If a protocol inside Kraken’s $USDC vault gets exploited, five independent security firms decide whether you get paid back. With most DeFi vaults, if a protocol underneath gets exploited, you just eat the loss. The vault runs the strategy and moves your money around for you, but the risk is still yours unless you went out and bought your own cover. @Firelightfi changes that with a different approach. The vault operator arranges the cover, and everyone in the vault is protected without doing anything extra. @SentoraHQ already uses it on its USD and RWA vaults, and now it’s live on @krakenfx’s Protected Strategies USDC earn vault, which Sentora curates. If a covered protocol gets exploited, has an oracle failure, or hits another specified incident, those five firms review what happened. If they validate the loss, Firelight can pay the vault from its backing capital, which comes from people staking $XRP with Firelight. Their stake gets slashed to cover the payout. Honestly I think the vault level is the right place for this, because most people were never gonna buy cover on their own anyway. It doesn’t make the vault risk-free though. Payouts aren’t automatic and cover only applies to specific incidents. There’s also a ceiling, $38M of cover available right now across three strategies. But if you're comparing DeFi vaults, checking what happens when things go wrong is probably just as important as checking the APY.