bowlineVerify it yourself
Everything on this page is either readable on-chain right now or stated as a plain limitation. A protocol that hides its risks is telling you something.
| Contract | Address | |
|---|---|---|
| LoanManager | 0x11875Ac731eF49A8AD22287Ad96A386c69BE4b0E | explorer ↗ |
| BowlinePool | 0xE2caEa0944cbBdf72Ef67d0F411FE813000F53F2 | explorer ↗ |
| CollateralVault | 0xA8508671A3867326a8148A5837Ca178b3863ff2C | explorer ↗ |
| TokenRegistry | 0x811F0123E2715B03970A195F0E8ecf7E3AB254e1 | explorer ↗ |
| USDG (Paxos) | 0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168 | explorer ↗ |
Live pool assets right now: —, read from the chain by your own browser, not our server.
Timelocked upgrades
Contract upgrades, the only power that could reach custody, queue publicly through a timelock before they execute. Bounded operations are instant, but nothing that touches funds ships in secret.
Guardian can only stop NEW activity
The pause role blocks new deposits and new borrows, nothing else. Repayments, withdrawals, and collateral returns cannot be paused by anyone. That rule is enforced in the contract and covered by tests.
Bounded parameters
Tier LTVs can move at most ±5 points from genesis, fees ±0.5 points, keeper bounty ≤20%. The bounds are hard-coded; governance cannot vote its way past them.
Time-only liquidation
The settlement function reverts for any loan before its deadline, at any collateral price. There is no price-liquidation code path to exploit, misconfigure, or oracle-attack.
No collateral escape
Collateral leaves the vault two ways only: full repayment (to you) or post-deadline settlement (waterfall). Fee-on-transfer tokens are rejected at the door.
Solvency accounting
Pool cash plus outstanding principal always equals total assets. Fees arrive as cash; shortfalls are realized openly as share-price events, never hidden.
Oracle discipline
Borrows demand fresh prices (26h max age); settlements tolerate the weekend (72h) so Monday can still clear. Spot more than 15% above TWAP blocks new borrows.
Issuer powers on collateral
Robinhood stock tokens are issuer-pausable and issuer-burnable; USDG is Paxos-freezable. Every protocol on this chain carries this risk. Our mitigations: anyone can poke the contract to extend deadlines while a token is paused (up to 30 days), and per-token caps bound the damage. We can’t remove it, so we tell you about it instead.
Young protocol, young chain
The contracts carry a full fuzz and invariant test suite, and pool caps start conservative while the protocol is young. Don’t deposit money you can’t afford to lose, here or anywhere on a week-old chain.