Islamic Finance Principles Assessment
Riba — Does Penpie involve interest?
Penpie itself charges no fixed interest and offers no lending product, but its entire revenue base sits on top of Pendle's yield-splitting (PT/YT) market, which is structurally an interest-rate trading mechanism. Rewards paid to vlPNP holders are variable and performance-based rather than a guaranteed coupon, which softens but does not eliminate the concern. For Muslim investors, this makes Penpie a protocol requiring real caution rather than one that can be waved through, since its income is derivative of a yield-curve market even though it avoids classic debt-interest.
Assessment: Riba Dominant
Score: 34.5/100
Our methodology examines 10 criteria to evaluate how well Penpie avoids interest-based mechanisms.
Penpie's revenue comes from service fees on boosted PENDLE yield distribution and from "bribe" payments made by projects seeking its vePENDLE voting weight. Roughly 78% of boosted rewards flow to liquidity providers, 12% to mPENDLE, 5% to vlPNP holders, with a treasury/harvester cut on top; vePENDLE and bribe income are split similarly. The treasury holds a 20% Magpie allocation of PNP plus accrued vePENDLE/PENDLE, though full composition is not itemized. Because this entire fee stream is generated from Pendle's fixed/variable-yield interest-rate trading market rather than a tangible service, the underlying income source carries a structural riba-adjacent character.
Staking in Penpie takes the form of locking PNP into vlPNP, a non-custodial vote-escrow mechanism rather than a fixed-deposit product. Rewards are variable, sourced from vePENDLE base yield, USDT-denominated voting fees, and bribe income — there is no promised fixed rate, which distinguishes it from an interest-bearing savings instrument. However, since the reward pool ultimately derives from Pendle's interest-rate-trading ecosystem, the variability of the payout mitigates but does not fully sever the riba-adjacent origin of the underlying cash flows feeding vlPNP holders.
Gharar — How much uncertainty does Penpie involve?
Penpie carries meaningful uncertainty stemming from team anonymity, conflicting founder claims, and a major exploit in code that was assumed audited but was not. Documentation on lock mechanics and reward routing is public and reasonably detailed, which reduces operational ambiguity. On balance, the combination of unverifiable identities and a proven audit gap makes gharar a live and material concern here.
Assessment: Excessive Gharar (High Uncertainty)
Score: 47.3/100
Our methodology examines 15 criteria including team transparency, audit quality, and governance.
Penpie's public team uses only pseudonyms ("Alan" and "Grimmace"), describing themselves as experienced but undisclosed builders, while a separate Chinese-language CoinMarketCap listing names entirely different individuals ("Mitchell Amador and Adam Iza") as founders — a contradiction the available sources never resolve. This leaves true accountability unverifiable. The protocol itself is a genuine, functioning DeFi yield-aggregator (part of the Magpie subDAO suite alongside Radpie, Cakepie, and Wompie) with real TVL near $90-100M at points, so the product is not vaporware, but the anonymity layer above it remains an unresolved disclosure gap.
Penpie has been reviewed by named firms including WatchPug, Zokyo, AstraSec, PeckShield, BlockSec, and SlowMist. Despite these audits, the September 2024 exploit — a $27.3M loss via a fabricated Pendle market inflating reward balances — occurred in code that had been claimed as audited but was not actually covered. An audit further flagged explicit "centralization risks in vlPenpie" governance. So while audits exist and are named, their incomplete scope, proven in practice by a major loss, is itself a documented gharar concern that should not be minimized.
Maysir — Does Penpie involve gambling or speculation?
Penpie is not designed as a betting or lottery mechanism; it is a yield-boosting layer for existing PENDLE holders and liquidity providers. Its lock-based reward structure discourages short-term speculative churn. The main maysir-adjacent risk lies not in the protocol's design but in how its token trades on secondary markets, which is a separate matter from its own function.
Assessment: Maysir / Qimar (Gambling)
Score: 45.5/100
Our methodology examines 11 criteria to determine whether Penpie is a gambling instrument or a genuine economic tool.
Penpie provides a genuine service: it allows PENDLE holders to gain liquidity (via mPENDLE) and yield-boosting benefits without individually locking their tokens for two years, aggregating governance power and rewards across many users. This is a real productive function within the Pendle ecosystem rather than a zero-sum wagering mechanism. The vlPNP lock structure — with an indefinite default lock, 60-day cooldown, or a steeply penalized early exit — actively discourages rapid speculative flipping, reinforcing that the core design rewards patient participation rather than gambling-style behavior.
Against this genuine utility, DeFiLlama data shows Penpie's annualized revenue fell sharply from $8.96M to just $2.44M at a more recent snapshot, suggesting declining protocol activity that may attract short-term speculative trading around price swings rather than sustained fee-driven use. As with most DeFi governance tokens, some holders will inevitably trade PNP speculatively on secondary markets; this third-party behavior is not determinative of the protocol's own design, which remains oriented toward yield aggregation and governance rather than gambling, and should not by itself push the assessment toward impermissibility.
The Full 27-Point Screening
1. Legitimacy (4 criteria)
| Criterion | Score | Analysis |
|---|
| Team Transparency | 25/100 | The team operates under pseudonyms ("Alan," "Grimmace") and a separate source names different founders entirely, leaving identity essentially unverifiable and inconsistent across sources. |
| Fraud & Scam Risk | 35/100 | The protocol suffered a $27.3M reentrancy exploit in September 2024; while the team responded transparently and pursued legal action rather than exiting, the loss itself is a material realized risk. |
| Use Case Legitimacy | 65/100 | Penpie provides a real, adopted DeFi service (yield/governance boosting for Pendle users) with measurable TVL, not merely speculative hype. |
| Ethical Practices | 30/100 | The protocol's own design is built entirely to intermediate Pendle's interest-rate trading market (fixed/variable yield tokens), which is a core riba-adjacent mechanism rather than an unrelated haram misuse by third parties. |
Summary: Penpie is a real, adopted DeFi yield-boosting protocol run by pseudonymous founders, which suffered a serious $27M exploit in 2024 but responded with freezes and legal action rather than any indication of an exit scam.
2. Project Operations (9 criteria)
| Criterion | Score | Analysis |
|---|
| Core Protocol Business | 35/100 | The base protocol's core business is aggregating and boosting yield within an explicitly described "interest rate trading market," tying its sector classification to interest-based yield instruments. |
| Transaction Fees | 50/100 | Fees are not burned but distributed among mPENDLE holders, vlPNP holders, treasury, and a harvest-caller function, functioning as a service fee rather than outright riba extraction, though value ultimately stems from interest-rate yield. |
| Treasury Assets | 25/100 | Treasury holdings are inferred mainly from vePENDLE/PENDLE-derived revenue streams rather than a full published treasury breakdown, and this base asset is itself interest-rate-market derived. |
| Revenue Model | 25/100 | Revenue comes from boosted-yield fees and bribe income tied directly to Pendle's fixed/variable interest-rate trading market. |
| Transparency | 55/100 | Protocol documentation, fee structures, and multiple audit reports are publicly published, though the founding team itself remains anonymous. |
| Governance | 45/100 | Governance operates via on-chain vlPNP voting on proposals, but an independent audit explicitly flagged centralization risk in the vlPenpie governance contract. |
| Launch Fairness | 55/100 | The IDO excluded VC/private allocations but heavily favored existing ecosystem token holders (xGRAIL, mPENDLE, vlMGP) over an open public sale. |
| Token Distribution | 55/100 | Fixed 10M supply spread across IDO, treasuries, liquidity mining and marketing allocations is documented, though a large share sits in treasury/liquidity-mining buckets rather than broad public hands. |
| Speculation/Utility Ratio | 45/100 | The token carries real governance/fee utility, but price behavior (e.g., a 40% drop on hack news) and yield-farming-driven demand suggest a meaningful speculative component alongside utility. |
Summary: The protocol locks PENDLE into vePENDLE to boost yields and voting power for its users, distributing fees across liquidity providers, token lockers, and treasury, with a launch that favored existing ecosystem token holders over a broad public sale.
3. Financial Health (4 criteria)
| Criterion | Score | Analysis |
|---|
| Protocol Revenue | 25/100 | Protocol revenue is explicitly sourced from boosted PENDLE yield and voting bribes, both tied to interest-rate-based yield trading. |
| Financial Status | 35/100 | Annualized revenue fell sharply between reported snapshots and market capitalization is comparatively small, indicating financial instability. |
| Interest Assessment | 20/100 | The base protocol exists specifically to intermediate Pendle's fixed/variable-yield (interest rate) tokenization market, making interest-based mechanics central rather than incidental. |
| Audit Quality | 50/100 | Multiple named, dated audits exist (WatchPug, Zokyo, AstraSec, PeckShield, BlockSec, SlowMist), but the 2024 exploit exposed a critical contract that was not actually covered despite audit claims. |
Summary: Revenue is generated entirely from fees and bribes tied to Pendle's interest-rate yield-trading market, has declined significantly over time, and despite several named audits, a critical uncovered contract enabled a major hack.
4. Token Economics (5 criteria)
| Criterion | Score | Analysis |
|---|
| Token Purpose | 60/100 | PNP carries defined governance and fee-sharing utility rather than functioning as a pure meme token. |
| Governance Rights | 60/100 | vlPNP holders vote on protocol proposals and indirectly steer the platform's large vePENDLE voting power, though centralization risk was flagged. |
| Rewards Distribution | 65/100 | Rewards to lockers are variable, driven by actual vePENDLE base rewards, voting fees, and bribe income rather than a fixed rate. |
| Speculation Controls | 60/100 | The vlPNP lock-and-penalty structure (indefinite default lock, 60-day cooldown, or steep declining early-exit penalty) meaningfully discourages short-term speculative flipping. |
| Asset Backing | 30/100 | PNP's value is a claim on protocol fee/vote revenue derived from an interest-rate trading market rather than being backed by tangible or independently halal assets. |
Summary: PNP is a governance/fee-sharing utility token with variable, activity-based rewards and lock-based anti-speculation design, but its value ultimately derives from an interest-rate-trading revenue base rather than independent halal backing.
5. Staking Mechanism (5 criteria)
| Criterion | Score | Analysis |
|---|
| Mechanism Type | 65/100 | The vlPNP lock is non-custodial and its lock/cooldown/force-unlock terms are clearly documented. |
| Islamic Contract Classification | 25/100 | The reward mechanism resembles a fee-for-vote-delegation service layered on an interest-rate-derived revenue stream, leaving its Islamic contract classification unresolved and leaning toward an impermissible core. |
| Rewards Structure | 45/100 | Rewards are structurally variable and tied to real protocol activity, but the underlying revenue itself originates from interest-rate yield trading, tainting the source. |
| Documentation | 70/100 | Official docs clearly disclose lock defaults, cooldown periods, and force-unlock penalty schedules. |
| Shariah Alignment | 25/100 | A core unresolved issue persists: rewards and the underlying value proposition trace back to interest-rate-based yield trading, and the penalty-laden lock mechanism introduces additional gharar. |
Summary: Penpie offers a non-custodial vote-escrow lock (vlPNP) with clearly documented cooldown and penalty terms, but its reward source and contract structure raise an unresolved Shariah classification question due to ties to interest-based yield.
Overall Assessment: Penpie is a legitimate, functioning but yield-market-dependent DeFi protocol whose core economics are structurally intertwined with Pendle's interest-rate trading mechanisms, raising significant unresolved Shariah concerns despite genuine utility, documented audits, and non-custodial design.
Written by ThanvirFounder, Ex Director S&P Global Energy
Reviewed by Imam Omar SiddiqiShariah Scholar