Aqua0
Security & Trust

Risks & disclosures

The main risks users and integrators should understand.

Smart contract risk

Any DeFi protocol involves smart contract risk. Even audited code can have unknown vulnerabilities.

Cross-chain risk

Cross-chain operations add additional risk surfaces, including messaging assumptions and bridge dependencies.

Market risk

Price movements, volatility, and liquidity conditions can affect execution outcomes.

Operational risk

Network congestion, chain outages, and RPC issues can delay completion or cause failures that require retry/cleanup.

Off-chain trust

Locked liquidity sits in per-asset vaults as a principal claim, not a tradeable share, and the vault itself holds the tokens.

  • Same-chain realized PnL is derived straight from on-chain settlement events, no key can move it.
  • A narrowly-bounded reporting role values capital currently deployed cross-chain, in-flight before the bridge/message finalizes. A report can move a strategy's valuation by at most 25 bps/day, capped at an immutable 500 bps ceiling, and any over-report is caught and clawed back once the real settlement lands.
  • Async withdrawal of deployed capital is bounded by an immutable 7-day maximum timeout, so a request can never be withheld indefinitely.
  • A separate role can pause/veto (but not unpause alone), and upgrades pass through a timelock delay.

See Non-custodial design for the guarantees this rests on.

No guarantees

Nothing in these docs is financial advice. Returns are not guaranteed.

On this page