Verify the report
The transaction carries the signature-verification instruction and report bytes. The oracle verifies provenance, freshness, source agreement and the market’s uncertainty band.
Verification at the roots. Separate risk chambers above. A margin engine designed around signed prices, scoped authority and transparent limits.
Explore protocol
Price, authority, custody and risk each have a defined boundary.
USDC is hard-coded as collateral. Changing collateral requires a program upgrade behind the public timelock.
Fresh reports, source agreement and published price bands shape every executable quote.
Governance changes wait 72 hours. Emergency powers can tighten risk; loosening requires the timelock.
Each family has its own liquidity and insurance accounting. LLP NAV can decrease when traders win.
Carry, session changes, corporate actions and liquidation thresholds belong in the position view.
Delegates have product permissions, spending limits and expiry. Withdrawals stay off by default.
The signed report and the user’s price bound are checked in the same transaction as the position change.
The transaction carries the signature-verification instruction and report bytes. The oracle verifies provenance, freshness, source agreement and the market’s uncertainty band.
The engine checks session eligibility, leverage, open-interest caps, account size limits and the user’s maximum or minimum fill price.
An accepted trade updates the margin ledger, its position and one market shard, then emits a fill linked to the oracle sample hash.
Includes verification for the open/close path. This is a specification target, rather than a measured performance result.
The trade carries the report and signature check, then updates the margin ledger, position and selected market shard.
The margin account’s hash selects a writable market shard. Changing the default count follows the timelock.
Mechanics and design limits follow the supplied Leveret protocol specification. Current execution limits come from the verified on-chain configuration.
lvrt_engineOwns the USDC margin ledger, position updates and funding. Price bounds and exposure limits are checked with the trade.
The service layer in the build plan pairs Rust keepers with a Bun/Hono API, Postgres and Timescale, Redis, streamed account updates, and bundled liquidation/crank submission. Oracle, trigger, corporate-action, hedge and receipt services each have a defined job.
The affected position’s margin absorbs the loss first.
A separate waterfall belongs to each bucket. Isolation limits spillover between families; it does not remove market losses. A depleted insurance fund can make its bucket reduce-only.
Leverage amplifies losses as well as gains. Maintenance margin starts at 1% for the top tier.
View the full mechanicsLeverage amplifies losses. Small caps can halt and gap past a stop. Off-hours equity references use the last close. Squared products incur carry. Twins track through perps and are not shares. Liquidity-vault NAV can go down.
Use the current market state and limits before signing. The specified circuit breaker queues exceptional realized-profit withdrawals for one hour.
Explore product risks