
ASSET RISK REVIEW
Huma PST provides short-duration yield backed by receivables-based credit lines extended to licensed cross-border payment institutions through the Huma Finance protocol.
This report provides an executive summary of Sentora’s internal due diligence questionnaire (DDQ) process. It is intended to offer a concise overview of key risks; Sentora’s internal reports are more comprehensive and are available to clients and partners. For additional information to support your risk assessment process, please contact us at sentora.com/contact
Executive Summary
Huma PST provides short-duration yield backed by receivables-based credit lines extended to licensed cross-border payment institutions through the Huma Finance protocol. The core return driver is interest and origination fees on ultra-short-duration financing (typically one-to-five-day tenors that roll continuously) with exposure centered on private payment-financing credit rather than traditional DeFi lending. Based on the structure reviewed, this is best viewed as an RWA allocation with key risks in related-party concentration, credit-performance transparency, redemption and secondary liquidity, valuation and oracle dependence, and technical execution.
Project Overview
Huma Finance is a PayFi/real-world-asset lending protocol that provides on-chain stablecoin liquidity for cross-border payment financing. Liquidity providers deposit stablecoins and receive PST, a tokenized deposit (receipt) token representing their claim on a lending pool.
For clarification, PST serves as the yield-bearing token for depositors and is the primary asset evaluated in this report. The protocol's governance token (HUMA) is outside the scope of this report and has not been assessed for use as collateral in our vaults. Huma Finance runs primarily on Solana, with additional deployments on Stellar, Polygon, Celo, and Scroll, and reports total value locked of roughly $155M.
The operator, Huma Global Ltd. (BVI), and the dominant credit originator, Arf (Arf Financial GmbH in Switzerland, with a Liechtenstein-domiciled special-purpose vehicle, Arf Capital Ltd.), are affiliated entities combined under a common corporate group (00 Holdings Inc.) in 2024. The large majority of pool capital is deployed into Arf-originated credit.
Risk Assessment
Sources of yield
PST yield is generated by ultra-short-duration, receivables-backed credit lines (typically one-to-five-day tenors) extended to licensed cross-border payment institutions that pre-fund payment corridors. Borrowers repay within days and facilities roll continuously; yield accrues from the interest and origination fees on this lending.
Because the great majority of the pool's assets are Arf-originated receivables, the yield and its durability depend chiefly on Arf's continued origination volume, the credit performance of the underlying payment-institution borrowers, and the stability of the banking and on/off-ramp rails that settle the flows.
Risks
The following are the principal ways in which PST could lose value or a holder could be impaired. They are disclosed for the reader's own evaluation.
Related-party credit structure. The lender (Huma) and the dominant borrower (Arf) are affiliated under one corporate group, and the agent that approves credit, declares defaults, and restructures loans sits within that same group. Underwriting, default recognition, and loss reporting therefore carry inherent conflicts of interest.
Single-borrower concentration. The pool backing PST is, in practice, concentrated in Arf-originated credit (the majority of active institutional pools). A credit event at that one counterparty would impair the pool broadly rather than in isolation.
Credit-performance transparency. A near-flawless reported default record across several billion dollars of cumulative origination is self-reported and anonymized; no independent loan-tape audit, trustee, or credit rating has been evidenced. First-loss cover on the relevant pool is modest (on the order of a couple of percent).
Regulatory perimeter. The originator holds only a Swiss self-regulatory (VQF SRO) membership, which covers anti-money-laundering obligations but provides no prudential supervision, balance-sheet oversight, or capital-adequacy requirement; the issuing entity is a BVI company without a financial-services license, and the vehicle is Liechtenstein-domiciled. Legal enforceability of the underlying receivables varies by jurisdiction.
Redemption and liquidity. Deposits are open-ended while the underlying receivables mature over days to weeks. A liquidity sleeve (roughly 10–20% of assets) is held in liquid Solana venues to service redemptions, but the operator retains the authority to freeze or cap redemptions, and the looping product is locked until maturity. Redemptions above the buffer could be queued or gated.
Thin secondary liquidity. On-chain (DEX) liquidity for PST is only a few million dollars, so a holder seeking to exit through the secondary market rather than redemption would face material slippage.
Valuation and oracle. PST is priced by an internally-operated oracle that reflects off-chain private-credit valuations rather than an independent third-party feed. Stale or mispriced inputs are a risk, and because PST is already used as collateral on external Solana lending markets (Jupiter and Kamino), a mispricing or de-peg could trigger reflexive liquidations there.
Privileged control. Protocol-owner keys can pause the protocol and change pool parameters; several signer identities and thresholds are not publicly disclosed, and contract logic is upgradeable.
DeFi aspects
Secondary-market liquidity. PST's primary exit is redemption through the protocol, while direct DEX liquidity (a few million dollars) is thin. The redemption liquidity sleeve is deployed into Jupiter Lend and Kamino, the most liquid Solana money markets.
Oracle / pricing. PST's price is set by an internally-operated oracle based on the pool's intrinsic net asset value; the update authority, cadence, and independent verification of the net-asset-value inputs are limited, and staleness circuit-breakers are not evidenced. This is the single most important on-chain parameter for any collateral use of PST.
Liquidation mechanism. Where PST is used as collateral on external lending markets (Jupiter, Kamino), liquidations there rely on that internally-operated price. There is no automated on-chain liquidation of the underlying off-chain receivables; defaults are handled semi-manually by the credit agent. Any leveraged position on PST should therefore assume that liquidation robustness depends on an internal price feed and on manual credit-workout processes.
Code security. The protocol has undergone multiple independent smart-contract audits without unresolved critical findings; the published bug-bounty ceiling is modest relative to assets at risk.
Verdict
Following completion of Sentora's due-diligence review, the yield-bearing token PST has been approved as eligible collateral within the Sentora vaults ecosystem. Sentora's risk, research, and legal work-streams each cleared the risk vectors within their scope. Given a concentrated, operationally centralized credit product with thin on-chain liquidity, PST is approved only on conservative terms: a low loan-to-value and strict exposure caps.
For leverage and looping strategies, PST would be eligible only in a constrained, conservative configuration. The thin secondary liquidity and the internally-operated price oracle mean any leveraged use should assume limited exit depth and conservative collateral parameters; PST is not suited to aggressive leverage.
Basis & limitations
This document is a risk disclosure, not a risk score. Sentora's level of comfort is expressed through the eligibility decision and the loan-to-value and caps applied. The suitability of the risk/reward is the depositor's own assessment
This assessment rests on Sentora's structured due-diligence cycle: a seventeen-question pack answered by the counterparty, supported by evidence items (data-room documents, a research memo, audit reports, and regulatory filings) and public web research, together with subsequent follow-up questions.
Key limitation includes:
The credit and default data are self-reported and anonymized and have not been independently audited.
Audited financial statements were not available for every entity in the structure; the credit agent's identity and independence are not fully disclosed.
The net-asset-value inputs to the PST oracle are not independently verified.
PST has been approved as eligible collateral on conservative terms; the risk profile above is provided as disclosure for the reader's own risk/reward assessment.