​
TL;DR

  • Vault assets are held in auditable on-chain smart contracts. No custodian holds your funds.
  • Share price is derived from an independent oracle — not from operator input alone.
  • Safety mechanisms including pausability, fee caps, and a withdrawal queue are built into the contract layer.

​
Smart contract architecture

Each Quant Vault is an on-chain contract that accepts USDC deposits, mints proportional vault shares, and tracks the NAV of pooled capital. When you deposit, shares are minted to your wallet. When you withdraw, shares are burned and USDC is returned based on current share price. Vault assets are not held by Oraichain or any centralized custodian — they remain in the contract until withdrawn. Withdrawals follow a two-step queue process. Your request is recorded on-chain and fulfilled as vault liquidity becomes available. This design prevents large sudden withdrawals from disrupting active strategy positions.

​
Oracle model

Vault share price is calculated from NAV reported by an independent oracle. The oracle tracks the vault’s underlying asset value and submits reports that the contract uses to price shares. Operator control over share price is limited — the contract derives price from oracle data, not from manual operator updates. This reduces the risk of share price manipulation.

​
Safety mechanisms

Authorized operators can pause vault operations in the event of an emergency — such as a detected exploit, oracle failure, or unexpected market condition. Pausing halts deposits and withdrawals until the issue is resolved. This mechanism exists to protect user funds from propagating damage during anomalous events.
Deposit and withdrawal fees are capped at the contract level. Operators cannot set fees above the maximum defined in the contract. This prevents fee manipulation from being used to extract value from users.
Withdrawal requests are processed in a two-step queue. Your request is recorded on-chain when submitted and fulfilled when vault liquidity allows. The queue is publicly verifiable and cannot be reordered or cancelled without your authorization.

​
Agent security

Quant Agents on Lighter are wallet-native. You connect through your own wallet — no private keys are stored or transmitted to Oraichain or any third party. You control when the agent starts and stops, and you can disconnect your wallet at any time. The agent operates on your behalf through your wallet’s authorization, not through a server-side key.

​
Responsible disclosure

If you identify a security issue in any Quant Terminal contract or infrastructure, report it through the Oraichain GitHub organization at github.com/oraichain. Include a clear description of the issue and steps to reproduce. Do not publish vulnerability details publicly before they have been reviewed and addressed.