A Risk Framework for Grading Any XRP Yield Product

By XORA · Published 2026-09-13

APY alone tells you nothing about risk. A venue can advertise a high rate with no transparency about where the yield comes from or what stops it. A lower rate alone does not establish safety either. This article gives you a six-factor framework to compare any XRP yield product, examines published exchange earn disclosures, and shows where XORA discloses its risks and gaps.

The basic problem: XRP does not stake

The XRP Ledger has no native staking. It uses federated consensus, not proof-of-stake. Validators are not paid in XRP. Every product called "XRP staking" is lending, a wrapped-asset strategy, or a treasury subsidy. None of it is protocol-level yield.

The six-factor framework

Each factor is scored 0 (worst) to 3 (best). Maximum 18. A low total does not mean fraud — it means opacity, which is risk on its own.

1. Custody

Who holds the XRP? Pooled exchange wallets expose every depositor to a single hack or exit. XRPL treasury custody with a disclosed address lets depositors verify the reserve. A multisig treasury with known signers is stronger still. Score 0 for omnibus wallets with no reserve proof. 1 for pooled custody with periodic attestations. 2 for on-chain custodial addresses. 3 for published multisig with known signers.

2. Counterparty

Who is on the other side of the yield? Borrowers who can default, a treasury with a finite subsidy, or a bridge that can be exploited. Score 0 if no counterparty is named. 1 if the type is named but not the entity. 2 if the specific counterparty is disclosed. 3 if it has a published track record or audited reserve.

3. Yield source

The most important factor. Without a named source, you cannot assess whether the rate is sustainable. Score 0 if not disclosed. 1 if named in terms or docs only. 2 if named on the product page. 3 if named with mechanism, duration, and downside condition.

4. Liquidity

Can you withdraw on demand? Fixed lock-ups, review queues, and panic-mode freezes all affect liquidity. Score 0 if withdrawals can be frozen without notice. 1 if fixed lock-ups apply. 2 if disclosed controls (review thresholds, treasury checks). 3 if on-demand with no conditions.

5. Transparency

Does the venue publish yield-source details, custody information, and risk disclosures — or bury them in terms? Score 0 if no disclosure. 1 if risks in terms only. 2 if a dedicated risk page exists but is not linked from the rate. 3 if risk disclosure sits next to the rate.

6. Reserves

Is there a quantified reserve or insurance fund that can absorb losses? Score 0 if no reserve disclosed. 1 if a reserve exists but is not quantified. 2 if quantified. 3 if on-chain verifiable and audited.

Examining exchange earn disclosures

The examples below reproduce the venue descriptions from this site's published disclosure audit of 3 September 2026. That audit uses a different rubric and does not establish scores for all six factors here. These are historical disclosure examples, not a live check. Rates and terms change.

Uphold states that XRP does not support staking. Kraken and Coinbase did not offer an XRP Earn product at the audit date. Those disclosures help establish what is being offered; they do not establish that a venue is safer.

Use the framework to identify what still needs checking. A disclosure audit is not proof of custody, reserves, liquidity, or solvency; do not infer those facts from an absent product or a generic overview.

Where XORA stands and why we publish the gaps

XORA is a custodial XRP neobank. Headline rate: up to 22% APY value — 15% native XRP yield currently subsidised by the XORA treasury during a disclosed bootstrap, plus estimated XORA reward value. Tiers step down to 19%, 17%, and 15% APY value as balance increases. The XORA token is not yet tradable; the reward value is an estimate from the issuance schedule, not a market price.

Capital is at risk. Withdrawals pass through account, treasury, reconciliation, and risk controls before broadcast. A panic-mode gate and a projected-liability guard are on the security page.

We publish the gaps because opacity is a choice. XORA names the treasury subsidy and withdrawal controls. Its security page describes multisig migration as planned, not live, and the separate depositor reserve is not funded. These limits belong in the assessment alongside the rate.

Running the framework on any new yield product

Three steps, five minutes:

1. Find the yield source. Search for "yield", "earn", "staking", "lending", "subsidy", "treasury". If none has a named source, factor 3 fails regardless of APY.
2. Find the custody model. Pooled or exchange wallet? Assume omnibus. On-chain address you can verify? Better.
3. Find the stop condition. "Rates are variable" is not disclosure. "Subsidy runs out on X date" or "lending pool has a utilisation floor" is disclosure.

Apply the same questions to each product. If a factor cannot be verified from the available evidence, record the gap rather than assume a favourable score. A total is a disclosure aid, not a measure of loss probability.

Yield with the risks published alongside it

XORA offers up to 22% APY value on XRP deposits with no fixed lock-up, subject to disclosed controls. The native leg is treasury-subsidised during bootstrap, the XORA reward value is estimated, and capital is at risk.

Read the yield-source page first, then model your balance with the XRP yield calculator.