Superform provides no guarantee of the underlying security or functionality of a vault. The Superform Protocol is permissionless and anyone can list any vault, including broken or risky ones.
Even if a vault:
Is associated with an authenticated protocol
Is associated with a protocol you trust
Passes simulations
Has been audited
Has lots of TVL
There is a possibility that something can go wrong.
What happened to my tokens?
If a vault you deposited into through Superform was exploited or malfunctioned, you will be subject to the same effects as someone who deposited directly into the vault outside of Superform. That could mean partial or complete loss of deposited tokens, or inability to withdraw.
What should you do?
Follow up with the protocol that was hacked. That is where you will be able to learn of any recoveries made for the vault.
If the exploit hasn’t already been flagged by Superform, please file a ticket in the #help-zone in Discord.
Wait for the protocol or vault that was hacked to provide you with a resolution.