DeFi Insurance Protocols

1. Protocol Landscape

Decentralized insurance -- or, more precisely, decentralised risk-sharing -- has produced a small but structurally significant set of protocols since 2019. None holds an insurance licence in any jurisdiction. All operate as smart-contract-mediated capital pools where token holders collectively decide whether to pay claims. Across the 18 jurisdictions surveyed in this domain, not one treats a DeFi insurance protocol as regulated insurance; where the matter is addressed at all, regulators classify these protocols as discretionary, unregulated, or as a coverage gap, and several note the products may instead fall under derivatives or event-contract rules.

Self-reported figures caveat. Capital-pool size, cumulative-claims, active-cover and "value protected" figures below are self-reported by the protocols and drawn from each protocol's own documentation, forum, or dashboard. They are not audited to an insurance-regulatory standard, are denominated partly in volatile crypto, and should be read as protocol disclosures rather than verified regulatory filings.

1.1 Nexus Mutual

Nexus Mutual is a UK-registered company limited by guarantee (Companies House No. 10917763, incorporated 16 August 2017, London) operating as a discretionary mutual on Ethereum. It is the largest DeFi insurance protocol by capital pool and claims paid. It is not an authorised insurer and is not MAS-, FCA-, or otherwise insurance-licensed in any jurisdiction.

All figures in this table are self-reported by Nexus Mutual via its own documentation and forum (see source line below); they are not independently audited regulatory figures.

Key claims events (self-reported by Nexus Mutual):

• bZx hack (February 2020) -- USD 33,720
• Yearn yDAI hack (February 2021) -- part of USD 2.72M year total
• TribeDAO/Rari Capital Fuse hack (April 2022) -- part of USD 6.62M year total
• FTX halted withdrawals (November 2022) -- 24 claims filed, subset approved
• Euler Finance exploit (March 2023) -- claims approved; Nexus subsequently sought USD 2M refund after Euler recovered funds
• 2024 claims: USD 6,895
• 2025 claims (partial): USD 245,957

Notable incident: In December 2020, founder Hugh Karp lost 370,000 NXM (~USD 8M) to a targeted social-engineering attack using a malicious MetaMask extension. The protocol's smart contracts and capital pool were unaffected; this was a personal device compromise, not a protocol exploit.

Source: Nexus Mutual Claims History Documentation; Nexus Mutual Investment Committee Newsletter Oct 2025-Feb 2026 (protocol's own forum). Capital-pool, claims and cover figures are self-reported.

1.2 InsurAce

InsurAce is a multi-chain DeFi insurance protocol (Ethereum, BSC, Polygon, Avalanche) offering portfolio cover -- the ability to bundle multiple protocol risks into a single policy. The INSUR token governs claims assessment. It is not insurance-licensed in any surveyed jurisdiction.

Terra/UST de-peg payout (May-August 2022): InsurAce reports it approved 155 of 173 eligible claims and paid approximately USD 11.6 million to cover holders affected by the Terra/LUNA collapse. The protocol shortened its claims window from 15 to 7 days after UST dropped to USD 0.08, generating controversy. Eighteen claims were denied. Claims assessment was conducted by community vote of staked INSUR holders. (Approval/denial counts and payout total are self-reported by the protocol / contemporaneous trade press.)

Source: CoinTelegraph -- InsurAce Terra collapse payout. Payout and claim-count figures are self-reported.

1.3 Neptune Mutual (Closed)

Neptune Mutual operated a parametric DeFi insurance marketplace where claims did not require proof of loss -- payouts triggered automatically based on predefined parameters and community governance votes rather than individual loss assessment. The NPM token was used for governance and staking.

Status as of 2025: Neptune Mutual closed its cover marketplaces, returning liquidity to providers and refunding policy purchasers who paid over USD 10 in fees. The protocol code was open-sourced as a public good.

Source: Neptune Mutual documentation (protocol's own site).

1.4 Unslashed Finance

Unslashed Finance uses a "buckets" model -- structured products combining multiple policies (centralised exchange cover, oracle failures, stablecoin de-pegs, validator slashing) under a single risk pool. It has self-reported over USD 100 million in staked assets and claims of having covered USD 700+ million in digital assets. These are protocol-reported figures and are not independently verified.

Source: Unslashed Finance (protocol's own site). Staked-asset and value-covered figures are self-reported.

1.5 Bridge Mutual

Bridge Mutual provides peer-to-peer risk-sharing for stablecoin failures, smart contract exploits, and exchange hacks. It processed claims related to the Terra/UST collapse. TVL self-reported in the tens of millions; not independently verified.

Source: Bridge Mutual (protocol's own site). TVL is self-reported.

1.6 Ease (formerly Armor Finance)

Armor Finance rebranded to Ease. It originated as a smart insurance aggregator and decentralised brokerage for cover underwritten by Nexus Mutual, allowing users to purchase Nexus cover without membership.

Source: Ease (protocol's own site).

1.7 Etherisc

Etherisc builds parametric insurance applications on Ethereum using the Generic Insurance Framework (GIF). Its flagship product is FlightDelay -- a blockchain-backed parametric application covering 80+ airlines globally, with oracle-triggered automatic payouts for delays and cancellations. The DIP token (Decentralized Insurance Protocol) is issued by the Decentralized Insurance Foundation (DIF) in Zug, Switzerland. The IAIS FinTech Forum selected Etherisc (alongside Nexus Mutual) for a deep-dive case study on DeFi insurance models.

Source: Etherisc (protocol's own site); IAIS FinTech Developments Report (2022)

1.8 Nayms / OnRe

Nayms launched as an institutional tokenised (re)insurance marketplace on Coinbase's Base (Ethereum L2), using

Bermuda-regulated segregated account structures. In 2025, the company relaunched as OnRe -- an on-chain reinsurance company backed by Ethena, Solana Ventures, and RockawayX, with over USD 10 million in deployable capital. OnRe deploys sUSDe stablecoins into diversified reinsurance pools underwritten by its actuarial team, projecting returns in the mid-to-high teens for investors. Its first product was an industry loss warranty (ILW) contract for Florida weather catastrophe risk. Unlike the discretionary mutuals above, Nayms/OnRe operates inside a regulated insurance perimeter via Bermuda segregated-account/SPI structures.

Source: Insurtech Gateway -- Insurance incubator to on-chain reinsurer; Insurance Business Reinsurance -- OnRe tokenized yield. Deployable-capital and projected-return figures are self-reported.

2. The Classification Problem

2.1 Why Classification Matters

DeFi insurance protocols occupy a regulatory grey zone where four legal categories potentially apply:

1. Insurance -- triggers capital requirements, licensing, policyholder protection funds, and conduct rules
2. Derivatives / event contracts -- triggers exchange registration, margin requirements, and position reporting
3. Securities -- triggers prospectus requirements, exchange listing rules, and investor protections
4. Gambling / prediction markets -- triggers gaming licence requirements and prohibitions in many jurisdictions

The classification determines which regulator has jurisdiction, what consumer protections apply, what capital the protocol must hold, and whether the product is legal at all in a given territory. A product classified as insurance in one jurisdiction may be an unlicensed derivative in another and illegal gambling in a third.

A key distinction runs through every jurisdiction's treatment: regulated insurance vs. discretionary mutual. A regulated insurer has a contractual, supervised obligation to pay valid claims, holds prescribed capital, and its policyholders may have access to a compensation scheme. A discretionary mutual (the dominant DeFi model -- Nexus Mutual being the archetype) has no contractual obligation to pay; payment is at the collective discretion of members, no insurance capital regime applies, and members have no regulatory recourse. None of the 18 surveyed jurisdictions treats an open-participation DeFi pool as regulated insurance.

2.2 IOSCO Position

IOSCO has addressed DeFi insurance indirectly through two key reports:

• IOSCOPD699 (March 2022): The foundational DeFi report noted that derivative DeFi protocols allow creation of synthetic assets whose value derives from "the failure or hack of another DeFi protocol" -- directly describing DeFi insurance cover. IOSCO signalled that such products could fall within existing securities/derivatives frameworks.
• IOSCOPD754 (December 2023): The final DeFi policy recommendations applied the principle of "same activity, same risk, same regulatory outcome." Nine principles-based recommendations addressed investor protection, market integrity, and risk management without carving out exceptions for DeFi insurance.

Source: IOSCO DeFi Report IOSCOPD699; IOSCO Final DeFi Recommendations IOSCOPD754

2.3 MiCA and the EU

The

EU Markets in Crypto-Assets Regulation (MiCA) does not specifically address DeFi insurance protocols. The Article 142 joint report (January 2025, ESMA/EBA/EIOPA) found DeFi remains "niche" at 4% of global crypto market value, and the Commission is not prioritising comprehensive DeFi regulation. The "fully decentralised" exemption boundary remains undefined and untested by ESMA and national competent authorities. The transitional regime for CASPs ends 1 July 2026. Discretionary mutuals such as Nexus Mutual likely fall outside Solvency II, MiFID II and gambling rules, but no definitive EU ruling exists as of this writing. Whether a DeFi insurance protocol constitutes a CASP depends on whether an identifiable entity provides services -- pure smart contract deployments with no controlling entity may fall outside scope, but most protocols have identifiable development teams and governance structures.

On the insurer-capital side, the Solvency II Delegated Regulation (EU) 2026/269 (published in the OJ 18 February 2026, in force 10 March 2026, applicable from 30 January 2027) contains no crypto-specific capital charge. EIOPA's recommended 100% capital stress for insurer crypto holdings (final technical advice, March 2025) remains a pending subsequent delegated act -- it is not yet enacted -- and in any event addresses traditional insurers holding crypto, not DeFi protocols.

Source: ESMA Article 142 Joint Report (January 2025)

2.4 SEC / CFTC Position -- Are Cover Tokens Securities?

The SEC and CFTC issued a binding joint crypto-asset interpretation on 17 March 2026 (SEC Release 33-11412 / CFTC Press Release 9198-26), establishing a five-part token taxonomy: digital commodities, digital collectibles, digital tools, stablecoins, and digital securities. A digital asset becomes a security when issued as "an investment in a common enterprise that comes with promises of profits based on the management's efforts." If the underlying project becomes sufficiently decentralised, the token reverts to non-security status. DeFi insurance cover tokens -- which represent a right to file a claim and receive payout -- have not been specifically addressed. Staking tokens that entitle holders to underwriting returns (e.g. NXM) could meet the Howey test, though no SEC or state enforcement action has targeted a DeFi insurance protocol as of June 2026.

Source: SEC first-ever crypto asset definitions (March 2026); CFTC joint guidance (PR 9198-26)

2.5 CFTC -- Event Contracts Jurisdiction

The CFTC asserts jurisdiction over event contracts traded on prediction markets. In March 2026, it published an Advance Notice of Proposed Rulemaking (ANPRM) on prediction markets, noting that trading exceeded USD 60 billion in 2025 (400% year-over-year growth). The comment period closed 30 April 2026. DeFi insurance cover that pays out on the occurrence of a defined event (hack, de-peg, protocol failure) is structurally identical to an event contract. If the CFTC classifies such products as event contracts, DeFi insurance protocols offering to US persons would need to operate through or register as a designated contract market (DCM). This is the basis for the matrix's note that parametric/event-based DeFi products "may be CFTC-regulated event contracts/swaps."

Source: CFTC ANPRM on Prediction Markets (March 2026); Federal Register -- Prediction Markets

2.6 UK FCA -- Nexus Mutual as Discretionary Mutual

The

UK treats Nexus Mutual as a discretionary mutual -- not "insurance business" under FSMA, and not regulated insurance. A discretionary mutual has no contractual obligation to pay claims; payments are made at the collective discretion of members. This structure sits outside the FCA's regulatory perimeter for insurance companies and the Financial Services Compensation Scheme (FSCS); the FSCS explicitly does not cover cryptoasset losses even under the forthcoming Oct 2027 regime (SI 2026/102). Members have no regulatory recourse if claims are denied. The FCA approved use of the word "mutual" in the company's name. The FCA Handbook (PERG 5) defines the insurance boundary; discretionary cover by a mutual falls outside it.

Source: FCA Handbook PERG 5

2.7 Singapore MAS

Singapore's Monetary Authority has no specific classification for DeFi insurance and has not classified protocols such as Nexus Mutual, InsurAce, or Unslashed as Insurance Act products. Genuinely decentralised protocols fall outside the MAS perimeter, with no statutory consumer protection; Nexus Mutual is a UK discretionary mutual, not MAS-licensed, and no Singapore-based MAS-licensed DeFi insurance protocol has been identified. Under the Financial Services and Markets Act (FSMA), digital token service providers (DTSPs) with a substantive presence in Singapore must be licensed (regime effective 30 June 2025); whether a DeFi insurance protocol falls within scope depends on the degree of control its operator can be seen to exercise over the protocol's operations and over user assets. MAS has signalled it will clarify DeFi treatment but has not issued specific guidance on parametric/blockchain-based insurance (a regulatory-sandbox pathway is available).

Source:

Singapore regulatory profile (MAS FSMA / DTSP regime, PS-G03 safeguarding)

2.8 IAIS FinTech Forum

The IAIS FinTech Forum identified distributed ledger technology as enabling "completely decentralised peer-to-peer insurance business models." It selected Etherisc and Nexus Mutual for deep-dive case studies. The Forum flagged that DLT adoption may trigger operational risks (fraud, cyber), ML/TF risk, legal uncertainty, and reputational risks. However, the IAIS has not issued binding standards or recommendations specific to DeFi insurance.

Source: IAIS Report on FinTech Developments in Insurance (2022)

3. How DeFi Insurance Works

3.1 Cover Purchase Mechanics

A user selects a protocol, asset, or risk to cover; chooses a coverage amount and duration; and pays a premium denominated in the protocol's native token or a stablecoin. The smart contract issues a tokenised cover position (often an ERC-721 NFT or ERC-20 token) representing the right to file a claim. Premiums are routed to capital pools where they accrue to stakers who underwrite the risk.

3.2 Claims Assessment Models

Three models exist across the landscape:

Governance-based models introduce subjectivity and potential for manipulation. Oracle-based models depend on data-feed integrity. Parametric models eliminate discretion but introduce basis risk (the payout may not match actual loss). The parametric/oracle-triggered models are precisely those most exposed to event-contract reclassification under the CFTC's prediction-markets analysis (Section 2.5).

3.3 Capital Pooling and Staking

Capital providers deposit assets (typically ETH, stablecoins, or the protocol's native token) into shared pools. They earn premiums and, in some protocols, additional token incentives. In return, their capital is at risk of being used to pay claims. This is economically equivalent to insurance underwriting capital, though no jurisdiction treats it as such for regulatory purposes.

3.4 Smart Contract Risk in the Insurer Itself

The insurer is a smart contract. If the insurance protocol's own smart contracts are exploited, all capital -- including funds backing outstanding covers -- can be drained. This creates a structural conflict: the product designed to protect against smart contract risk is itself subject to smart contract risk. No DeFi insurance protocol has experienced a protocol-level smart contract exploit resulting in capital pool loss as of June 2026, though the Nexus Mutual founder hack (December 2020) demonstrated that peripheral infrastructure (browser extensions, user interfaces) remains a vector.

3.5 Reinsurance and Retrocession On-Chain

Nayms/OnRe represents the first operational model for on-chain reinsurance, using Bermuda-regulated segregated accounts to connect crypto-native capital with traditional reinsurance risk. The model tokenises reinsurance capacity, allowing fractional participation in ILW contracts and catastrophe risk pools. This is the one part of the DeFi-insurance landscape sitting inside a regulated insurance perimeter (Bermuda SPI/segregated-account structures), in contrast to the discretionary mutuals. Traditional reinsurers (Swiss Re, Munich Re) have experimented with blockchain-based reinsurance contracts but have not adopted DeFi protocols for capital pooling.

4. Claims History and Loss Data

4.1 Nexus Mutual -- Cumulative Claims by Year (self-reported)

All figures are self-reported by Nexus Mutual via its claims-history documentation.

Source: Nexus Mutual Claims History (protocol's own documentation; self-reported)

4.2 InsurAce -- Terra/LUNA Payout (self-reported)

The claims window controversy -- shortening from 15 to 7 days mid-event -- highlighted the absence of regulatory standards for claims handling in DeFi insurance. Figures self-reported by the protocol / contemporaneous trade press.

4.3 Notable Denials and Disputes

• Nexus Mutual / Euler (2023): After Euler Finance recovered stolen funds and distributed them to users, Nexus Mutual sought ~USD 2M refund from claimants who had already been paid, raising questions about subrogation rights in DeFi insurance.
• InsurAce claims window (2022): The unilateral shortening of the claims period generated community backlash and allegations that the protocol was attempting to limit payouts.

4.4 DeFi vs. Traditional Insurance Claims Comparison

See also: Claims History and Loss Data

5. Risks Specific to DeFi Insurance

5.1 Smart Contract Vulnerability in the Insurance Protocol

The insurance protocol itself is a smart contract susceptible to the same exploits it insures against. If a vulnerability in the protocol's contracts is exploited, all pooled capital may be lost simultaneously. This is a structural risk with no traditional insurance analogue -- the insurer cannot be "hacked" in traditional insurance.

5.2 Governance Attacks

Because claims are decided by token-weighted votes, an attacker can:

• Accumulate tokens on the open market to influence claims outcomes
• Use flash loans to temporarily acquire governance tokens, vote on a claim, and return the tokens within a single transaction -- making the attack economically costless
• Bribe or coordinate token holders to approve fraudulent claims or deny legitimate ones

Nexus Mutual mitigates this partially through staking lock-ups and advisory board veto power, but no protocol has fully solved the governance attack vector.

5.3 Oracle Manipulation

Parametric and oracle-triggered models depend on external data feeds. If an oracle is compromised or manipulated, payouts can be triggered fraudulently or legitimate triggers can be suppressed. Chainlink's decentralised oracle network reduces single-point-of-failure risk but does not eliminate it entirely.

5.4 Correlated Risk

A single event -- such as a major protocol exploit or stablecoin de-peg -- can trigger claims across many covers simultaneously. The Terra/UST collapse triggered claims at InsurAce, Nexus Mutual, Bridge Mutual, and Unslashed simultaneously. Unlike traditional insurance where diversification across geographies and perils reduces correlation, DeFi insurance is concentrated in a single ecosystem where systemic events propagate instantly.

5.5 Capital Flight During Stress Events

Capital providers can withdraw staked assets when they anticipate large claims, reducing the pool's ability to pay precisely when it is most needed. This is analogous to a bank run. Some protocols impose withdrawal lock-ups or cooldown periods, but these reduce liquidity for capital providers and may deter participation.

See also: Coverage Gaps and Exclusions

6. Regulatory Recommendations

6.1 Tiered Approach Based on Scale and Risk

6.2 Minimum Standards for Consumer Protection

Regardless of classification, regulators should require:

1. Clear disclosure that DeFi cover is a discretionary mutual, not regulated insurance, and is not protected by compensation schemes
2. Published claims assessment criteria and timelines that cannot be unilaterally shortened mid-event
3. Smart contract audit requirements -- minimum two independent audits before launch, annual re-audits
4. Governance safeguards against flash-loan voting and token accumulation attacks
5. Segregation requirements for capital pools backing outstanding covers vs. protocol operating funds

6.3 Jurisdictional Evidence

Across all 18 jurisdictions, none classifies an open-participation DeFi insurance pool as regulated insurance. The treatments break down as follows:

• Addressed as discretionary / unregulated -- the
  UK (Nexus Mutual = discretionary mutual, not FSMA insurance business),
  US (peer-to-peer risk-sharing pools, gray area; NXM possibly a Howey security; parametric products possibly CFTC event contracts),
  Singapore (not Insurance Act products; decentralised protocols outside MAS perimeter), and the
  EU (grey zone; discretionary mutuals likely outside Solvency II/MiFID II/gambling).
• Treated as a coverage gap --
  Canada (DeFi/parametric "very limited", no framework),
  France (DeFi/NFT/smart-contract largely uninsurable, follows MiCAR),
  Switzerland (coverage gap most acute for DeFi/hot-wallet/smart-contract).
• Regulated insurance pathway (not a DeFi pool, but adjacent products) --
  Bermuda (PSPI class proposed Jan 2026, not enacted; Embedded Supervision DeFi pilot completed 6 May 2026; Relm II crypto-collateralized reinsurer),
  Germany (Munich Re Smart Contract Risk Insurance as a regulated commercial product, distinct from a DeFi protocol).
• Brought within the regulatory perimeter, but no regulated DeFi-insurance products yet -- the
  UAE (Federal Decree-Law No. 6 of 2025 Art. 62 captures DeFi/blockchain by technology-neutral drafting; DeFi-exploit/smart-contract cover emerging/limited).
• Not addressed / no data --
  Australia,
  Hong Kong,
  Japan,
  South Korea,
  Cayman Islands (DeFi/staking/smart-contract largely uninsurable conventionally; SPC parametric/transformer pathways theoretical),
  Liechtenstein (TVTG enables tokenized insurance products but no DeFi-pool classification),
  Bahrain, and the emerging markets (Brazil, Nigeria, South Africa, India).

Detailed sub-points:

• UK: The discretionary mutual model permits Nexus Mutual to operate without FCA authorisation. This creates a gap: consumers purchase what appears to be insurance but have no regulatory recourse, and the FSCS excludes crypto even under the Oct 2027 regime (SI 2026/102).
• Bermuda: The BMA's proposed PSPI class (consultation Jan 22 2026, deadline 27 Feb 2026; proposed, not enacted as of June 2026, targeted end Q2 2026) could accommodate blockchain-based parametric insurance but is designed for traditional fully-collateralised special purpose vehicles, not open-participation DeFi pools. Separately, the BMA completed an Embedded Supervision DeFi pilot (Chainlink/Apex/Bluprynt/Hacken) on 6 May 2026.
• EU: The Article 142 review deferred DeFi regulation; the "fully decentralised" boundary remains undefined. The Solvency II Delegated Regulation (EU) 2026/269 (OJ 18 Feb 2026) carries no crypto charge, and EIOPA's proposed 100% capital stress (March 2025) remains a pending, not-yet-enacted delegated act addressing traditional insurers, not DeFi protocols.
• US: The SEC-CFTC binding joint interpretation (17 March 2026) and the CFTC ANPRM on prediction markets (March 2026) may eventually capture DeFi insurance under event-contract or securities classification, but no enforcement action has been taken against a DeFi insurance protocol as of this writing.

See also: Insurance Product Taxonomy; Parametric and On-Chain Insurance

Verification Notes

All facts in this document mirror the canonical per-jurisdiction fact matrix (.claude/digital-asset-insurance-fact-matrix.json, t6 across all 18 jurisdictions) as of 4 June 2026. No web search was performed for this refresh; the matrix is the verified source of truth. Protocol-specific track-record figures (capital pool, cumulative claims, active cover, value protected) are self-reported by the protocols and are flagged as such throughout; they are not independently audited regulatory figures. Protocol citations use each protocol's own site/documentation (not Medium, Wikipedia, Reddit, X/Twitter, or Quora).

Cross-jurisdiction classification basis (matrix t6, N=18):

• Discretionary / unregulated as insurance: US, UK, Singapore, EU (4 jurisdictions explicitly so classify the DeFi-pool model).
• Coverage gap (not addressed as regulated insurance): Canada, France, Switzerland.
• Regulated insurance pathway for adjacent products (not DeFi pools): Bermuda (PSPI proposed; Relm II), Germany (Munich Re Smart Contract Risk Insurance).
• Within perimeter by technology-neutral drafting, no regulated DeFi products yet: UAE.
• Not addressed / no data in matrix: Australia, Hong Kong, Japan, South Korea, Cayman Islands, Liechtenstein, Bahrain, Emerging Markets (Brazil/Nigeria/South Africa/India).
• Across all 18: zero jurisdictions treat an open-participation DeFi insurance pool as regulated insurance.

Key sources (all primary / protocol-own / regulator, no Medium):

• Nexus Mutual claims & capital (self-reported): docs.nexusmutual.io/overview/claims-history; Nexus Mutual Investment Committee Newsletter Oct 2025-Feb 2026
• InsurAce Terra payout (self-reported / trade press): CoinTelegraph
• Neptune Mutual closure: neptunemutual.com
• Unslashed Finance (self-reported): unslashed.finance
• Bridge Mutual (self-reported): bridgemutual.io
• Ease: ease.org
• Etherisc: etherisc.com
• IOSCO IOSCOPD699: iosco.org
• IOSCO IOSCOPD754: iosco.org
• MiCA Article 142 Joint Report: ESMA (January 2025)
• SEC-CFTC joint crypto interpretation (17 Mar 2026): CoinDesk; CFTC PR 9198-26
• CFTC ANPRM prediction markets: CFTC PR 9194-26
• Nayms/OnRe: Insurtech Gateway
• IAIS FinTech Report: iais.org (2022)
• FCA discretionary mutual boundary: FCA Handbook PERG 5

Items marked UNVERIFIED / NOT VERIFIED in the matrix: For Australia, Hong Kong, Japan, South Korea, Cayman, Bahrain and the emerging markets, the matrix records DeFi/parametric insurance classification as "NOT VERIFIED / NO DATA" or "not addressed"; this document reflects those gaps honestly rather than asserting a classification not in the source.