Mutuum Finance ($MUTM)
Deep Due Diligence Report

MUTM's infrastructure claim is straightforward and verifiable: it is a DeFi lending protocol with two operational models. The Peer-to-Contract (P2C) model pools liquidity from lenders and makes it available to borrowers against collateral — the same fundamental architecture used by Aave and Compound. The Peer-to-Peer (P2P) model allows direct lending arrangements for more speculative or illiquid assets, which is a legitimate differentiation from the dominant P2C-only protocols.

Unlike the other presales reviewed in this cycle, MUTM is not making extraordinary infrastructure claims. There is no "500,000 TPS" figure, no "Quantum AI Consensus," no unaudited bridge design. The project claims to be building a DeFi lending protocol, and the technical architecture described in its documentation is consistent with what a DeFi lending protocol actually looks like. This is a low bar, but it is a bar that most presales fail to clear.

The V1 protocol has been activated on testnet, which provides a meaningful signal of development progress. A live testnet means there is actual code running, not just a whitepaper. The Halborn audit, conducted in November 2025, confirms that EVM smart contracts exist and were reviewed. ^[3] This is a significant step beyond the zero-evidence projects in the rest of this report's portfolio.

Pillar 1 Risk Score: LOW

The Token Contract

The MUTM token contract at 0x26BdEe9E66575319D5599569dFB39f543cFA8721 is clean. It is a standard ERC-20 implementation with no minting functions, no pausing mechanisms, and no admin backdoors. The entire supply of 4 billion tokens was minted at deployment and transferred to the owner's address. Ownership has not been renounced — the owner address retains control — but the absence of privileged functions means that control is limited to token distribution, not supply manipulation. ^[2]

CertiK's Token Scan gives MUTM a score of 90/100. ^[4] For context, a score of 90 is strong for a presale token. The deductions are typically for factors like centralized ownership (which is expected at this stage) rather than critical vulnerabilities.

The Halborn Protocol Audit

The more significant security review is the Halborn audit of the EVM smart contracts, conducted in November 2025. ^[3] Halborn is a reputable blockchain security firm — not a rubber-stamp audit shop. Their findings are worth examining in detail:

Zero critical vulnerabilities and all findings addressed is a strong result. For comparison, Bitcoin Hyper's Coinsult audit identified a high-risk issue that was never publicly disclosed. MUTM's transparency here is meaningfully better.

The GitHub Problem

This is the most significant transparency failure in the MUTM profile. The project's website describes itself as "open source," but there is no public GitHub repository for the protocol's core smart contracts. The code has been audited by Halborn, which means it exists — but the community cannot independently review it, fork it, or verify that the deployed contracts match the audited code.

In mature DeFi, open-source code is not optional. Aave, Compound, Uniswap, and every other credible DeFi protocol publishes its code publicly. The argument that publishing code creates a security risk is not accepted by the DeFi security community — security through obscurity is not security. The absence of a public repository is a meaningful transparency gap that MUTM needs to close before mainnet launch.

Pillar 2 Risk Score: MEDIUM — Audits are legitimate and results are strong. The GitHub gap is the primary concern.

MUTM has a partially doxxed team — a meaningful distinction from the fully anonymous teams behind IONIX Chain, DeepSnitch AI, Bitcoin Hyper, and ZKP. Several individuals are publicly named in connection with the project:

The distinction between "named" and "fully doxxed" matters. A named team member with a verifiable LinkedIn profile, a documented professional history, and a public track record is meaningfully more accountable than a name on a website. Not all of the MUTM team members have extensive verifiable public profiles. This is a partial improvement over anonymity, not a complete solution.

The project is registered as Mutuum Finance Technology Ltd., which provides a legal entity that can be held accountable in a way that an anonymous team operating from an offshore shell company cannot. This is a positive signal. The jurisdiction of registration is not prominently disclosed, which is worth investigating before committing significant capital.

Pillar 3 Risk Score: MEDIUM — Significantly better than anonymous teams. Not yet at the full transparency standard of a mature DeFi protocol.

The MUTM tokenomics are reasonable by presale standards. The total supply is fixed at 4 billion tokens, minted at deployment with no mechanism for additional issuance. The presale allocation of 45.5% (1.82 billion tokens) is large but not unusual for a project at this stage — it reflects the project's reliance on presale funding for development capital.

The 4.5% Team Allocation

A 4.5% team allocation is notably conservative. For context, many presale projects allocate 15–25% to the team, creating immediate sell pressure at listing. A 4.5% allocation signals either genuine confidence in the protocol's long-term value, or a team that has structured the tokenomics to appear investor-friendly. The distinction matters, and it is resolved by the vesting schedule — which is not publicly disclosed.

Presale Mechanics

The presale is conducted on-chain, which means purchases are verifiable on Etherscan. This is a positive signal — it means the presale cannot be fabricated or manipulated in the way that off-chain presales can be. The 11-phase structure with escalating prices creates a standard FOMO dynamic, but the on-chain transparency mitigates the risk of the presale itself being fraudulent.

The $20.6 million raised across 7 phases is a meaningful data point. It suggests genuine retail demand, not a fabricated raise. However, it also means that a significant number of retail investors are now holding presale tokens at various price points, all of whom will be looking for liquidity at listing. The listing price dynamics will be critical.

Pillar 4 Risk Score: MEDIUM — Conservative team allocation is a positive signal. Vesting non-disclosure is the primary concern.