Synthetic assets are tokens designed to mirror the price of an underlying asset, such as a stock, currency, or commodity, while perpetual contracts let traders hold directional exposure without an expiry date. Synths aim to reproduce asset exposure, whereas perpetuals are mainly a leveraged trading instrument. Both depend on pricing, collateral, and sound market mechanics.
Why This Matters for Security Teams
Synthetic assets and perpetual contracts are not just market design choices. They shape how value is represented, how collateral is managed, and how liquidation logic behaves under stress. In DeFi, that makes them security-relevant because pricing failures, oracle manipulation, and smart contract defects can turn a trading product into a systemic risk event. The control problem is not only financial soundness, but also integrity of the code, feeds, and governance that keep the product honest.
For security and risk teams, the key distinction is that synthetic assets are meant to track the value of an external reference asset, while perpetual contracts are built to give ongoing leveraged exposure without expiry. That difference affects threat modeling. Synths depend heavily on collateral ratios, minting rules, and oracle accuracy. Perpetuals depend more on funding mechanisms, margin management, and liquidation engines. A weakness in either design can create unfair pricing, bad debt, or cascading liquidations.
Current guidance suggests treating both as control-intensive financial systems, not just DeFi primitives. NIST SP 800-53 Rev 5 Security and Privacy Controls provides a useful baseline for integrity, access control, auditability, and incident response expectations, even when the implementation is decentralized. In practice, many failures are discovered only after an oracle deviation, liquidation cascade, or governance exploit has already distorted the market.
How It Works in Practice
Synthetic assets usually rely on a protocol that issues a token representing exposure to a reference asset such as gold, a foreign currency, or an equity index. The protocol must maintain a reliable method for pricing the reference, enforcing collateral requirements, and settling redemptions or burns. The core risk is that the token may continue to trade even when the backing logic, oracle input, or governance assumptions become unreliable.
Perpetual contracts work differently. They are derivative positions with no expiry date, so the position stays open as long as margin requirements are met. To keep the contract aligned with the market, protocols typically use funding payments, mark prices, and liquidation rules. The trader is not trying to own a synthetic version of the asset, but rather to maintain continuous long or short exposure.
- Synths are closer to tokenized exposure; perps are closer to leveraged trading infrastructure.
- Synths usually depend on collateralization and issuance rules; perps depend on margin, funding, and liquidation logic.
- Both require robust oracle design, but synthetics are often more sensitive to reference-asset accuracy.
- Perps often introduce sharper operational risk during volatility because forced liquidations can accelerate losses.
For practitioners, the important security question is where trust sits. If the protocol depends on a small set of signers, a weak oracle path, or upgradeable contracts without strong governance controls, then the product can be manipulated even if the surface description looks sound. Where available, independent review should cover code, market integrity assumptions, and emergency controls, not just the user-facing contract interface. These controls tend to break down when leverage, thin liquidity, and delayed oracle updates coincide because liquidation logic can amplify a small pricing error into a platform-wide failure.
Common Variations and Edge Cases
Tighter collateral and liquidation controls often increase friction for traders, requiring organisations to balance market efficiency against protocol safety. That tradeoff is especially visible in DeFi products that try to support both synthetic exposure and perpetual trading in the same stack.
There is no universal standard for how much oracle redundancy is enough, or how much decentralisation meaningfully reduces manipulation risk. Best practice is evolving, especially where protocols support real-world asset references, cross-chain collateral, or governance-controlled parameter changes. Some synthetic systems allow direct mint and burn against collateral, while others use debt pools or shared backstops. Some perpetual markets settle through on-chain order books, while others use automated market maker structures with funding adjustments.
Edge cases matter because the failure mode changes with the design. A synthetic asset can look stable until the reference feed is stale or wrong. A perpetual contract can appear liquid until funding spikes or the mark price diverges from the underlying market. In both cases, governance access is part of the attack surface. If parameter changes, pause functions, or oracle overrides are concentrated in too few hands, the technical design may be sound while the operational control model remains weak.
For DeFi teams, the practical distinction is simple: synths are about faithful asset replication, while perps are about durable directional exposure. The controls around them should reflect that difference rather than treating both as generic tokens.
Standards & Framework Alignment
This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.
OWASP Agentic AI Top 10 and MITRE ATLAS address the attack surface, NIST CSF 2.0 and NIST AI RMF set the technical controls, and EU Cyber Resilience Act define the regulatory obligations.
| Framework | Control / Reference | Relevance |
|---|---|---|
| NIST CSF 2.0 | PR.AC-4 | Collateral, margin, and governance roles require least-privilege access control. |
| OWASP Agentic AI Top 10 | Automation and decision logic can be abused if oracle or liquidation agents are manipulated. | |
| NIST AI RMF | Pricing, oracle, and model-like decision risks map to AI risk governance patterns. | |
| MITRE ATLAS | AML.TA0001 | Adversarial manipulation of inputs and pricing resembles attack paths against automated decisioning. |
| EU Cyber Resilience Act | Software integrity and secure update handling are central to DeFi protocol resilience. |
Threat model manipulation of feeds, parameters, and execution logic as primary adversarial paths.
Related resources from NHI Mgmt Group
- What is the difference between perpetual futures and traditional futures contracts?
- What is the difference between identity theft and synthetic identity fraud?
- What is the difference between managing certificates separately and managing them as identity assets?
- What is the difference between a registry and an inventory for AI assets?
Deepen Your Knowledge
Reviewed and updated by the NHIMG editorial team on September 1, 2026.
NHI Mgmt Group — the #1 independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org