised wallet cannot be undone by HISS — HISS holds no custody and cannot reverse anything.
Related
- Stake $HISS — the workflow guide.
- xHISS mechanics — the contract surface in detail.
- Depositor risks — the separate USDG-vault risk page.