Nu Holdings Ltd. | Research control record

How the NU research moved through five independent challenges

A complete visual record of the clean room build, four completed repairs, five challenger reviews, the stopped fifth repair, and publication as an unaccepted draft.

Analytical acceptance: FAIL 5 challenger reviews 36 blocker findings across reviews 8 unresolved at publication

Published, but not analytically accepted

The analytical model remained a draft. Mechanical integrity, file hashes, routes, downloads, and browser rendering passed. The mandatory independent challenger did not pass. Eight material blockers remained unresolved when the user directed publication of the existing package.

4h 20m 55sFull observable operational window
3h 39m 18sClean room build to final verification
2h 24m 11sCompleted author and repair process time
49m 40sFive independent challenger reviews

The complete author and challenger loop

Each author version was treated as a candidate, not a conclusion. The next challenger independently reconstructed the package and attempted to falsify it.

Author build Repair iteration Independent challenge Publication and verification
A0
08:49:55 to 09:21:49 UTC31m 53s

Initial clean room author build

Fresh sources, business model, accounting bridges, operating model, residual income valuation, workbook, PDF, dashboard, archives, and visual QA.

C1
5m 10s5 blockersOverlapped author visual QA

Challenger 1

This review began before the author window closed because it overlapped the final visual QA. Method fit survived, but the valuation lacked operating, capital, terminal, discount rate, and dilution support. FAIL

R1
18m 40s

Repair iteration 1

Added a longer residual income transition, improved reverse valuation, discount rate sourcing, dilution detail, scenarios, and sensitivity work.

C2
11m 18s6 blockers

Challenger 2

Headline arithmetic improved. Hard coded targets, incompatible build schemas, weak credit and capital bridges, bad sensitivity identity, dilution, peers, and stale fields remained. FAIL

R2
35m 40s

Repair iteration 2

Major deterministic rebuild. The author regenerated the engine, formula workbook, 2,552 formula caches, memo, PDF, dashboard, sensitivities, manifests, and archives.

C3
9m 42s9 blockers

Challenger 3

The formulas existed, but first year calibration, fee economics, capital references, terminal convergence, exact cost of equity, sensitivities, peers, and frozen source consistency failed. FAIL

R3
35m 32s

Repair iteration 3

Recalibrated 2027, removed the fee plug, extended capital schedules, linked exact cost of equity, rebuilt dilution, sensitivity, peer, terminal, and decision outputs.

C4
9m 25s8 blockers

Challenger 4

Several prior repairs survived. Balance sheet gaps, circular issuance and dividends, terminal timing, sensitivity transmission, claim ownership, peer class pricing, and false closure remained. FAIL

R4
22m 27s

Repair iteration 4

Added balanced statements, parent liquidity, issuance policy, dividend suspension, broader sensitivities, peer class calculations, deterministic rebuilds, and archive closure.

C5
14m 05s8 blockers

Challenger 5

The longest review found incorrect reverse reconstruction, a broken identity control, invalid future claim valuation, unsupported mature normalization, residual scope bridge, funding driver issues, stale peer dates, and analytically false closure. FAIL

R5
8m 51s maximumStopped

Repair iteration 5 was started, then abandoned

The repair process began, but was stopped when the instruction changed to publish the existing package as it was. No fifth repaired package or PASS was produced.

P
10m 31sLive with FAIL warning

Published, analytically unaccepted

The frozen draft, final challenger FAIL, warning status, downloads, hashes, route, browser layout, and unrelated CBRS route were verified. The ticker was excluded from the accepted scorecard.

What changed in each repair iteration

A repair was a package rebuild. Changes propagated through the controlled data, model engine, workbook, PDF, dashboard, manifests, snapshots, checksums, and archives.

Repair 1, improve auditability
  • Added a fourteen year residual income transition and five year normalization stage.
  • Improved reverse valuation, payout transition, discount rate sourcing, dilution disclosure, and scenarios.
  • Preserved Challenger 1 FAIL as historical evidence.
Repair 2, deterministic technical rebuild
  • Rebuilt frozen company data and the package generator.
  • Created formula driven operating, capital, valuation, dilution, and sensitivity schedules.
  • Recalculated and audited 2,552 workbook formulas and caches.
  • Ran deterministic, canonical, fixture, archive, and visual checks.
Repair 3, economic calibration
  • Calibrated 2027 to H1 2026 and replaced the residual fee plug.
  • Extended country capital schedules through 2040.
  • Linked the exact 13.129576834% nominal USD cost of equity.
  • Reworked dilution, terminal timing, peer calculations, scenarios, and sensitivities.
Repair 4, balance sheet and financing
  • Added balanced annual statements and broader funding mechanics.
  • Added country capital, parent liquidity, issuance, and dividend suspension rules.
  • Expanded sensitivity grids and class specific peer calculations.
  • Rebuilt all mutable surfaces and closed byte integrity, but not analytical acceptance.
Repair 5, not completed

The fifth repair was launched after Challenger 5, but no repaired package was produced. The process stopped with exit code 130 and transitioned to publication preflight.

Every blocker raised by the five challengers

The labels below summarize all 36 blocker records. Open each review for the complete set.

Challenger 1, 5 blockers, FAIL

Numerical execution was partly reproducible, but the principal valuation artifact was not independently auditable.

  1. Explicit multistage valuation and auditabilityTargets and reverse valuation were hard coded. The workbook omitted the full annual residual income and terminal schedule.
  2. Operating, credit, and regulatory capital bridgesForecast ROE lacked customer, ARPAC, credit, funding, ECL, expense, tax, RWA, and capital support.
  3. Terminal assumptions and transitionExplicit payout and terminal payout were economically inconsistent and lacked a transition.
  4. Discount rate and country riskThe 14% sum worked, but its dated inputs, geographic weights, currency basis, and double counting controls were unsupported.
  5. Dilution and per share book valuePoint in time equity was divided by a period average diluted EPS denominator.
Challenger 2, 6 blockers, FAIL

The repair improved the economics, but targets, build controls, and several core bridges remained unreliable.

  1. Valuation artifact auditability and reproducibilityTargets remained hard coded, formula caches were missing, and the builder and data schemas were incompatible.
  2. Operating, credit, and regulatory capital bridgesA net margin plug replaced explicit credit, funding, ECL, tax, and country capital mechanics.
  3. Sensitivity integrityThe central sensitivity cell did not equal the base valuation and the table was hard coded.
  4. Point in time dilutionThe repair mixed dates, treasury shares, options, and antidilutive instruments.
  5. Package consistency and accounting controlExpected return, reverse ROE, sensitivity, share count, and BVPS fields contradicted each other.
  6. Peer cross check and scenario probability supportPeers were unnormalized Yahoo fields and 25/50/25 probabilities lacked evidence based calibration.
Challenger 3, 9 blockers, FAIL

Formula presence and several mathematical identities passed. Economic calibration and cross surface control did not.

  1. Operating and credit bridge calibration2027 produced implausible fee and earnings jumps. Fee income remained a balancing item.
  2. Country capital, fungibility, and payout capacityCapital references pointed two years ahead, stopped in 2035, and did not transmit injections into owner value.
  3. Terminal transition and dividend cross check2040 did not reach terminal economics and the DDM used an extra growth factor.
  4. Nominal USD cost of equity and country risk controlThe exact sourced 13.129577% result was not linked into the central model.
  5. June 30 dilution completenessRSUs, options, acquisition awards, and antidilutive ranges lacked a complete point in time bridge.
  6. Sensitivity integrity and completenessPayout and country risk were missing. Other shocks did not rerun the complete model.
  7. Filing normalized peer cross checkDisplayed multiples were secondary fields rather than calculations from filed shares, owner earnings, equity, FX, and ADR terms.
  8. Decision tree calibration and frozen source consistencyTrigger thresholds differed across the frozen data and PDF, while scenarios had identical first year assumptions.
  9. Single frozen source and package surface consistencyHard coded PDF capital values contradicted primary filings and the controlled data.
Challenger 4, 8 blockers, FAIL

Scenario calibration, capital horizon, exact cost of equity, and trigger consistency improved. Deeper ownership and transmission problems remained.

  1. Operating calibration and full balance sheet bridgeForecast assets did not reconcile with liabilities and equity. Several filed anchors were unused.
  2. Country capital, payout capacity, issuance, and terminal fungibilityIssuance could fund desired dividends, creating a circular capital constraint. No 2041 recurring capital bridge existed.
  3. Terminal convergence and continuing value timingFrozen terminal payouts were overwritten and continuing values retained incorrect timing.
  4. Country risk sensitivity and nominal USD cost of equity controlOperator precedence broke the zero shock identity.
  5. Diluted claim range and per share transmissionFuture financing claims were applied inconsistently across per share ranges.
  6. Sensitivity integrity, full reruns, and central identitySeveral tables were partial overlays. Country buffer and remittance shocks did not transmit.
  7. Filed peer trailing multiples and security basisOne preferred ADS price was applied to separately traded common and preferred classes.
  8. Single frozen source, cross surface assertions, and closure truthfulnessThe manifest and closure record claimed controls that workbook inspection disproved.
Challenger 5, 8 blockers, final FAIL

Mechanical balance, source anchors, exact cost of equity, checksums, and archive integrity passed. Analytical acceptance still failed.

  1. Reverse valuation reconstruction was wrongThe workbook discounted the wrong terminal component and reconstructed $53.92 instead of $15.17.
  2. No-transaction identity failed to activateThe formula tested issue price instead of transaction quantity, so a cached zero proved nothing.
  3. Future issuance and current shareholder ownershipFuture share counts were discounted like cash flows. Current owner value was not allocated by issuance vintage.
  4. Mature ROE convergence and shocked terminal statesAn unsupported income normalization plug created terminal ROE, and terminal shocks did not converge through 2040.
  5. ARPAC to IFRS bridgeThe scope bridge was a residual equal to IFRS revenue minus managerial revenue, not independently forecast components.
  6. Balance sheet drivers and funding baseDrivers were dead or mislabeled and the $12 billion other funding anchor did not reconcile to filed liabilities.
  7. Peer ADR and local market evidencePrices were not refreshed to one date and complete ADR, FX, implied local price, and tolerance checks were absent.
  8. Analytically false closureByte integrity passed, but closure records said PASS while the analytical verifier and challenger still failed.

Chronological timing record

All times are wall clock. UTC is shown first. Singapore time is UTC plus eight hours. Durations use the higher precision source records, while visible start and end times are displayed to the nearest second.

ProcessUTCSingaporeElapsedOutcome
Clean room setup08:48:03 to 08:49:4116:48:03 to 16:49:411m 38sWorkspace ready
Initial author08:49:55 to 09:21:4916:49:55 to 17:21:4931m 53sFirst package
Challenger 109:15:20 to 09:20:3117:15:20 to 17:20:315m 10sFAIL, overlapped visual QA
Repair 109:24:59 to 09:43:3817:24:59 to 17:43:3818m 40sRepaired candidate
Challenger 209:43:38 to 09:54:5617:43:38 to 17:54:5611m 18sFAIL, 6 blockers
Repair 209:59:34 to 10:35:1317:59:34 to 18:35:1335m 40sDeterministic rebuild
Challenger 310:35:37 to 10:45:1818:35:37 to 18:45:189m 42sFAIL, 9 blockers
Repair 310:46:03 to 11:21:3518:46:03 to 19:21:3535m 32sEconomic calibration
Challenger 411:21:59 to 11:31:2419:21:59 to 19:31:249m 25sFAIL, 8 blockers
Repair 411:31:51 to 11:54:1819:31:51 to 19:54:1822m 27sBalance sheet and financing
Challenger 511:55:04 to 12:09:0919:55:04 to 20:09:0914m 05sFinal FAIL, 8 blockers
Repair 5 and transition12:09:52 to no later than 12:18:4220:09:52 to no later than 20:18:428m 51s maximumStopped
Publication and verification12:18:42 to 12:29:1320:18:42 to 20:29:1310m 31sLive, labeled unaccepted

Why a mechanical PASS did not become an analytical PASS

Mechanical integrity

  • Files open and formulas cache
  • Statements balance
  • Builds reproduce
  • Checksums and ZIPs verify

Analytical acceptance

  • Economics are supported
  • Ownership is correct
  • Terminal state converges
  • Independent challenger has zero blockers

Publication completion

  • Warning is prominent
  • Final FAIL is preserved
  • Downloads and routes work
  • No accepted scorecard inclusion

Decision rule: publication as an unaccepted draft did not convert the model into an accepted investment conclusion.

Research and control files