[ARFC] Deploy Aave v3 on BOB

[ARFC] Deploy Aave v3 on BOB

Author: ACI (Aave Chan Initiative)

Date: 2025-01-07

Proposal has been updated accordingly to add oUSDT, solvBTC and xsolvBTC as assets merging respective proposals to include in this proposal. 2025-07-09

Simple Summary:

This ARFC proposes the deployment of an Aave V3 Pool on BOB, a hybrid L2 that strives to combine the best of Bitcoin and Ethereum.

Summary

BOB (“Build on Bitcoin”) is a Hybrid Layer-2 blockchain that combines the best of Bitcoin and Ethereum to create the home for Bitcoin DeFi. The unique Hybrid L2 model merges the strengths of both ecosystems—Bitcoin’s security and dormant capital, with Ethereum’s DeFi innovation and versatility. As a Hybrid L2 BOB will inherit security from Bitcoin, as the most secure and decentralized network. Bitcoin security is then used to create trust-minimized bridges to Bitcoin (via BitVM2), Ethereum, and eventually other L1s. As a result, the Hybrid L2 does not need to rely on third-party bridges for interoperability, concentrating liquidity around Bitcoin instead of fragmenting it across chains.

BOB’s mainnet Phase 1 has been live since May 2024, bootstrapped as an ETH L2 and member of the OP Superchain with an ecosystem of 100+ projects live or building (incl. Uniswap, Solv, Sovryn etc.). BOB has successfully captured the growing interest in Bitcoin staking and yield-bearing assets, achieving ∽$250m in DeFi TVL and 320k unique users since launch and growing. BOB supports decentralized tBTC as well as institutional wBTC, FBTC and SolvBTC as BTC bridges (more soon), as well as numerous Bitcoin LSTs including SolvBTC.BBN, Lombard LBTC, UniBTC and PumpBTC (more soon). The novel BOB Stake product allows holders to deploy BTC into any BTC DeFi position with just 1 Bitcoin transaction (via intents) and has been used by 28k users.

BOB is an active contributor to BitVM (co-founder Alexei is one of the co-authors of the BitVM2 and BitVM Bridge technical paper, the design currently being implemented on the official open-source repository). As of today, BitVM is the only known solution that can achieve trust-minimized and arguably “non-custodial” Bitcoin bridging and unlock billions of USD in dormant BTC liquidity. BOB mainnet Phase 2 which introduces Bitcoin finality and the trust-minimized BitVM bridge will be rolling out in Q1 2025.

Reasons for deployment

  1. First mover in Bitcoin DeFi and BTC LSTs
    1. With a deployment on BOB, Aave can solidify its position as the leading marketplace for BTC loans, and capture the growing BTC LST market. Already $6bn of BTC have been staked within months of Babylon launch. Drawing parallels to the success of ETH LSTs (46bn), we anticipate a 200bn+ BTC staking market in the next 3-5 years given Bitcoin’s market size.
    2. Currently $4bn of wBTC are deployed into Aave without generating any interest. By allowing users to build up leveraged BTC LST positions, we confidently estimate Aave can generate 3-5% APY for wBTC holders. This could result in up to $250m in monthly borrowing fees, not accounting for additional liquidation and flash loan fees.
    3. BOB and Babylon are strategic partners: as a Bitcoin-Secured Network, BOB’s network fees contribute to the rewards of BTC stakers. This creates a positive reinforcement loop: the more BTC LST liquidity on BOB, the more DeFi activity, the more fees accrue to BTC stakers. This encourages more BTC to be staked, which brings more DeFi activity, and the flywheel continues.
    4. All major Bitcoin LSTs are already supported on BOB: SolvBTC, Lombard LBTC, UniBTC, PumpBTC with 200m+ deployed, and more integrations on the way. This makes BOB the best place for BTC LST DeFi.
  2. Trust-minimized BTC bridges
    1. BOB is developing a trustless BitVM-based BTC bridge, gradually rolling out from Q1 2025 onward.
    2. BOB has been actively working with tBTC since May 2024, becoming one of the largest L2s in tBTC on-chain DeFi liquidity (2nd only to Base).
    3. This way BOB covers the 2 possible approaches to trust-minimized BTC bridging:
      1. Best today: TSS/decentralized multisig via tBTC (n-of-m honest majority). Battletested 2+ years with 500m in TVL.
      2. Best in the future: Fraud-proof based via BitVM (1-of-n, existential honesty like native ETH L2 bridges)
  3. Aave as backend for 5m+ retail BTC users w. 1-click deposits
    1. BOB allows users to deposit BTC into Aave and borrow against with just 1 BTC transaction, solving Bitcoin’s long-standing DeFi UX problem. The underlying technology is the first-ever instance of Bitcoin intents.
    2. BOB Stake, a 1-click BTC staking SDK built with Bitcoin intents, has been used by 28k users and is currently being integrated by StakingRewards.com, Xverse wallet, Everstake, Pell and others - soon offering 1-click DeFi access to 5m+ BTC users.
    3. BOB will integrate Aave such that BTC holders can supply BTC, borrow against BTC or run strategies with just 1 BTC transaction from all major BTC wallets. This will help position Aave as the go-to lending market for the Bitcoin community.
  4. Access to Institutional BTC liquidity
    1. While trust-minimized BTC bridges are the future of Bitcoin DeFi, their adoption will likely take at least another 2-3 years given the technical risks associated with new bridge technologies (feedback collected from over 50+ BTC whales and institutional LPs). BitVM is the perceived future and there is a lot of interest in its success. However, until BitVM is live on mainnet and sufficiently battle-tested, the majority of BTC liquidity prefers to use institutional custody solutions.
    2. BOB already supports native minting of FBTC, SolvBTC, and BTC LSTs such as SolvBTC.BBN, Lombard LBTC, uniBTC and PumpBTC. wBTC is supported via ETH, with native minting expected in Q1 via LayerZero
    3. Together with existing (Cobo) and upcoming (e.g. Fireblocks, …) institutional custody integrations, BOB is best positioned to capture the growing institutional interest in BTC DeFi.
  5. Best-in-class liquidity onramps
    1. Trustless access to ETH and ERC20s via native L2 bridge (OP stack)
    2. Native support for USDT and USDC.e via Ethereum
    3. CCIP support for fast on/off-ramps
    4. Direct deposits from CEXes going live Q4 2024
  6. Support and growth of GHO in BOB’s DeFi ecosystem
    1. BOB is keen to support and grow GHO liquidity as parts of its DeFi liquidity campaigns. This will serve to position GHO as one of the main decentralized stablecoins borrowed / minted against BTC - taking advantage of Bitcoin’s validated PMF as the best collateral asset in DeFi.
  7. Liquidity Provision
    1. BOB boasts a growing DeFi ecosystem: $350m on-chain deposits (source: Dune) of which $250m are deployed in DeFi across Tier-1 protocols (source: DeFiLlama). Notably, BOB has grown to the #5 Uniswap v3 market in just 2 months (source: DeFiLlama)
    2. BOB has a conservative estimate of $200m+ in liquidity commitments for Aave across wrapped BTC and BTC LST assets.
    3. BOB is a OP Superchain member and received a 750k OP grant to boost user activity and DeFi
    4. BOB is ready to support the Aave deployment via a liquidity program to ensure successful bootstrapping targeting $125m in TVL of wrapped BTC assets, resulting in a total market size of $250m taking into account e-mode and BTC LST markets. BOB has also received commitments from selected LST projects to launch or extend already running liquidity programs to assist with bootstrapping.
    5. Exact liquidity program details can be determined in the next phase of the deployment process.

Technical Feasibility

  1. Integration. BOB is an OP stack chain with 2 second block times and cents for fees. The chain is operated in collaboration with Conduit.In terms of developer tooling and available infrastructure, BOB matches the best in class standards of Optimism and Base. BOB currently uses ETH as fee asset during bootstrapping for compatibility, with BTC support being added via account abstraction and eventually as native fee asset as well. Since Aave is already deployed on Optimism and Base, the deployment to BOB is expected to be straightforward.
  2. Price feeds. Chainlink is a strategic partner of BOB and CCIP is going live in December 2024. BOB will ensure ChainLink price feeds are available at the time of Aave deployment.
  3. Technical support. BOB Foundation will provide all technical resources needed to support Aave’s technical team during deployment and maintenance.

Deployment Plan

  1. Phase 1: Initial Discussion
    • Gather community feedback through this TEMP CHECK.
  2. Phase 2: Detailed Proposal
    • If the TEMP CHECK indicates positive support, submit a detailed ARFC (Aave Request for Comment) outlining the technical, economic, and security aspects of the integration.
  3. Phase 3: Implementation and Monitoring
    • Upon eventual approval, deploy Aave V3 on BOB and monitor the integration closely to address any issues and ensure stability.

Risks and Mitigations

  1. Technical Challenges:
    • BOB will work closely with Aave’s developers and service providers (such as BGD and ACI) to address any technical challenges during integration.
  2. Security Risks:
    • BOB is an OP Stack chain and Superchain member. The L2 is operated in collaboration with Conduit. BOB will continue working closely with OP Labs and Conduit to ensure secure operation of the OP stack L2. All privileged roles are tracked transparently here.
    • In addition, BOB is currently onboarding real-time threat detection partners (provider selection ongoing).
    • BOB follows security best practices, auditing every product launch and future chain-level upgrades (audit reports), while also operating a bug bounty program.
    • This is in addition to the proposal’s review by Aave’s risk managers, Chaos Labs and LlamaRisk.
  3. Community Adoption:
    • BOB will engage with the Aave community throughout the process to ensure alignment and support. BOB’s community of Bitcoin builders and enthusiasts counts over 300k members across various channels.

Specification

Risk Parameters will be provided by Risk Service Providers and ARFC will be updated accordingly.

Asset Supply on Bob Market Cap on Bob Volume Liquidity Bob Explorer
tBTC 71 $6.89M $15.61K $3.37M URL
WBTC 415 $38.52M $752.82K $5.37M URL
LBTC 28 $2.58M $287.50K $2.06M URL
oUSDT
solvBTC
xsolvBTC

Useufl Links

Disclaimer

ACI (Aave Chan Initiative) is not directly affiliated with BOB Foundation and did not receive compensation related to this proposal.

Stani Kulechov, co-founder of Aave, is an early angel investor of BOB and advised on some technical parts of this proposal but did not receive any compensation related to this proposal.

Next Steps

  1. Publish an ARFC to continue gathering community and Service Providers feedback.
  2. If the ARFC snapshot outcome is YAE, publish an AIP vote for final confirmation and enforcement of the proposal.

Copyright

Copyright and related rights waived under CC0.

1 Like

You mentioned the same thing in the previous phase. When will the exact liquidity program be determined?

Overview

Chaos Labs supports the deployment of an Aave instance on the Bob L2 network, contingent upon the availability of Chainlink oracles. This report provides an overview of Bob’s technical aspects and associated risks, along with our recommendations for initial parameters and asset listings.

Technical Architecture

The Hybrid L2 introduced by Bob is a Bitcoin Layer 2 solution designed to enable secure and scalable DeFi on Bitcoin. The hybrid L2 achieved three main properties. First, it leverages Bitcoin’s security through optimistic verification and fault proofs, utilizing BitVM—a mechanism that allows arbitrary programs to execute on Bitcoin in an optimistic manner. Second, it incorporates a trust-minimized BTC bridge, allowing users to securely deposit and withdraw BTC to and from Bob, provided Bitcoin remains secure and at least one honest node can initiate on-chain dispute resolution.

Finally, it includes a trust-minimized Ethereum bridge by combining the design of L1/L2 optimistic Ethereum rollups with a Bitcoin light client (a lightweight node that verifies transactions using minimal data instead of downloading the entire data of underlying blockchain) encoded as a smart contract, ensuring the correctness of L2 withdrawals based on Bitcoin finality.

Bob Architecture

Bob’s roadmap involves three phases: (1) starting as an Ethereum L2 using the OP Stack with Ethereum-native and third-party Bitcoin bridges, (2) introducing Bitcoin “soft” finality, where Bitcoin finality protocol participants validate the Bob chain state to enable a trust-minimized Bitcoin bridge and faster Ethereum withdrawals, and (3) achieving full Bitcoin security by leveraging Bitcoin’s mainchain for data availability and BitVM for optimistic verification, while addressing economic challenges to keep fees competitive with other L2s.

Ecosystem and Market

Bob’s TVL has demonstrated consistent growth since its inception, reaching a peak of $264 million in late November. Despite recent fluctuations, Bob’s TVL has generally remained stable, consistently exceeding $200 million. As of this writing, the TVL stands at $219 million.

Bob TVL; Source: DefiLlama

The largest protocol on Bob is Avalon Finance, with $126M of assets deposited. SolvBTC.bbn accounts for $97.5M of this; the other assets listed are SolvBTC, WBTC, and tBTC. Total borrowing is minimal, currently at just $7M. The second largest protocol is Bedrock, which offers uniBTC, which users can receive by staking FBTC or WBTC. The only other protocols above $10M TVL are Uniswap V3 and Pell Network; the majority of Pell’s TVL on Bob comes from restaked uniBTC ($19M).

The number of contracts on Bob has been growing steadily. As of this writing, approximately 1,700 verified contracts are deployed on the platform.

Bob Number of Verified Contracts; Source: Bob Statistic

DEXs

The presence of sufficient DEXs with consistent liquidity is crucial to ensuring the efficient liquidation of a new Aave instance. In the case of Bob, there are currently two major DEXs providing liquidity.

  • Uniswap V3
    • TVL: $37.68M
    • 7-day Cumulative Volume: $139.8M
  • Sovryn DEX
    • TVL: $7.17M

Tokens

As initial assets within the Bob instance, we recommend a strict list of assets that were extensively covered by the Aave Risk Providers on multiple chains. The selection aims to provide basic functionality for the new instance, with any additions and successive listings being proposed and approved through standard governance procedures.

For example, as discussed above, solvBTC.BBN has a significant supply on Bob (current supply of 1,504), positioning it as a potential top asset. However, given its unique risk profile it is preferable to consider listing this and other assets through the usual governance process.

The total supply and liquidity of stablecoins and WETH on Bob are currently limited, so we do not recommend listing any stablecoin or WETH at this time.

Chaos Labs proposes the following assets for the initial listing on the Bob instance:

Asset Supply on Bob Market Cap on Bob Volume Liquidity Bob Explorer
tBTC 71 $6.89M $15.61K $3.37M URL
WBTC 415 $38.52M $752.82K $5.37M URL
LBTC 28 $2.58M $287.50K $2.06M URL

Oracles

Chainlink Data Feeds are currently unavailable on Bob. Therefore, we recommend waiting for their deployment before proceeding with the deployment of Aave on Bob to ensure accurate asset pricing.

Listing Parameters

As Bob is still in its early stages, the proposed assets have limited supply and liquidity on the chain. Therefore, we recommend adopting slightly more conservative parameters at this stage. We will refer to the current parameters of these assets in existing Aave markets and apply conservative adjustments. Pricing mechanisms should be aligned with existing listings of each asset.

Supply and Borrow Caps

In line with Chaos Labs’ methodology for establishing initial supply caps, we recommend setting the supply cap at 2x the liquidity available under a price impact equivalent to the Liquidation Penalty. For borrow caps, we suggest setting them slightly above the UOptimal for each asset, providing room to accommodate potential future surges in demand.

Additionally, we recommend ensuring that the supply cap for the proposed assets does not exceed 75% of their total supply on Bob.

E-Mode

Because the proposed assets in this proposal are all BTC-related and have a considerable amount of liquidity, Chaos Labs recommends the creation of a BTC-correlated E-Mode. This approach can help attract more users to Aave, especially given the growth of the BTC LST market.

We recommend creating a BTC-Correlated E-Mode, designating LBTC as the sole collateral asset within this configuration, while setting all other assets as borrowable only.

Specification

Parameters are to be provided after input from @LlamaRisk.

Disclaimer

Chaos Labs has not been compensated by any third party for publishing this recommendation.

Copyright

Copyright and related rights waived via CC0

3 Likes

Summary

Based on our comprehensive analysis of BOB network, we have identified several promising aspects of its ecosystem, particularly its integration with Bitcoin and robust technical infrastructure. However, the ecosystem is still at a very early stage - currently in Phase 1 of its development roadmap - as evidenced by its very low stablecoin TVL (1.2% of total TVL). This significantly undermines its stablecoin borrowing use case, and also creates substantial challenges for liquidators who need to atomically sell BTC-like collateral for stablecoins.

As an optimistic rollup built on the OP stack, BOB benefits from robust security features, including multiple audits and a $250k bug bounty program. But critical security concerns remain: the fraud-proof system is not public, network operations remain centralized, and there is no timelock mechanism to restrict critical contract upgrades. These security assurances fall short compared to other OP chains like Base or Optimism mainnet.

The potential deployment of GHO on BOB presents a unique opportunity to establish Aave as the leading stablecoin issuer for BTC-backed borrowing. However, given the current security and centralization concerns, we recommend deferring GHO facilitator deployment until these fundamental issues are addressed.

BOB hosts a significant bridged BTC TVL of $250M, with untapped Bitcoin liquidity offering substantial growth potential. Accordingly, we support @ChaosLabs’ recommendation to onboard tBTC, WBTC, and LBTC, alongside a BTC-correlated E-mode where LBTC serves as the sole collateral. Since LBTC is not yet yield-bearing, this would primarily enable additional point farming through leveraged-looping. SolvBTC.BNN, a yield-bearing BTC derivative, stands out as the next strong candidate for onboarding as collateral but would require a separate risk assessment.

BOB Network Qualification

1. Network Fundamental Characteristics

1.1 Network Overview

Architecture

As detailed in the roadmap, the launch will occur in three phases. Phase 1, now completed, involved establishing BOB as an Ethereum L2 using the OP Stack based on the optimistic rollup architecture. An optimistic rollup relies on three key components: the Sequencer, the Proposer, and the Challenger. The SequencerSequencer manages a mempool of pending transactions, determines their order for the next block, and can potentially extract MEV from users. The Proposer advances the EVM state by processing the next set of transactions and submitting updated state roots to the DA layer (in BOB’s case, utilizing Ethereum EIP-4844 blobs). Lastly, the Challenger safeguards funds by disputing invalid state roots in the rollup contract on Ethereum, ensuring deposits cannot be stolen.


Generalized rollup architecture. Source: Expresso Network documentation, January 8th, 2025

In Phase 2, BOB will implement a BitVM bridge to Bitcoin, a trust-minimized bridge where a single honest node suffices (1-of-n). Using Bitcoin’s finality as a “soft” source of economic security, which is exponentially more secure over time, the BitVM bridge becomes as hard to attack as Bitcoin. In phase 2, Ethereum will continue to secure the Ethereum bridge. However, Bitcoin’s “soft” finality will allow a reduced withdrawal delay of a few minutes instead of 7 days.


Phase 2. Source: BOB documentation, January 8th, 2025

Phase 3 will bring full Bitcoin finality by posting BOB state transition proofs to the Bitcoin chain, removing Ethereum’s need. An ideal scenario would be to enable ZK support on Bitcoin through a hard fork, but leveraging optimistic verification through BitVM is more likely. Optimistic verification will be very costly as it will require state proof to be posted to the Bitcoin chain at regular intervals — it will, therefore, need to be funded by significant revenue from BOB’s activity.


Phase 3. Source: BOB documentation, January 8th, 2025

Security

Because BOB currently relies on the Optimistic rollup stack, it benefits from security guarantees similar to the Optimism Mainnet network. Since October 2020, more than 20 audits have been performed on the different components of the Optimism codebase from recognized auditors like OpenZeppelin and SigmaPrime. The code base for BOB is open source on Github, displaying consistent contributions over time.


Git commits over time. Source: Github insights, January 8th, 2025

There are a few differences between the Optimism rollup stack and the BOB code base, and we note that no audit has been performed on the BOB code base itself. However, all official bridges of BOB have been audited. The Bitcoin bridge, also called BOB Gateway, has received the following audits:

  • Cure53 (April 2024): 3 low risks and 1 medium risk findings.
  • CommonPrefix (April 2024): 4 low risks and 1 medium risk findings.
  • Pashov (April 2024): 5 medium risks and 5 low risks findings
  • Pashov (August 2024): 7 low risks findings.
  • Pashov (September 2024): 6 low risks findings.

The USDC bridge has also received two audits:

  • Cure53 (April 2024): 1 high risk and 1 low risk findings. The high risk is related to the front-running of a non-atomic contract initialization, an easily fixed issue.
  • Pashov (April 2024): 1 low-risk finding.

A $250k bug bounty is available on remedy.xyz since August 7th, 2024, which amounts to around 1% of BOB’s TVL.

1.2 Decentralization and Legal Evaluation

Decentralization

BOB currently uses Ethereum EIP-4844 blobs as its DA layer and, therefore, benefits from the full DA security of Ethereum. Although anyone can run a BOB node, only the BOB protocol can operate the network. In this blog post dated March 11th, 2022, the Optimism team outlined its plan to decentralize its architecture over time. Since then, Optimism mainnet has reached Stage 1 in L2beat’s classification. Although BOB is based on the same rollup stack, it is still at Stage 0 for the following reasons:

  • The fraud-proof system is not public: only the Proposer and Challenger, which are permissioned roles, can propose state roots and challenge invalid state roots, respectively. Funds could be stolen if an invalid state root is not challenged after 7 days.
  • A Timelock does not slow down contract upgrades. A malicious upgrade could steal funds instantly.
  • Centralized operation of the chain services by the team could result in halted operations and frozen funds.
  • Centralized operation of the chain services could result in the front running of L2 transactions and the extraction of MEV.

That being said, it is publicly known that BOB plans to transition to Bitcoin’s finality for its economic security through the use of an 1-of-n BitVM bridge instead of relying on further development of the Optimism rollup stack.

Access control

All OP stack chains, including Base and Optimism Mainnet, include privileged roles that can perform important actions to maintain the availability and security of the chain through time. As the technology behind the OP stack matures, optimistic rollup rollup will become more and more decentralized.

Here are the main controlling wallets of the BOB network:

Apart from 1 signer, Multisig A and Multisig B have the same signers. We note an official Safe UI and factory smart contract.

BOB operates through various off-chain services:

  • Batcher post batches of transactions as EIP-4844 blobs through EOA A.
  • Proposer submits proposals to the L2OutputOracle through EOA B.
  • Challenger can challenge state proposals made by the Proposer. It creates a multisig transaction for Multisig A that the signers must then validate.
  • Guardian can pause withdrawals on BOB. It is assigned to Multisig A.

Here are the main contracts and their owners in BOB:

  • L1 Proxy Admin: can upgrade most L1 contracts related to BOB. It is owned by Multisig A
  • L2 Proxy Admin: can upgrade most L2 contracts related to BOB. It is owned by Multisig B.
  • SystemConfig: controls important parameters related to the L2 execution layer. It is owned by Multisig A.
  • L2OutputOracle: receives BOB state proposals from the Proposer, which allows for the processing of withdrawal requests after 7 days. State proposals can be challenged by the Challenger.

All privileged roles and wallets are listed in the BOB documentation, including mitigation strategies in case the listed wallets become compromised. We noticed the lack of a Timelock on both L1 and L2, which would allow BOB users to exit the chain in case of a malicious takeover.

Legal evaluation

The Bob Foundation, a Cayman foundation company, operates the interface hosted at https://app.gobob.xyz/. The interface displays data and provides tools and functionalities that enable users to interact with the BOB protocol, such as accessing BOB bridge(s). However, it is expressly stated that the BOB protocol, including its bridging smart contracts, is not a service the Bob Foundation provides. Terms of Service emphasize that the Foundation does not exert control over all activities and data within the protocol nor does it take possession, custody, or control of any digital assets interacting with the protocol.

While the Bob Foundation asserts a degree of separation from the protocol, it can monitor on-chain activities. Such monitoring is performed to ensure compliance with the Terms of Service and applicable laws and address legal obligations. Ongoing monitoring is justified by the eligibility conditions outlined in Section 1.5 ToS, which prohibit website use by any person or entity classified as a “Prohibited Person”. The prohibitive classification encompasses individuals or entities subject to economic or trade sanctions, located, resident, or organized in jurisdictions under comprehensive country-wide or regional sanctions or identified as “terrorist supporting” by the United Nations, European Union, United Kingdom, or United States.

Regulatory uncertainty remains a significant consideration due to the absence of definitive frameworks governing layer-two solutions in the Cayman Islands and globally. If the protocol facilitates transactions involving or interacting with the swapping of digital assets, regulators could assert that it operates as a money transmitter or a crypto-asset service provider, thereby requiring licensing in certain jurisdictions. Similarly, should the protocol offer mechanisms for staking or other economic incentives, there is a potential risk that such activities could be classified as an unregistered securities offering, depending on the applicable jurisdictional laws and regulatory interpretations.

These regulatory risks, while present, can be effectively mitigated through the evolution of the protocol and proactive engagement with legal and compliance experts. As of the date of this assessment, we have confirmed the presence of necessary legal disclaimers and a clear articulation of binding user terms.

1.3 Activity Benchmarks

Chain TVL over time. Source: DefiLlama.com, January 8th, 2025

From May 2024 to October 2024, BOB’s TVL has hovered around $50m. It then skyrocketed to $250m and recently retraced back to $200m.


Chain TPS over time. Source: Dune.com, January 8th, 2025

BOB’s onchain activity has been relatively stable, with approximately 0.75 TPS since launch, with some heightened periods of activity here and there. It is important to note that the OP rollup stack that BOB uses allows for significantly higher TPS rates if needed, meaning it can scale as is.


Daily unique users. Source: Dune.com, January 8th, 2025

The count of active unique users per day indicates a relatively stable activity level that is slowly increasing. We noticed a peak of activity on December 4th, 2024, with nearly 60,000 unique users that day.

As a chain primarily dedicated to using BTC derivatives in DeFi, BOB’s TVL is mostly made of those BTC derivatives. As stablecoins are the main debt asset used together with BTC-like collaterals, it is interesting to look at the top 3 stablecoins by TVL on BOB:

  • USDT: $1.94m or 0.63% of BOB’s TVL
  • USDC: $1.8m or 0.55% of BOB’s TVL
  • satUSD: $246k or 0.06% of BOB’s TVL

The stablecoin concentration in BOB is very low, at 1.2% of the total TVL, indicating an early-stage DeFi environment.

2. Network Market Outlook

2.1 Market Infrastructure

Bridge

BOB maintains two official bridges: one for Bitcoin, the Bitcoin Gateway, and one for Ethereum. In addition, BOB integrates with several third-party bridges whose security is not guaranteed by BOB. All bridges are accessible on the app.gobob.xyz dApp. Third-party bridges include:

  • Major Ethereum chains (Ethereum itself, Arbitrum, Base, Optimism, Polygon, …)
  • Moonbeam (part of Polkadot ecosystem)
  • Bitlayer (Bitcoin layer 2 scaling solution)
  • Merlin (Bitcoin layer 2 scaling solution)
  • BNB Smart Chain

Bitcoin intent process. Source: BOB blog post, January 8th, 2025

In addition, users can bridge and stake their Bitcoin on BOB in a single Bitcoin transaction through the Bitcoin Gateway bridge thanks to Bitcoin intents. Bitcoin intents allow for executing arbitrary transactions on an EVM (here, BOB) by making a single transaction on Bitcoin thanks to a network of competing executors on the EVM called solvers.

Lending

A few lending protocols are deployed on BOB:

Although not exactly a lending protocol, Satoshi Protocol allows minting the satUSD stablecoin using various BTC-derivatives on BOB — however, that stablecoin’s TVL remains very limited at $212k.

DEXs

  • OkuTrade with $50.47m of TVL, gives access to UniswapV3 pools on BOB together with the Oku aggregator frontend.
  • Izumi Finance with $821k TVL.

The Velar Artha PerpDEX is also deployed on BOB and allows trading the WBTC/USDT pair only with up to 10x leverage.

CEXs

BOB is currently supported by Binance and OKX together with the OKX wallet.

Oracles

Several oracles are available on BOB:

The BOB team has also expressed their plan to deploy Chainlink price feeds should Aave be deployed on BOB. Should Aave be deployed on BOB, we recommend using those Chainlink oracles.

2.2 Liquidity Landscape

Most liquid assets

We look at the liquidity available for BTC derivatives in OkuTrade, the main liquidity venues on BOB, since the Izumi Finance DEX has 50x less TVL:

  • uniBTC: $19.63m of liquidity (48% of chain deposits)
  • SolvBTC.BBN: $15.37m of liquidity (12.3% of chain deposits)
  • WBTC: $6.59m of liquidity (18% of chain deposits)
  • tBTC: $4.23m of liquidity (54% of chain deposits)
  • SolvBTC: $1.82m of liquidity (5% of chain deposits)
  • LBTC: $1.15m of liquidity (97% of chain deposits)

SolvBTC is a unified Bitcoin wrapper for other bridged BTC assets like WBTC, uniBTC, tBTC, or LBTC. Once wrapped, it can be restaked into the Babylon protocol to obtain SolvBTC.BBN, a yield-bearing BTC derivative. As of January 8th, 2025, SolvBTC.BBN represents the only yield-bearing Bitcoin derivatives, as LBTC is yet to activate the distribution of Babylon rewards to token holders.

We note that the OkuTrade website is largely non-functional, with frequent errors returned by the backend when trying to get quotes for swap.

Incentive programs

The BOB Fusion Program offers points called spice as a reward for various onchain activities. Multiple “special events” are advertised as part of it: for each, a fixed quantity of spice points are set to be distributed to participants up to a specific target market cap. As of December 28th, 2024, special event #4 — called Climbing the ranks — is live with a $226m TVL achieved out of the $300m target. The use of Babylon LSTs on BOB is a cornerstone of this incentive program, outlying the positive synergies between the two protocols.

Fee structure

As an Ethereum optimistic rollup, BOB uses ETH as a gas token to pay for transactions. Transaction fees are made of two different fees: the execution fee and the L1 data fee. The execution fee is similar to what one would pay for a transaction on Ethereum, but it is way lower and is equal to the amount of gas used multiplied by the gas price. The L1 data fee is paid to the SequencerSequencer for the cost of including the transaction into an EIP-4844 Ethereum L1 blob. Since the BOB team is currently the only one allowed to operate the Sequencer and Proposer services, all execution fees are presently being sent to a wallet controlled by the BOB team.

Application developers on BOB can use BTC derivatives as a gas token through Meta Transactions and Account Abtractions if they want to. When a user deposits BTC into BOB through the official BOB bridge, the platform will offer to convert part of the deposited BTC into ETH to help send its first transactions on BOB.

2.3 Ecosystem Resilience

Grant program

There is no publicly advertised grant program for app developers or projects related to the BOB ecosystem.

Partnerships

BOB’s main partnership is with Babylon protocol, a Bitcoin staking primitive allowing BTC on various PoS chains. This is exemplified by the special point reward programs outlined in this blog post, allowing users to accumulate both Babylon and Spice points by using Babylon-based LSTs on BOB.

Liquidity depth

As seen in section 2.2, there is a meaningful amount of liquidity for the BTC wrappers and derivatives found on BOB. However, the liquidity is mostly found between them and is correlated. Both total stablecoin TVL on BOB amount to almost $4m, and their liquidity is very low. This can be explained by the fact that DeFi on BOB is still nascent, with few assets and DeFi opportunities available on the chain apart from the bridging and staking of BTC wrappers.

Top-5 liquidity pool by TVL. Source: OkuTrade, January 8th, 2025

This lack of stablecoin liquidity is an issue regarding Aave’s main projected use case on BOB, namely, borrowing stables against BTC wrappers and derivatives. Liquidators would still have the option to swap the collateral for another BTC-like asset on BOB before bridging over to another chain — like Ethereum — where the collateral would be sold for stables. However, this implies a non-atomic liquidation process, which is riskier and impractical for liquidators.

2.4 Ecosystem Growth Potential

We estimate that the share of BTC bridged over Defi-enabled chains, like BOB, is less than 2% of the total BTC supply. WBTC, the largest Defi-enabled BTC wrapper, presently represents 1.1% of the Bitcoin total supply, while the second largest BTC wrapper, cbBTC, represents 0.14% of the total supply. Therefore, the remaining share of idle BTC is untapped liquidity for a platform like BOB, representing a significant growth opportunity.

By integrating with other networks, BOB can act as an intermediate for Bitcoin liquidity to be used in Defi applications on those networks, which might be more mature. This might work against BOB’s goal of hosting a full-fledged Defi ecosystem. For now, BOB’s strategy is open to the two possibilities thanks to both its Bitcoin native bridge and its Ethereum native bridge.

2.5 Major and Native Asset Outlook

Main asset TVL. Source: Dune.com

The biggest assets on BOB are BTC wrappers and derivatives. SolvBTC.BBN leads the way with $140m of TVL, which is close to 55% of BOB’s overall TVL. We note the relatively small amount of stablecoins on BOB, estimated at $3.9m.

2.6 Tokenomics

BOB does not have a governance token or a DAO at this time. There is no publicly disclosed plan to have a governance token or a DAO in the future.

3. Onchain discoverability

Activity dashboards for BOB are available on TokenTerminal and DefiLlama. No subgraph for BOB is available on TheGraph, but some are available on GoldSky, and the chain can be indexed on SQD. The team maintains two Dune dashboards:

The official blockchain explorer for BOB, based on the opensource Blockscout codebase, is maintained by the team.

4. Impact of Aave Deployment

The primary value proposition for Aave’s deployment on BOB would be enabling users to borrow stablecoins against BTC-based collateral assets. However, the current stablecoin liquidity on BOB (approximately $4M) is notably insufficient compared to its total TVL ($252M), presenting a significant challenge. While Aave’s presence would likely attract more stablecoin liquidity to BOB, additional liquidity incentives may be necessary to achieve meaningful depth.

Deploying a GHO facilitator on BOB to establish Aave as the primary stablecoin issuer merits consideration. However, several critical security concerns must be addressed before such an implementation:

  1. The non-public nature of the fraud-proof system could compromise the ability to challenge malicious withdrawal requests
  2. The centralization of Proposer and Sequencer services under BOB’s team introduces operational risks, including potential fund freezes
  3. The absence of timelock mechanisms for both L1 and L2 contract upgrades exposes bridge funds to elevated risks and could result in bad debt for Aave

Given these security considerations, we recommend deferring the deployment of a GHO facilitator until more robust security guarantees are implemented.

5.1 Initial Asset Selection

Our assessment for initial asset selection considers three primary criteria:

  • Previous successful integration and risk review within the Aave ecosystem
  • Asset TVL on BOB
  • Available liquidity relative to total asset TVL

We support @ChaosLabs’ recommendation to onboard tBTC, WBTC, and LBTC, along with a BTC-correlated E-Mode where LBTC serves as the sole collateral. It is worth noting that Lombard has not yet activated the distribution of Babylon staking yield to LBTC holders. As a result, leveraging LBTC as collateral in a looping position would primarily enable additional point farming. Being a yield-bearing BTC derivative, SolvBTC.BNN is also a strong candidate for collateral but would require a separate risk assessment.

Given the limited stablecoin liquidity on BOB, we do not recommend onboarding any stablecoin at this time. A GHO facilitator could be considered once the BOB network demonstrates stronger security guarantees.

5.2 Asset parameters

To follow

Disclaimer

This review was independently prepared by LlamaRisk, a community-led non-profit decentralized organization funded in part by the Aave DAO. LlamaRisk is not directly affiliated with the protocol(s) reviewed in this assessment and did not receive any compensation from the protocol(s) or their affiliated entities for this work.

The information provided should not be construed as legal, financial, tax, or professional advice.

Change log:

Jan 13th: Updated recommendation to support the leveraged BTC LST use case

3 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.

After syncing with all Service Providers, it has been decided to avoid governance burden and to increase the efficiency of this ARFC, to update the original [ARFC] Deploy Aave v3 on BOB to include the following assets as well in initial deployment.

  1. [TEMP CHECK] Onboard openUSDT to Aave V3 BOB Instance
  2. [TEMP CHECK] Onboard SolvBTC to Aave V3 BOB Instance
  3. [TEMP CHECK] Onboard xSolvBTC to Aave V3 BOB Instance

Since those 3 proposals passed successfully their respective TEMP CHECK Snapshot, and being the publication of an ARFC the next step too, we’re merging them into this proposal, so formally requesting @LlamaRisk and @ChaosLabs to provide their analysis on the following assets.

ARFC has been updated accordingly. Once this review has been done, proposal will be escalated to ARFC Snapshot.

3 Likes

Hello,

7 months after the start of this governance proposal, the ACI witnessed little growth in the BOB ecosystem.

The Aave DAO has been too lenient in the past with new network deployments and is currently operating at a loss on a few of them (Soneium, Celo, Linea, Zksync, Scroll)

The competitor landscape includes CeDeFi low-quality platforms like Avalon Labs and Euler, which have near-zero traction.

As the primary Lending usecase of this chain is to use yield bearing BTC wrappers to borrow BTC, the borrow APY and thus the potential RF collected to contribute to DAO revenue is low.

Based on current data and even with optimistic growth projections, the ACI believes it’s nearly impossible for the DAO to generate at least $1m in yearly revenue from this Instance, which we consider should be the bare minimum to add a new network to manage and curate.

Additionally, yield wrappers introduce risk and are only useful as collateral in this context, which creates bad debt risk that projected revenue can’t justify.

We recommend focusing on other initiatives and halting this deployment project. The time and SP resources invested should be considered sunk costs, and we recommend moving on.

We will vote accordingly.

4 Likes

As mandated, we submit the analysis we prepared for openUSDT, SolvBTC, and xSolvBTC for the BOB instance. We echo @MarcZeller’s comment about focusing the DAO’s resources on opportunities that present sufficient upside, and remaining mindful of the overhead of managing an increasing number of instances. Therefore, we will not recommend any parameters or oracle at this time, but may revisit this in the future should the DAO express such a desire.

Detailed assessments

openUSDT assessment

1. Asset Fundamental Characteristics

1.1 Asset

OpenUSDT (oUSDT) is an interoperable USDT token that is purpose-built for cross-chain DeFi. It is backed 1:1 with native USDT locked on Ethereum and Celo, and leverages Hyperlane for interchain operability and Chainlink CCIP for securing oUSDT transfers. It is deployed at the address 0x1217BfE6c773EEC6cc4A38b5Dc45B92292B6E189 on BOB Network. As of July 14, 2025, oUSDT has a circulating supply 4.765 on BOB.

1.2 Architecture

oUSDT is implemented using the XERC20 and SuperchainERC20 token formats, which allow swaps to be initiated outside the Superchain by both EVM and non-EVM users.

Velodrome has built Superswaps, an on-chain infrastructure that enables seamless cross-chain token swaps across the entire Superchain. This eliminates the need for users to interact with traditional bridges, wrapped tokens, or external liquidity pools. Superswaps utilize Hyperlane for interchain messaging, leveraging its modular message transport layer that supports any virtual bridge provider. In this system, oUSDT acts as the intermediary token used by Routers, which serve as the entry point for token swaps transferring value across chains.

Superswaps also include built-in MEV protection through the use of Submarine Sends, which allow swap commitments (details about what is being swapped) to be separated and privately relayed from the rest of the transaction.

Chainlink CCIP secures both the messaging and value transfer for oUSDT, with defined risk parameters: a bufferCap of $2M (limiting mint/burn to $1M at a time) and a replenishingPerSecond rate of $500/s for the BOB chain. These limits help reduce cross-chain risk by capping the value that can be moved at once or within a short time window, minimizing potential impact in case of a failure or exploit. By combining Hyperlane and CCIP, oUSDT can be extended to new chains and is positioned to upgrade to native Superchain interop via ERC-7802 seamlessly.

Minting/Redemption


Source: Hyperlane Warp Route (HWR) Architecture, Hyperlane Docs

Warp Routes is Hyperlane’s token bridging framework that utilizes a lock-and-mint mechanism for oUSDT transfers. oUSDT is backed 1:1 with native USDT on the collateral chains (or origin chains), Ethereum, and Celo. Users can lock their USDT in the XERC20Lockbox contract, which handles the wrapping of USDT to oUSDT and escrows the USDT as collateral, to mint oUSDT on a synthetic chain (or destination chain), in this case, BOB. The lockboxes on Ethereum and Celo securely hold the USDT collateral. Users can redeem oUSDT for USDT at any time by initiating the redemption process on the collateral chain, which results in the corresponding oUSDT being burned on the synthetic chain (i.e., BOB).

Using the OpenUSDT interface, users can mint oUSDT on BOB by sending USDT from Ethereum or Celo. No other chain currently supports oUSDT minting; only direct oUSDT-to-oUSDT transfers are supported on those chains.

1.3 Tokenomics

The supply of oUSDT on BOB is not fixed; it dynamically adjusts based on the token amount bridged to or from the chain. As of July 11, 2025, the total market supply of oUSDT across EVM chains is 2.1M, backed 1:1 by USDT locked on Ethereum and Celo. However, the circulating supply on BOB is only 4.65 oUSDT, indicating that the token is still in the very early stages of adoption on this chain.

2. Market Risk

Currently, there are no liquidity pools available for oUSDT on BOB. However, the OpenUSDT team has confirmed that oUSDT is intended to become the primary USDT representation on BOB. Although a bridged USDT token with ~1M supply already exists, BOB will be pre-funding a migration contract to enable users to swap from the existing USDT to oUSDT. The collected USDT will then be bridged to Ethereum, as the collateral backing for newly issued oUSDT on BOB. Regarding liquidity, the team has assured us that LP commitments have already been secured to support oUSDT adoption.

As oUSDT adoption on BOB matures, we will be better positioned to assess liquidity, LP concentration, and volatility risks, all of which remain premature to evaluate at this stage.

3. Technological Risk

3.1 Smart Contract Risk

The most recent audit of Hyperlane Warp Routes, ICA, CCTP, and OP contracts was conducted by ChainLight on June 26, 2025. The audit identified 2 critical and 5 informational findings. All critical issues and one informational finding were patched, while the team addressed the remaining four informational findings with utility-based justifications. The presence of two critical vulnerabilities, despite being fixed, raises concerns and suggests the need for a follow-up audit to ensure continued security.

The Hyperlane Superchain USDT smart contracts, which oUSDT uses on BOB, were audited by ChainSecurity. Their February 14, 2025, report reported 2 resolved informational findings.

Separately, the Hyperlane CCIP Warp Route underwent an audit by ChainLight on February 20, 2025, which uncovered 1 high, 1 low, and 2 informational findings, all of which were either acknowledged or resolved.

3.2 Bug Bounty Program

OpenUSDT currently does not have a dedicated bug bounty program. However, its security benefits from the long-standing bounty programs of its underlying components, Hyperlane, Chainlink CCIP, and Velodrome, all of which maintain active Immunefi programs with coverage of $2.5M, $3M, and $100K, respectively. This cumulative coverage reflects industry-standard, battle-tested security practices. To further strengthen assurance, we recommend launching a dedicated OpenUSDT-specific bounty under Hyperlane’s existing Immunefi program.

3.3 Price Feed Risk

Since oUSDT is a wrapped version of USDT for Superchains, it is designed to track the USDT price 1:1. The collateral backing oUSDT is held in XERC20Lockbox contracts on Celo and Ethereum, and is publicly verifiable. The team has indicated that a dashboard will provide real-time visibility into the oUSDT supply and corresponding USDT reserves across chains. A Proof of Reserves feed to track total USDT backing for oUSDT is also planned for future implementation.

In the meantime, Chainlink data feeds are not yet available on the BOB Network. However, the team has confirmed that integration is in its final stages, with feeds expected to go live within the next two weeks. Once live, the USDT BOB price feed can accurately price oUSDT in Aave markets.

3.4 Dependency Risk

Hyperlane
oUSDT’s cross-chain functionality is entirely dependent on the Hyperlane protocol. Any vulnerability, exploit, or operational failure of Hyperlane’s smart contracts could lead to a permanent freeze or theft of oUSDT assets. While Hyperlane’s security is modular, allowing for customizable risk parameters, the core smart contracts represent a central point of failure. The security of oUSDT is therefore directly tied to the ongoing security and auditing of the Hyperlane infrastructure.

Tether (USDT)
The fundamental value of oUSDT is directly pegged to the value and stability of the underlying native Tether (USDT). Therefore, oUSDT inherits all of the risks associated with Tether itself. These include custodian risk, as the reserves backing USDT are held by financial institutions, and regulatory risk, with changing global regulations potentially impacting Tether’s operations. Any de-pegging of USDT from the US dollar, due to a lack of confidence in its reserves or other market factors, would be directly mirrored in the value of oUSDT.

Chainlink CCIP
For high-value transfers, oUSDT relies on Chainlink’s Cross-Chain Interoperability Protocol (CCIP) for additional security. This introduces a dependency on the correct functioning of Chainlink’s Decentralized Oracle Networks (DONs) and the independent Risk Management Network. While CCIP is designed with a defense-in-depth approach, any unforeseen vulnerability or collusion within the oracle networks could compromise the security of large oUSDT transfers. The system is designed to halt activity upon detecting anomalies, which could temporarily freeze funds during a security event.

4. Counterparty Risk

4.1 Governance and Regulatory Risk

The web interface through which users engage with the decentralised protocol built on Hyperlane’s inter-chain messaging layer is maintained by Abacus Skunkworks Limited (“Abacus”), as expressly acknowledged in the Terms of Use. Under those Terms, Abacus and its affiliates reserve all intellectual property and related proprietary rights in the site and all underlying content, including software, text, graphics, trade and service marks, copyrights, patents, and design rights. The Terms also confirm that Abacus is not registered with the U.S. Financial Crimes Enforcement Network (FinCEN) as a money-services business, nor does it hold any comparable regulatory authorisation elsewhere.

Abacus’s practical influence is underscored by its position as a co-signatory on the Nested Safe architecture and its administrative control over the Abacus Works Safes that govern certain extension chains. Because any exercise of signing authority may constitute “control” for regulatory purposes, the scope of Abacus’s involvement—particularly in evaluating oUSDT on the BOB network—merits continued scrutiny.

Access to the interface is conditioned on the user’s explicit representation that they are not (a) listed on any sanctions roster maintained by a competent governmental authority—including, without limitation, the U.S. Treasury’s Office of Foreign Assets Control (OFAC) Specially Designated Nationals and Blocked Persons List—or (b) organised, resident or located in a jurisdiction subject to comprehensive U.S. embargoes.

Operationally, the protocol inherits the restraint mechanics embedded in Tether-issued USDT: frozen USDT cannot be supplied to mint oUSDT, and addresses blacklisted by Tether are effectively barred from sourcing the requisite USDT for that purpose. While Tether lacks unilateral power to immobilise oUSDT directly, the oUSDT collective has indicated it will honour any freeze or blacklist directives issued by Tether. Complementing this framework, the primary Hyperlane relayer software implements sanctions-screening logic focused chiefly on identifying OFAC-listed wallet addresses.

4.2 Access Control Risk

The oUSDT deployment model leverages a multi-layered access control structure, combining Nested Safes and Abacus Works (AW) Safes to enhance security, enable shared governance, and ensure on-chain transparency.

However, a Nested Safe has not yet been deployed on BOB for oUSDT. Instead, ownership is managed through an Interchain Account (ICA) on BOB, which is controlled by the Abacus Works (AW) Safe on Ethereum.

4.2.1 Contract Modification Options

Here are the controlling wallets:

  • AW Safe: A 4/9 threshold Safe multisig, controlling its ICA on BOB. It has full administrative control over sensitive functions, including setting buffer caps, rate limits per second, adding or removing bridges, and deploying new instances via the factory.

The following contracts power the OpenUSDT architecture on BOB:

  • oUSDT: ERC-20 contract for oUSDT token on BOB. It is deployed behind an ERC1967Proxy that is controlled by the AW Safe.
  • Superchain ERC20 Bridge: Hardcoded contract responsible for initiating cross-chain oUSDT minting and burning operations. It is fully trusted and controlled by Superchain governance.
  • HypXERC20: Handles wrapping of oUSDT. It is controlled by the AW Safe.

4.2.2 Timelock Duration and Function

OpenUSDT has not configured any timelock on oUSDT contract upgrades. However, the team has confirmed adding an OpenZeppelin timelock, already in testing and planned for deployment within the next two weeks.

4.2.3 Multisig Threshold / Signer Identity

Abacus Skunkworks Limited controls the 4/9 threshold AW Safe multisig.

Note: This assessment follows the LLR-Aave Framework, a comprehensive methodology for asset onboarding and parameterization in Aave V3. This framework is continuously updated and available here.

Disclaimer

This review was independently prepared by LlamaRisk, a community-led decentralized organization funded in part by the Aave DAO. LlamaRisk is not directly affiliated with the protocol(s) reviewed in this assessment and did not receive any compensation from the protocol(s) or their affiliated entities for this work.

The information provided should not be construed as legal, financial, tax, or professional advice.

1 Like

Detailed assessments (continued)

SolvBTC assessment

1. Asset Fundamental Characteristics

1.1 Asset

SolvBTC is a universal Bitcoin reserve token pegged 1:1 to native BTC, built to address the BTC cross-chain liquidity fragmentation problem. It is deployed at the address 0x541FD749419CA806a8bc7da8ac23D346f2dF8B77 on the BOB Network. Bitcoin holders can move their assets across blockchain ecosystems without dealing with fragmented liquidity or the risks tied to individually wrapped BTC assets. Users can deposit 1 WBTC on the BOB network to receive 0.9975 SolvBTC. This 25 bps fee on WBTC-to-SolvBTC reflects the operational cost of converting WBTC into native BTC, which primarily backs SolvBTC. The withdrawals take at most 7 days and do not have any associated fees.

As of July 12, 2025, SolvBTC has a circulating supply 796 on BOB, representing a market capitalization of $93.51M. The token was deployed on August 14, 2024, and does not offer any yield.

1.2 Architecture

Minting and Redemption
Minting SolvBTC on BOB involves depositing WBTC into the SolvBTCRouter contract through the createSubscription function. That function handles user deposits and the issuance of SolvBTC. In return, users receive SolvBTC tokens backed 1:1 by the deposited Bitcoin, ensuring full collateralization.


Source: SolvProtocol Docs

Redeeming SolvBTC operates in reverse. Users initiate a redemption request by calling the createRedemption() function in the SolvBTC Router contract, specifying the amount of SolvBTC to redeem. Upon successful initiation, users receive a redemption Semi-Fungible Token (SFT), representing their claim. The transfer of Bitcoin or wrapped BTC occurs when the user claims the redemption, facilitated by the claimTo() function.

The redemption process may involve delays, especially for large amounts. For instance, redemptions under $50,000 can often be processed intraday, while larger redemptions may take 1-3 business days, subject to liquidity and operational constraints.

Reserves
Solv Protocol employs a tiered reserve system to manage risks associated with different types of wrapped BTC assets. The core reserve assets form the foundation of SolvBTC’s reserve as they are the most secure and liquid assets comprising native BTC, BTCB (Binance’s wrapped Bitcoin), and cbBTC from Coinbase. The other assets in reserve are known as isolated reserve assets, and the full details on the SolvBTC reserves can be found on their dashboard.

Staking Abstraction Layer (SAL)
The Staking Abstraction Layer (SAL) is Solv Protocol’s core infrastructure layer where users can access a range of yield-generating strategies on different blockchains, all while holding SolvBTC, a 1:1 liquid representation of their BTC. SolvBTC is powered by Chainlink’s Cross-Chain Interoperability Protocol (CCIP), which allows seamless asset transfer between other blockchains such as Ethereum, BNB, Avalanche, Arbitrum, Base, etc.

1.3 Tokenomics

The total supply of SolvBTC is not fixed and fluctuates based on user activity. On BOB, users can permissionlessly mint SolvBTC by supplying WBTC or burn it through redemptions, directly impacting the circulating supply. As of July 12, 2025, there are 9.81K SolvBTC in circulation across Ethereum, BNB Chain, Arbitrum, Avalanche, and other networks. Of the total, 796 SolvBTC are on BOB, held by 2,454 unique addresses, representing around 8.1% of the overall circulating supply.

1.3.1 Token Holder Concentration


Source: SolvBTC Top 10 Holders on BOB, Blockscout, July 12, 2025

The top 5 holders of SolvBTC are:

The majority of existing solvBTC is supplied to Avalon Finance and Uniswap. Beyond these DeFi use cases, the amount of SolvBTC held by EOAs or multisigs accounts for less than 15% of the total supply, suggesting low concentration.

2. Market Risk

2.1 Liquidity


Source: SolvBTC/WBTC Swap Liquidity, Oku Trade, July 12, 2025

Users can swap 54 SolvBTC worth up to $6.28M for WBTC within a price impact of 7.5%.

2.1.1 Liquidity Venue Concentration


Source: SolvBTC DEX Liquidity Pools on BOB, GeckoTerminal, July 12, 2025

The total SolvBTC liquidity across DEXs on BOB is approximately $13M. The primary liquidity hubs are Oku Trade SolvBTC/xSolvBTC 0.05% ($16.5M TVL), Oku Trade WBTC/SolvBTC ($11.5M TVL), and Oku Trade SolvBTC/xSolvBTC 0.01% pool ($0.69M TVL).

2.1.2 DEX LP Concentration

A significant LP concentration is observed within SolvBTC’s DEX pool, with only three entities providing the majority of its liquidity on BOB. Below is the breakdown (as of July 12, 2025):

2.2 Volatility


Source: SolvBTC vs BTC Price, GeckoTerminal, July 12, 2025

SolvBTC’s price on BOB has closely tracked BTC in recent months, with minimal deviations. However, between January 4 and 9, 2025, it traded at a sustained discount of around 5% below WBTC, with the peak deviation reaching nearly 30%. This depeg was primarily driven by the withdrawal of WBTC liquidity from the pool, coupled with extremely low overall liquidity at the time, around $100K. Since then, the pool’s TVL has increased, and no similar secondary market depeg has occurred.

2.3 Exchanges

SolvBTC is exclusively traded on DEXs and is not currently listed on any centralized exchange.

2.4 Growth


Source: SolvBTC BOB TVL, Dune, July 12, 2025

From its peak of 2,512 on November 19, 2024, SolvBTC’s TVL has seen a significant decline of 68.3%, currently at 796 tokens on BOB.

3. Technological Risk

3.1 Smart Contract Risk

Multiple third-party blockchain security firms have audited SolvBTC smart contracts, and the findings were as follows:

All the issues were either fixed, acknowledged, or mitigated.

3.2 Bug Bounty Program

Solv Protocol currently does not have an active bug bounty program. However, in October 2021, the team launched a $50K bug bounty (https://medium.com/solv-blog/solvs-50-000-bug-bounty-program-in-partnership-with-immunefi-5d52d50f7aee) initiative in partnership with Immunefi. They have since confirmed plans to reinstate the program in H2 2025.

3.3 Price Feed Risk

Chainlink data feeds are not yet live on the BOB Network; however, the team has indicated that Chainlink expects to complete the integration within two weeks of July 9, 2025. As SolvBTC is a 1:1 BTC wrapper, we recommend using a BTC/USD feed (once available) to price the asset, as this approach helps mitigate the effects of secondary market volatility.

3.4 Dependency Risk

Bitcoin Custody
The 1:1 backing of SolvBTC is entirely on the security and operational integrity of its third-party institutional custodians, Ceffu and Cobo. This creates a critical counterparty risk, as the underlying native Bitcoin is held outside the direct control of the Solv Protocol’s smart contracts. Any failure at the custodial level, such as a security breach, internal malfeasance, insolvency, or a regulatory asset freeze, would directly jeopardize the reserves. Such an event could render the backing inaccessible or permanently lost, causing SolvBTC to de-peg from Bitcoin and lose its value immediately.

Chainlink CCIP
SolvBTC’s utility is significantly enhanced by its presence on multiple chains, and its movement between networks like Arbitrum and BOB is facilitated by Chainlink’s Cross-Chain Interoperability Protocol (CCIP). This creates a critical dependency. While CCIP is a market-leading solution with robust security features, any unforeseen vulnerability, operational failure, or significant latency event within the CCIP network could directly impair SolvBTC. Such an event could halt all cross-chain transfers, leading to liquidity fragmentation, price discrepancies between chains, and the trapping of user assets on the BOB network, undermining the asset’s core value proposition of seamless, multi-chain liquidity.

4. Counterparty Risk

4.1 Governance and Regulatory Risk

SOLV is the native utility token of the Solv Protocol. Its core utilities include governance participation, staking to earn protocol emissions via SAL, and receiving fee discounts across the platform, such as reduced redemption fees for SolvBTC. The genesis supply was 8.4B tokens, and the current maximum supply is 9.66B. However, this cap is not fixed and may be increased in the future. The launch of Solv DAO governance was initially targeted for Q2 2025, but due to delays in the Solv TGE, it has been rescheduled to H2 2025, as communicated by the Solv team.

Legal Commentary
The consumer interface is operated by Solv Legos Ltd., a British Virgin Islands company whose Terms of Use (Terms) are governed by Singapore law. The interface is characterised in the Terms as “experimental,” “not regulated by any federal or state agency,” and “not registered with the U.S. SEC,” and it further asserts that the tokens issued are not securities. Under the Monetary Authority of Singapore’s substance-over-form approach, however, the legal character of a token depends on its actual features and the rights it confers. Should xSolvBTC or SolvBTC be deemed a “capital markets product” within the meaning of the Securities and Futures Act or a “digital payment token” under the Payment Services Act, Solv Legos Ltd. would be subject to additional licensing, disclosure, and ongoing compliance obligations. The Terms expressly acknowledge that this regulatory risk is not fully mitigated. Solv team has represented that the protocol conducts no business activities in Singapore and does not target Singapore-based users. After consulting external counsel, the team concluded that Singapore law does not require a formal legal opinion on the classification or regulatory treatment of xSolvBTC.

The Terms and accompanying Disclaimer provide that users assume all blockchain, protocol, personal, regulatory, cybersecurity, liquidity, and market risks, and they contain broad waivers of liability for losses arising from hacks or protocol failures. Solv expressly disclaims any fiduciary, broker, or agency relationship and states that it does not monitor user activity for suitability or compliance. Such disclaimers are common in the sector but would not protect the operator if it were shown to have misrepresented risks or omitted material information.

The Terms permit Solv Legos Ltd. to conduct know-your-customer (KYC) and anti-money-laundering (AML) screening, including on-chain and off-chain checks, and specify that anonymous or pseudonymous transactions are not accepted. Access is contractually restricted for users in, inter alia, the United States, Singapore, Russia, and mainland China, and the Terms prohibit using VPNs to circumvent geo-blocking. The protocol employs Cloudflare-enabled IP geofencing to address jurisdictional and sanctions-related restrictions and engages Fuzzland to perform on-chain wallet screening and AML checks.

Custody of reserve assets is delegated to third-party service providers. The Terms disclaim responsibility for losses resulting from custodian failure and state that Solv Legos Ltd. does not take possession, custody, or control of user assets at any time. Custody of the Bitcoin backing xSolvBTC is provided by Cobo and Ceffu under segregated-wallet arrangements that keep those assets distinct from the reserves supporting SolvBTC. The protocol does not currently use any off-exchange settlement mechanism.

All disputes are subject to binding arbitration administered by the Singapore International Arbitration Centre, and the Terms waive class-action rights. Although the arbitration clause is likely enforceable under Singapore law, it may impose cost and complexity barriers to users seeking redress. No contractual insurance or guarantee fund is provided; any compensation is solely at Solv Legos Ltd.'s discretion. Following a security incident in January 2025, the company publicly committed to “fully compensate verified affected users”. The team has supplied a schedule of user claims, all of which it reports have been fully compensated as of the date of this analysis.

4.2 Access Control Risk

4.2.1 Contract Modification Options

Here are the controlling wallets:

  • Multisig A: A 3/5 threshold Safe multisig, owner of SolvBTC ERC-20 contract.
  • EOA: Admin and governor of SolvBTC Router and SolvBTCMultiAssetPool contract.
  • Multisig B: A 3/5 threshold Safe multisig, assigned the role of blacklist manager of the SolvBTC contract and shares 4 owners with Multisig A.

The following contracts power the SolvBTC architecture on BOB:

Solv Protocol uses Open Zeppelin’s role-based access control mechanism for handling sensitive functions as follows:

Controlling Address Role Functionality
Multisig A Admin Role Has the privileges to grant minter/burner role to designated accounts
MultiAssetPool, Chainlink CCIP Minter Has the privileges to mint and burn SolvBTC
MultiAssetPool Pool Burner Has the privileges to burn SolvBTC tokens from any accounts; this role is only granted to the Asset Pool that controls the SolvBTC.
Multisig B Blacklist Manager Allows accounts to be blacklisted, preventing any xSolvBTC transfers.

The previously mentioned EOA serves as the admin of the MultiAssetPool contract and holds both the Minter and Pool Burner roles. Its status as a non-multisig significantly heightens centralization risks within key protocol contracts.

4.2.2 Timelock Duration and Function

Solv Protocol has not yet configured a timelock for SolvBTC contract upgrades. However, the Solv team has committed to implementing a 72-hour timelock mechanism on SolvBTC contract upgrades.

4.2.3 Multisig Threshold / Signer Identity

The Multisigs A & B, both 3/5 threshold Safes, are controlled by the Solv Core team. Also, the EOA, which holds admin and governor privileges across multiple SolvBTC contracts, was part of earlier deployment stages and will be migrated to Safe multisig with a signing threshold of 3/5 by the end of July 2025.

Note: This assessment follows the LLR-Aave Framework, a comprehensive methodology for asset onboarding and parameterization in Aave V3. This framework is continuously updated and available here (aave-research/frameworks/aave_v3_framework.md at main · llama-risk/aave-research · GitHub).

xSolvBTC assessment

1. Asset Fundamental Characteristics

1.1 Asset

xSolvBTC is a SolvBTC liquid staking token (LST) and accrues yield from Babylon native token rewards, which can later be redeemed via airdrops. It is deployed at the address 0xCC0966D8418d412c599A6421b760a847eB169A8c on the BOB Network and recently rebranded from SolvBTC.BBN. It can be obtained by exchanging 1:1 SolvBTC for xSolvBTC via their portal. Redemption/unstake period to SolvBTC on the BOB network is instantaneous, and a fee of 0.2% is charged. xSolvBTC is pegged 1:1 with Bitcoin, and the yield earned on it is given in the form of Babylon Points and Solv Points.

As of July 12, 2025, xSolvBTC has a circulating supply of 284.8 on BOB, representing a market capitalization of $33.4M. The token was deployed on August 29, 2024.

1.2 Architecture

Solv Protocol’s Staking Abstraction Layer (SAL) is the core architecture that addresses the BTC staking obstacles (cross-chain complexity, limited programmability, liquidity issues, and consensus differences) by providing a unified framework for BTC staking across various chains.


Source: Staking Abstraction Matrix, Solv Docs

The SAL system is governed by the Staking Abstraction Matrix (SAM), the core data model that defines key rules and parameters to ensure security and transparency across all components. The SAM consolidates Bitcoin script configurations, LST contract rules, and yield parameters, enabling consistent validation and coordination within the system. The LST Generation Service handles the issuance and redemption of BTC LSTs, ensuring that minted tokens accurately reflect the amount of BTC staked. The Staking Validation Service, powered by algorithms executed by staking guardians, verifies each staking transaction before it is submitted to the Bitcoin mainnet, reducing the risk of errors or fraud. Once validated, the Transaction Generation Service constructs and broadcasts transactions, optimizing for network fees and timing across various staking protocols. Finally, the Yield Distribution Service calculates and distributes staking rewards by embedding them into the LST price or dispersing them directly to users, thereby streamlining the reward distribution process.

Yield


Source: Solv Staking, July 12, 2025

The yield associated with xSolvBTC on BOB originates from two distinct sources: Babylon Staking Yield and Solv Points. Users can stake SolvBTC through the Solv interface to receive xSolvBTC, whose value remains pegged 1:1 with SolvBTC. As of July 12, 2025, the xSolvBTC staking vault currently holds 5,266.87 BTC in total deposits, with 284.8 xSolvBTC contributed from the BOB chain. This vault is secured by Staking Guardians, Ceffu, and Cobo, who play a critical role in safeguarding the staking process, asset custody, and transaction verification, thereby reducing the risk of asset loss from staking flows initiated by LST issuers. Details on the assets backing xSolvBTC can be found on the Solv Protocol dashboard.

xSolvBTC rewards are distributed as points, meaning the token’s value remains constant and does not appreciate. The Babylon Staking Yield is paid out in BABY tokens, currently offering an APY of 0.41%. In parallel, Solv Points are accrued and later converted into SOLV tokens, claimable by users at the end of each campaign or season. To earn Solv Points, users must manually activate the Solv Points System.

Initially, LST issuers were responsible for converting rewards into BTC and facilitating user claims by converting points into tokens. Over time, this responsibility has evolved into a broader role handled by Yield Distributors. For xSolvBTC, the primary yield distributors are Solv and Pendle, with Solv distributing Babylon staking yield and Pendle enabling additional yield opportunities through its PT and YT token architecture when users deposit xSolvBTC on the Pendle platform.

The fund flow for xSolvBTC can also be described via minting and redemption.

Source: Issuing xSolvBTC via SolvBTC, Solv Docs

Minting
On Bob, users call the deposit function on SolvBTCRouterV2, which burns the SolvBTC token and mints the xSolvBTC, and sends it back to the user.

Redemption
On Bob, users call the withdraw function on XSolvBTCPool after which xSolvBTC tokens are burnt and the user receives their SolvBTC tokens back. In between the Fee Deposit Wallet, a 3/5 Safe multisig collects the 0.2% unstaking fee.

1.3 Tokenomics

The total supply of xSolvBTC is not fixed and fluctuates based on users’ staking/unstaking of SolvBTC. As of July 12, 2025, there are 5.27K xSolvBTC in circulation across Ethereum, BNB Chain, Arbitrum, and other networks. Of the total, 285 xSolvBTC are on BOB, held by 6,539 unique addresses, representing around 5.4% of the overall circulating supply.

1.3.1 Token Holder Concentration

Source: xSolvBTC Top 10 Holders on BOB, Blockscout, July 12, 2025

The top 5 holders of xSolvBTC are:

The majority of existing solvBTC is supplied to Avalon Finance and Uniswap. Beyond these DeFi use cases, the amount of xSolvBTC held by EOAs or multisigs accounts for less than 2% of the total supply, suggesting low concentration.

2. Market Risk

2.1 Liquidity


Source: xSolvBTC/SolvBTC Swap Liquidity, Oku Trade, July 12, 2025

Users can swap 27.5 xSolvBTC worth up to $3.2M for SolvBTC within a price impact of 7.5%.

2.1.1 Liquidity Venue Concentration


Source: xSolvBTC DEX Liquidity Pools on BOB, GeckoTerminal, July 12, 2025

The total xSolvBTC liquidity across DEXs on BOB is approximately $6.2M. The primary liquidity hubs are Oku Trade SolvBTC/xSolvBTC 0.05% ($16.4M TVL) and Oku Trade SolvBTC/xSolvBTC 0.01% pool ($0.68M TVL).

2.1.2 DEX LP Concentration

A significant LP concentration is observed within xSolvBTC’s DEX pool, with only two entities providing the majority of its liquidity on BOB. Below is the breakdown (as of July 12, 2025):

2.2 Volatility


Source: xSolvBTC to SolvBTC Price, GeckoTerminal, July 12, 2025

xSolvBTC’s secondary price compared to SolvBTC in the Oku Trade pool currently trades at a slight discount of 0.2%. This aligns with the 0.2% fee charged on xSolvBTC unstaking to SolvBTC.

2.3 Exchanges

xSolvBTC is exclusively traded on DEXs and is not currently listed on any centralized exchange.

2.4 Growth


Source: xSolvBTC Supply on BOB, Dune, July 12, 2025

xSolvBTC’s total supply on BOB has sharply declined from its peak of 1,741 tokens in December 2024 to just 284.8 tokens. The most significant single-day drop occurred on May 12, 2025, when the supply fell by 850 xSolvBTC.

3. Technological Risk

3.1 Smart Contract Risk

Multiple third-party blockchain security firms have audited Solv Protocol’s smart contracts, and the findings were as follows:

All the issues were either fixed, acknowledged, or mitigated.

3.2 Bug Bounty Program

Solv Protocol currently does not have an active bug bounty program. However, in October 2021, the team launched a $50K bug bounty (https://medium.com/solv-blog/solvs-50-000-bug-bounty-program-in-partnership-with-immunefi-5d52d50f7aee) initiative in partnership with Immunefi. They have since confirmed plans to reinstate the program in H2 2025.

3.3 Price Feed Risk

Chainlink data feeds are not yet live on the BOB Network; however, the team has stated that Chainlink expects to complete the integration within two weeks of July 9, 2025.

Since xSolvBTC maintains a 1:1 peg with SolvBTC and distributes yield in the form of reward points (rather than rebasing), we recommend using a BTC/USD feed (once available) in combination with the getValueByShares function. This function reflects the value of xSolvBTC relative to SolvBTC. At present, and likely going forward, given the nature of Babylon and Solv Points rewards, getValueByShares will continue to return the same value as the input, as the price of xSolvBTC remains equal to SolvBTC.

3.4 Dependency Risk

Babylon
A primary source of yield for xSolvBTC is derived from its integration with Babylon, the native Bitcoin staking protocol. While this offers a novel way to earn yield on Bitcoin, it introduces a significant external dependency, as the underlying Bitcoin collateral that backs SolvBTC is actively staked within the Babylon protocol. Consequently, SolvBTC’s value and integrity are systemically exposed to Babylon’s security and operational performance. This includes risks such as potential smart contract vulnerabilities within Babylon’s architecture, and more critically, the risk of “slashing”, where the staked Bitcoin could be penalized or destroyed due to validator misbehavior or technical failures. Any such event would not merely impact the yield but could lead to a permanent loss of the principal collateral backing SolvBTC, directly threatening the asset’s peg to Bitcoin and creating a contagion risk that is entirely outside the direct control of the Solv or BOB ecosystems.

Staking Guardians
The value and yield generation of xSolvBTC directly depend on its designated “Staking Guardians,” Cobo and Ceffu. These custodians are entrusted not just with holding the native Bitcoin but also with managing its interaction with the Babylon staking protocol. This creates a concentrated operational risk; any technical failure, security breach, or internal error within their specific systems could compromise the staking process or lead to the loss of the underlying assets. While Solv Protocol mitigates some contagion by segregating the Bitcoin backing xSolvBTC from other reserves, this does not eliminate the core risk. The integrity of this process is dependent on the Solv Vault Guardian, an intermediary layer tasked with overseeing and protecting the Solv Vaults as they participate in external BTC staking strategies.

Chainlink CCIP
xSolvBTC’s utility is significantly enhanced by its presence on multiple chains, and its movement between networks like Arbitrum and BOB is facilitated by Chainlink’s Cross-Chain Interoperability Protocol (CCIP). This creates a critical dependency. While CCIP is a market-leading solution with robust security features, any unforeseen vulnerability, operational failure, or significant latency event within the CCIP network could directly impair SolvBTC. Such an event could halt all cross-chain transfers, leading to liquidity fragmentation, price discrepancies between chains, and the trapping of user assets on the BOB network, undermining the asset’s core value proposition of efficient multi-chain liquidity.

4. Counterparty Risk

4.1 Governance and Regulatory Risk

The consumer interface is operated by Solv Legos Ltd., a British Virgin Islands company whose Terms of Use (Terms) are governed by Singapore law. The interface is characterised in the Terms as “experimental,” “not regulated by any federal or state agency,” and “not registered with the U.S. SEC,” and it further asserts that the tokens issued are not securities. Under the Monetary Authority of Singapore’s substance-over-form approach, however, the legal character of a token depends on its actual features and the rights it confers. Should xSolvBTC or SolvBTC be deemed a “capital markets product” within the meaning of the Securities and Futures Act or a “digital payment token” under the Payment Services Act, Solv Legos Ltd. would be subject to additional licensing, disclosure, and ongoing compliance obligations. The Terms expressly acknowledge that this regulatory risk is not fully mitigated. Solv team has represented that the protocol conducts no business activities in Singapore and does not target Singapore-based users. After consulting external counsel, the team concluded that Singapore law does not require a formal legal opinion on the classification or regulatory treatment of xSolvBTC.

The Terms and accompanying Disclaimer provide that users assume all blockchain, protocol, personal, regulatory, cybersecurity, liquidity, and market risks, and they contain broad waivers of liability for losses arising from hacks or protocol failures. Solv expressly disclaims any fiduciary, broker, or agency relationship and states that it does not monitor user activity for suitability or compliance. Such disclaimers are common in the sector but would not protect the operator if it were shown to have misrepresented risks or omitted material information.

The Terms permit Solv Legos Ltd. to conduct know-your-customer (KYC) and anti-money-laundering (AML) screening, including on-chain and off-chain checks, and specify that anonymous or pseudonymous transactions are not accepted. Access is contractually restricted for users in, inter alia, the United States, Singapore, Russia, and mainland China, and the Terms prohibit using VPNs to circumvent geo-blocking. The protocol employs Cloudflare-enabled IP geofencing to address jurisdictional and sanctions-related restrictions and engages Fuzzland to perform on-chain wallet screening and AML checks.

Custody of reserve assets is delegated to third-party service providers. The Terms disclaim responsibility for losses resulting from custodian failure and state that Solv Legos Ltd. does not take possession, custody, or control of user assets at any time. Custody of the Bitcoin backing xSolvBTC is provided by Cobo and Ceffu under segregated-wallet arrangements that keep those assets distinct from the reserves supporting SolvBTC. The protocol does not currently use any off-exchange settlement mechanism.

All disputes are subject to binding arbitration administered by the Singapore International Arbitration Centre, and the Terms waive class-action rights. Although the arbitration clause is likely enforceable under Singapore law, it may impose cost and complexity barriers to users seeking redress. No contractual insurance or guarantee fund is provided; any compensation is solely at Solv Legos Ltd.'s discretion. Following a security incident in January 2025, the company publicly committed to “fully compensate verified affected users”. The team has supplied a schedule of user claims, all of which it reports have been fully compensated as of the date of this analysis.

4.2 Access Control Risk

4.2.1 Contract Modification Options

Here are the controlling wallets:

  • Multisig A: A 3/5 threshold Safe multisig, owner of xSolvBTC ERC-20 contract.
  • EAO: Admin and governor of xSolvBTC LST Router contract.
  • Multisig B: A 3/5 threshold Safe multisig, assigned the role of blacklist manager of the xSolvBTC contract and shares 4 owners with Multisig A.

The following contracts power the SolvBTC architecture on BOB:

  • xSolvBTC: ERC-20 contract for the xSolvBTC token on BOB. It is deployed behind an ERC1967Proxy that is controlled by the Multisig A.
  • SolvBTC LST Router: Handles SolvBTC deposits and issuance of xSolvBTC. It is deployed behind an ERC1967Proxy that is controlled by an EOA.
  • Fee Deposit Wallet: Implemented as a GnosisSafeL2 multisig with a 3/5 threshold, used as a deposit wallet for the 0.2% fee collected on xSolvBTC unstaking.

Solv Protocol uses Open Zeppelin’s role-based access control mechanism for handling sensitive functions as follows:

Controlling Address Role Functionality
Multisig A Admin Role Has the privileges to grant minter/burner role to designated accounts
Chainlink CCIP Minter Has the privileges to mint and burn xSolvBTC
- Pool Burner Has the privileges to burn xSolvBTC tokens from any accounts; this role is only granted to the Asset Pool that controls the xSolvBTC.
Multisig B Blacklist Manager Allows accounts to be blacklisted, preventing any xSolvBTC transfers.

4.2.2 Timelock Duration and Function

Solv Protocol has not yet configured a timelock for xSolvBTC contract upgrades. However, the Solv team has committed to implementing a 72-hour timelock mechanism on xSolvBTC contract upgrades.

4.2.3 Multisig Threshold / Signer Identity

The Multisigs A & B, both 3/5 threshold Safes, are controlled by the Solv Core team. Also, the EOA, which holds admin and governor privileges across multiple xSolvBTC contracts, was part of earlier deployment stages and will be migrated to Safe multisig with a signing threshold of 3/5 by the end of July 2025.

Note: This assessment follows the LLR-Aave Framework, a comprehensive methodology for asset onboarding and parameterization in Aave V3. This framework is continuously updated and available here.

Disclaimer

This review was independently prepared by LlamaRisk, a community-led decentralized organization funded in part by the Aave DAO. LlamaRisk is not directly affiliated with the protocol(s) reviewed in this assessment and did not receive any compensation from the protocol(s) or their affiliated entities for this work.

The information provided should not be construed as legal, financial, tax, or professional advice.

1 Like

Building on our earlier comment regarding openUSDT, SolvBTC, and xSolvBTC on BOB, we will coordinate with @ChaosLabs to present a consolidated set of parameters and oracle recommendations for all starting assets for DAO stakeholders’ consideration.

We also want to provide an update on the Solv team implementing several governance and security enhancements on BOB:

Admin Migration

  • Previously, two externally owned accounts—EOA1 and EOA2—held admin control over most SolvBTC and xSolvBTC contracts on BOB.
  • These roles have been migrated to a 3/5 Safe multisig managed by the Solv core team (tx1, tx2).

Governor Role Scope

Timelock and Roles

  • A timelock controller with a 72‑hour delay has been deployed on BOB and assigned the DEFAULT_ADMIN_ROLE over SolvBTC and xSolvBTC ERC‑20 contracts (managing upgrades and minting permissions).
  • The Solv team’s 3/5 multisig has been granted proposer, executor, and canceller roles on the timelock.
  • While the multisig currently retains the DEFAULT_ADMIN_ROLE on the underlying ERC‑20 contracts, this role is scheduled to be revoked shortly as part of the transition to full timelock governance.

Operational Exceptions and Next Steps

  • Contracts requiring rapid response—such as routers, oracles, or contracts whose owner role is governed by the Solv multisig with global pause permission—will remain exempt from timelocks to ensure operational readiness.
  • Additional timelocks (e.g., for xSolvBTC redemption) are planned in Phase 2.
2 Likes

Marc, thanks for your candid feedback and appreciate the offline discussions with ACI. Also extending thanks to other Aave delegates and Avara who have provided additional feedback.

Sharing an update on the latest, as well as the new proposal here for visibility.

Context/What happened so far

BOB has been working closely with ACI, LlamaRisk, ChaosLabs, BGD and Stani/Avara over the last few months to prepare the Aave launch on BOB. We’ve passed temp checks, ARFC, tech assessments, and are finalizing the final market risk assessments as we speak. We’ve received the green light for the deployment across the board.

The Aave market on BOB is positioned as the main place to list new BTC assets and embed Aave deep in the Bitcoin ecosystem, making it the main “backend” for BTC lending/borrowing among retail and institutional partners.

As a BTC-focused chain, all of our efforts are aligned on making Aave the forefront of BTC DeFi and continuously improving/innovating on Bitcoin products: 1-click native BTC deposits (on any Aave instance), trustless BTC bridge via BitVM, native BTC staking yield on BOB, and Aave integrations with BTC-focused distribution partners.

Use cases: BTC LST looping and borrowing stablecoins

When the first proposal was made, the main idea was to bootstrap via BTC looping, allowing holders to lever up on yield-bearing BTC versions.

Over the last 2 months, the focus shifted to borrowing USD stables against BTC assets - driven by market dynamics and feedback from ACI, LlamaRisk and ChaosLabs. Our updated GTM plan (shared with ACI, LlamaRisk, ChaosLabs and BGD for review) conservatively targets bootstrapping at least $100M in stablecoins. This offers better economic alignment, as BTC/USD markets are strong revenue drivers.

Liquidity commitments

We’ve pulled together extensive incentive and liquidity campaigns with Babylon, Solv, Threshold, Chainlink, Optimism, Uniswap, and more. As a result, we estimate achieving at least ~$300M in supply TVL.

This is just the starting point. We are already working on bringing numerous new BTC asset issuers and BTC-related opportunities onto Aave. The market of BTC assets is only growing, with many tier 1 providers planning BTC asset launches in the next year. This is our path to $1M+ per year revenue for the Aave DAO. It’s realistic and obtainable within a year.

Proposal

BOB is bullish on Aave, and we’ve dedicated the majority of our energy and resources this year to make this deployment a success. We understand Aave’s need to protect business interests and are confident to exceed expected targets.

To reinforce our commitment, we have made the following proposal to ACI and Avara:

  • Economic guarantees. BOB will provide economic guarantees for $1M of Aave DAO revenue in the first year, de-risking the launch for Aave. Operational details are being discussed with ACI and Avara.

  • Free 1-click BTC deposit integration. BOB will offer a free integration of native 1-click BTC deposits for the Aave frontend across instances.

  • Distribution leverage. BOB will productize Aave yield strategies on BOB and integrate these strategies into distribution partners (e.g. custodians, wallets, fintechs and other partners), bringing fresh liquidity to Aave.

In return for these strong commitments, we ask for Aave to commit to BOB as the primary BTC DeFi partner, ensuring strong alignment and paving the way for a successful market. As part of the agreement, we ask of Aave the following:

  • Timely deployment: Launching Aave on BOB within the next month, capturing the positive BTC market dynamics.

  • BTC partnership and exclusivity: Aave designates BOB as its selected Bitcoin partner and promotes BOB as the primary BTC-focused deployment. No parallel deployments or promotion of other BTC-focused instances during this deal in the first year.

  • BTC asset listings: Aave on BOB is positioned as the primary venue for launching new BTC wrappers and LSTs/LRTs on Aave that have less than 20k BTC minted on-chain. These assets launch on BOB first to demonstrate PMF/growth over a period of time before they can expand to other Aave deployments.

We believe that this proposal offers strong economic alignment and is a great opportunity for both Aave and BOB to capitalize on the fast-growing Bitcoin DeFi ecosystem.

We welcome feedback from the DAO and look forward to answering any questions.

4 Likes

Thanks @alexei for the updated proposal. The business concerns from @marczeller have been valid and its good too see that BOB took the approach to provide liquidity commitments and revenue guarantees for the market, hopefully establishing a standard for markets that have more tail-end growth risk but enable innovative growth opportunities.

I am ok to support as main BTC focused partner for assets are not directly strategic for Aave (for example bigger BTC wrapper launches from centralized exchanges, fintechs and other high value partners).

I do think that BTC LST looping should be still important strategy to enable high yielding BTC strategies that are pretty much missing now form the Aave ecosystem (most of the high yield opportunities are still offchain).

with these expectations I am able to vote yes on the proposal.

2 Likes

Hello and thanks for the updated version @alexei. Given that Alexei and BOB are making this economic guarantee there is basically no downside for the DAO, unlike with other instances we deployed on in the past where revenue since deployment hasn’t even exceeded deployment and maintenance costs.
Also the highlighting of Aave in several frontends and products in the ecosystem is great to make Aave the no. 1 lending source.
It’s probably fair to also accept BOBs exclusivity demand for a whole year.
Of course this inerhits the risk that other deployments could go with competitor of Aave and we loose momentum.

But as these chains have to prove themselves and the DAO is now way more selective regarding deployments, it’s probably the best way to move on. It will be an interesting experiment, but it should only result in a positive outcome for the DAO and hopefully BOB as well.

That being said, I am supportive of this reworked proposal.

1 Like

Overview

Chaos Labs supports the listing of openUSDT, tBTC, WBTC, and LBTC on Aave’s BOB deployment based on their risk profiles. Our parameter recommendations for these assets can be found in the sections below.

For solvBTC and xSolvBTC, Chaos Labs collaborated closely with the Solv team to improve the internal oracle mechanism and enhance the safety of these assets for listing on Aave. The Solv team was highly responsive and collaborative throughout the process, implementing the necessary changes we recommended. As a result, we also support the listing of solvBTC and xSolvBTC, and our parameter recommendations for these assets are included in this analysis.

Solv Protocol

Solv Protocol serves as both a tokenization and LST provider for the Bitcoin ecosystem, enabling Bitcoin to be utilized across EVM-compatible chains. Users can deposit either native BTC or supported wrapped BTC tokens (such as WBTC, BTCB, BTC.b, and others). Based on user preference, Solv protocol issues either solvBTC or BTC backed liquid staking tokens, such as xSolvBTC (formerly solvBTC.BBN), solvBTC.BERA, and solvBTC.JUP.

xSolvBTC is a Bitcoin LST backed by BTC staked to the Babylon network, inheriting Babylon’s associated slashing risk — a topic we explored in our Staking Penalties on Babylon’s Bitcoin Staking Protocol post. It is exclusively minted and redeemed 1:1 using solvBTC.

solvBTC is a non-yield-bearing token backed by native BTC and supported Bitcoin derivatives. It is not staked in any DeFi protocol, making it free from smart contract risks and slashing exposure. Users can mint solvBTC using native BTC or wrapped variants. However, redemptions are limited to Bitcoin derivatives, redeeming solvBTC for native BTC is not currently supported.

Issuing BTC-based wrappers (solvBTC) and BTC LSTs (xSolvBTC) is inherently complex due to the lack of a native smart contract layer on the Bitcoin network. While these tokenized versions of BTC are deployed on EVM chains, the underlying transactions and value typically reside on the Bitcoin network. To streamline this process, Solv Protocol has introduced the Staking Abstraction Layer (SAL), a core infrastructure component that abstracts away these complexities and simplifies integration across chains.

SolvBTC

solvBTC is a non yield bearing token issued by Solv Protocol, designed to represent BTC on EVM-compatible chains. It is backed by native BTC and a set of supported wrapped BTC assets. Unlike liquid staking tokens, solvBTC is not staked in any protocol and therefore avoids exposure to smart contract risk, slashing penalties, or protocol-level failures. Its primary role is to serve as a foundational BTC wrapper within Solv Protocol’s infrastructure, including its use as the base asset for minting xSolvBTC.

Mint

When users want to mint solvBTC, they can do so using native BTC and a range of wrapped BTC assets, including WBTC, cbBTC, FBTC, tBTC, BTCB, BTC.b, M-BTC, and RBTC, across 14 different networks. Minting solvBTC with native BTC is only supported on BNB Chain, meaning the minted solvBTC will initially be received on BNB Chain. However, it can be bridged to other chains via Chainlink’s CCIP.

To mint solvBTC on EVM based chains, the user calls the createSubscription() function in the SolvBTCRouter contract. Within this function, the OpenFundMarket.subscribe() function is invoked, which calculates how much value the user will receive based on the deposited currencyAmount.

In the implementation of OpenFundMarket.subscribe(), we see that:

Screenshot 2025-08-08 at 4.42.13 PM

However, the Net Asset Value (NAV) used in the calculation is determined based on the poolInfo.valueDate, which is specific to each poolID, in relation to the current block.timestamp.

  • If block.timestamp < poolInfo.valueDate, the NAV is hardcoded to 1.

  • If block.timestamp > poolInfo.valueDate, the NAV is dynamically pulled from a price oracle via the NavOracle contract using the getSubscribeNav() function.

Based on the NAV, the amount of solvBTC tokens minted is determined accordingly.

NavOracle.setSubscribeNavOnlyMarket() function is used to update the onchain NAV value, and the SetSubscribeNav event is emitted once the NAV is set. Looking at the NAV values for the top BTC wrappers backing solvBTC it appears that the NAV is updated a few times per week for each asset on average, but it is consistently set to 1.

To mint SolvBTC via a native BTC deposit on Bitcoin network, users send BTC to designated addresses managed by a trusted custodian.

An oracle system continuously monitors the Bitcoin network to ensure transaction finality. It verifies critical details such as output scripts, block confirmations, and transaction integrity, ensuring each deposit meets stringent security standards.

Once a deposit is confirmed, the Staking Abstraction Layer (SAL) generates a deposit proof, a data package containing the depositor’s transaction details, the amount of Bitcoin deposited, and the intended recipient’s address on the destination chain.

This deposit proof is then relayed to the destination chain, currently supported only on BNB Chain, where a minting smart contract validates the proof against internal records and reserve balances. Upon successful verification, the contract mints an equivalent amount of SolvBTC and transfers it to the user’s wallet.

Redemption

Redemptions work in reverse compared to minting, with a few additional nuances. To initiate a redemption, the user calls the createRedemption() function on the SolvBTCRouter contract. The user must send their solvBTC tokens back to the contract, which burns them and mints an ERC-721 redemption token. This token represents the user’s claim on a future redemption payout and is sent to the user’s address. ERC-721s are non-fungible tokens and can be transferred or sold on secondary markets. This allows users to sell their future redemption payout rights in advance at a discount to access immediate liquidity, similar to how factoring works in traditional finance. However, while this is technically possible, active and liquid secondary markets for such discounted future claims have not yet materialized onchain.

Once the redemption request is created, it is processed off-chain by the Solv Protocol.

According to Solv Protocol, user redemption requests are expected to be processed within 7 days. Requests submitted on weekends or public holidays are processed collectively on the following business day.

Redeeming native BTC on the Bitcoin network is not currently supported — minting with native BTC into solvBTC is a one-way process for now. As a result, you can only redeem wrapped BTC assets such as WBTC, cbBTC, tBTC, FBTC, and others.

After the redemption is settled off-chain, the user can claim their underlying collateral by calling the claimTo() function on the MultiRepayableDelegate contract. This triggers MultiRepayableConcrete.claimableValue() for the specific redemption ID. The claimableValue() function calculates the claimable amount based on the redemption NAV, which is updated via an oracle. However, similar to how the mint NAV is handled, it is updated infrequently and is often set to 1, effectively setting the exchange rate between solvBTC and other wrapped BTCs to 1:1.

Once the claimable value is determined, the corresponding ERC-3525 tokens (acting as receipts) are burned, and the underlying assets are unlocked and made available to the user.

In addition, Solv Protocol also allows redemptions to be canceled before being claimed and enables matured redemptions to be claimed in multiple parts if needed.

Redemption Processing Times on BOB

According to Solv Protocol, most solvBTC redemptions are expected to be completed within 7 days. In practice, actual redemption times vary based on the size of the request, with larger redemptions often prioritized.

On the BOB Chain, high-value redemptions—particularly those exceeding 40 BTC—are frequently processed within a single day, reflecting the protocol’s operational preference to expedite larger withdrawals.

As illustrated in the chart below, over 65% of all redemption request have been processed and claimed in under 7 days, while nearly 90% have been completed within 8 days.

When analyzing redemptions by total value, the trend becomes even more pronounced: approximately 70% of solvBTC redeemed by volume has been claimed within 1 day. This indicates a clear prioritization of high value redemptions.

Market Capitalization

As of now, solvBTC has a total supply of approximately 9,700 tokens distributed across 13 EVM-compatible chains.

On the BOB network, solvBTC was deployed approximately 11 months ago. Following its initial launch, solvBTC supply on BOB surged to around 2,500 tokens. However, circulating supply on BOB has since stabilized around 665 solvBTC.

Notably, over 35% of the solvBTC supply on BOB is currently deposited into Pell Network, the leading BTC restaking protocol on the network. These deposits are mostly underutilized and passively earning Solv and BOB points.

Liquidity

The aggregated liquidity for solvBTC currently stands at approximately $26.7 million, distributed across three primary pools. However, the composition of this liquidity is important for evaluating actual onchain depth.

Two of these pools are paired with xSolvBTC, accounting for $16 million in total. While these pools are relevant for internal conversions within the Solv ecosystem, they do not materially contribute to solvBTC’s standalone liquidity, as both assets are tightly coupled and rely on solvBTC as collateral.

The most relevant source of external liquidity is the solvBTC/WBTC pool, which holds approximately $15.4 million in total value. Within this pool, $5.48 million is held in WBTC (equivalent to 50.38 WBTC), providing meaningful exit liquidity for solvBTC holders.

This pool currently allows the sale of up to 50 solvBTC (≈ $5.42 million) into WBTC with less than 2.5% price impact.

However, WBTC itself is highly illiquid on the BOB network. Most of its liquidity is concentrated in pairs against other Bitcoin derivatives such as tBTC and fBTC, rather than against stablecoins. The primary WBTC/USDT pool holds only around $200,000 in total liquidity, with $135,000 in USDT available. As a result, users can only trade approximately 0.5 solvBTC (~$58,405) into USDT incurring more than 8% price impact.

This introduces a second order liquidity constraint: while solvBTC may appear liquid via its WBTC pair, converting WBTC to stablecoins on BOB is highly constrained, limiting solvBTC’s practical liquidity for users seeking stablecoin exit routes. This has direct implications for onchain liquidations, liquidators attempting to repay debt positions collateralized by solvBTC may face slippage or capital inefficiencies when trying to off-ramp to stable assets, especially under volatile conditions or cascading liquidation events.

Backing

Historically, solvBTC has been backed by a combination of native BTC held on the Bitcoin network and a variety of BTC derivatives (such as M-BTC, WBTC, BTC.b, BTCB, and others) sourced from multiple chains. At times, the share of solvBTC backed by BTC derivatives exceeded that of native BTC, introducing depeg risk tied to the underlying wrappers. This was particularly relevant given the varying custody models, liquidity profiles, and risk characteristics across these derivative tokens.

This composition exposed the protocol to potential backing integrity issues in the event of a deviation between the market value of the BTC derivatives and native BTC, particularly during stress scenarios or wrapper specific incidents.

However, since June 2025, the backing composition has significantly improved. More than 99% of solvBTC supply is now backed by native BTC held in custody directly on the Bitcoin network, with verifiable custody infrastructure. This shift effectively eliminates the risk of collateral depegging, as solvBTC is now overwhelmingly collateralized by Bitcoin in its canonical, base-layer form rather than synthetic or wrapped representations.

This strengthening of solvBTC’s collateral base as a BTC wrapper, improves its suitability for use as collateral in DeFi protocols, and reduces systemic risk associated with derivative based reserves.

Bridging

SolvBTC leverages integrations with Chainlink’s Cross-Chain Interoperability Protocol (CCIP) to enable cross-chain transactions. This makes solvBTC available across a wide range of networks, including Ethereum, BNB Chain, Arbitrum, Merlin, Avalanche, Mantle, Bob, Base, Linea, Mode, Taiko, Bera, Corn, Rootstock, Sei, Soneium, Sonic, zkSync Era, AILayer, Core, and Bitlayer.

Risks

1. Collateral Risk

Historically, solvBTC carried indirect exposure to the risks associated with derivative Bitcoin wrappers (such as WBTC, BTCB, BTC.b, and others), since these assets were used to collateralize a portion of the solvBTC supply. This introduced depeg risk in cases where the market value or solvency of the derivative deviated from native BTC.

As covered in the Backing section, this risk has been fully mitigated as of June 2025. Currently, over 99.5% of solvBTC is backed by native BTC held in verified custodial infrastructure on the Bitcoin network. This significantly strengthens solvBTC’s risk profile and removes dependency on third-party wrapper integrity. However, it remains important to monitor the collateral composition going forward to ensure continued collateral quality.

2. Custodian Risk

solvBTC depends on custodians to securely hold native BTC and process associated transactions. This creates exposure to operational and counterparty risks inherent in any custodial setup.

In the event of custodian downtime or service disruption, solvBTC redemptions may be temporarily paused. In more extreme scenarios, such as a loss of custody keys, user funds could be at risk. While this type of risk is challenging to quantify and may vary across custody providers, it should be acknowledged as a critical component of solvBTC’s trust model.

3. Slashing Risk via xSolvBTC

While solvBTC itself is not staked and is free from slashing exposure, it may inherit slashing risk indirectly through its relationship with xSolvBTC.

xSolvBTC is backed by BTC staked to the Babylon network and carries slashing risk under Babylon’s validator slashing conditions. Because xSolvBTC can be redeemed for solvBTC at a 1:1 rate, solvBTC becomes vulnerable in edge cases where mass redemptions are triggered immediately following a slashing event, before the solvBTC:xSolvBTC exchange rate is updated to reflect the loss.

This creates a scenario where slashing losses could be socialized across solvBTC holders, should all xSolvBTC holders redeem for solvBTC at par before pricing adjustments occur. Although the current Babylon slashing penalty is limited to just 0.1%, capping the immediate risk impact, this parameter may increase over time, warranting close monitoring.

Mitigation Strategy:

To address this potential arbitrage vector and protect solvBTC holders, we recommend that Solv Protocol implement an off-chain Risk Oracle that monitors slashing transactions on the Bitcoin network. Upon detecting a slashing transaction, the oracle should automatically freeze xSolvBTC minting and redemption contracts across all supported chains. This mechanism would prevent exploitative behavior and provide time for protocol maintainers to update pricing or take corrective action.

LTV, Liquidation Threshold, and Liquidation Bonus

Based on the BOB team’s expected incentives to deepen onchain markets, we recommend adjusting solvBTC’s risk parameters to reflect a cautiously optimistic outlook. Specifically, we propose setting the LTV ratio at 75%, the LT at 70%, and the LB at 10%.

These parameters remain conservative relative to other networks, aiming to limit systemic risk while enabling basic capital efficiency.

Supply & Borrow Caps

Given solvBTC’s current circulating supply of approximately 665 tokens on the BOB network and the relatively limited depth of onchain stablecoin liquidity for BTC pairs, we recommend a supply cap of 100 solvBTC and a borrow cap of 80 solvBTC.

These conservative initial limits are intended to contain systemic exposure and allow for controlled onboarding of solvBTC into the lending markets. As market liquidity these caps can be revisited and adjusted accordingly.

E-Mode

We propose an E-Mode configuration where solvBTC is used exclusively as collateral and WBTC is borrowable. We recommend setting the LTV at 80%, the LT at 82%, and the LB at 4% to support efficient BTC-correlated borrowing while containing risk within a high correlation asset pair.

Oracle Configuration/Pricing

For solvBTC, given that it is fully backed by native BTC held on the Bitcoin network, we propose using the BTC/USD Chainlink price feed as the sole pricing source.

xSolvBTC

xSolvBTC is a yield bearing LST issued by Solv Protocol, backed by BTC staked to the Babylon network. xSolvBTC is exclusively minted and redeemed 1:1 against solvBTC, meaning solvBTC functions as the gateway asset for entering and exiting xSolvBTC positions.

With the latest contract upgrade, minting and redemption of xSolvBTC are facilitated through the XSolvBTCPool contract and are based on the current Net Asset Value (NAV) of xSolvBTC, which is set by an admin via the XSolvBTCOracle contract. This upgrade enables atomic redemptions, allowing users to convert xSolvBTC to solvBTC in a single transaction without delay.

Mint

To mint xSolvBTC, users call the deposit() function on the XSolvBTCPool contract and supply an amount of solvBTC. The process is as follows:

  • The specified amount of solvBTC is transferred from the user and burned.

  • The contract calls getSharesByValue() to calculate how many xSolvBTC shares to mint. The logic uses the current NAV:

  • NAV is fetched from the XSolvBTCOracle contract, which is a internal oracle that reflects the latest price of xSolvBTC in solvBTC.
  • The calculated number of xSolvBTC shares is minted and transferred to the user.

This process is atomic, finalized within a single transaction, and relies directly on the most recent NAV published to the onchain oracle. Minting is only permitted if the depositAllowed flag is enabled by the admin.

Redemption

To redeem solvBTC, users call the withdraw() function function on the XSolvBTCPool contract and specify the number of xSolvBTC shares to redeem. The following steps are executed:

  • The xSolvBTC shares are burned from the user’s balance.

  • The contract calls getValueByShares() to determine the solvBTC amount owed:

  • A withdrawal fee is applied to the calculated amount. The contract allows the fee to be configured and it is currently set at 0.05% onchain, following a recent reduction from the previous rate of 0.2%

  • The fee portion is sent to a designated fee recipient.

  • The remaining solvBTC is minted and transferred to the user.

To prevent abuse or manipulation, the contract enforces an upper bound via the maxMultiplier parameter, which is currently set to 1.5. This means that the solvBTC redemption amount cannot exceed 1.5 times the implied solvBTC value of the user’s xSolvBTC shares based on the most recently published NAV.

NAV Updates

The NAV is not calculated dynamically, but rather manually set by an admin via the XSolvBTCOracle. Updates must adhere to the following constraints:

  • NAV cannot be updated more than once in any 24-hour period.

  • NAV growth is capped by the withdrawFeeRate parameter (e.g., 0.05%), ensuring it cannot increase beyond acceptable bounds in a single update.

  • NAV growth per update is capped at 1%, even if the withdrawFeeRate parameter is set higher than 1%, ensuring price adjustments remain within safe bounds.

The NAV was set to 1 during the initial deployment of the XSolvBTCOracle and has not been updated since. This static initialization occurred when the XSolvBTCPool was first configured, and no further NAV changes have been made to date.

Reward Distribution

Solv Protocol currently supports two types of LSTs. The first category consists of NAV increasing LSTs, where the NAV is periodically updated to reflect generated rewards. In such cases, holders receive more of the base asset upon redemption as the NAV accrues over time.

By contrast, xSolvBTC is not a NAV increasing LST. Its NAV remains fixed at 1, and rewards are not embedded into the NAV. Instead, xSolvBTC holders receive rewards through direct airdrops, distributed separately from the redemption mechanism.

Market Capitalization

xSolvBTC was launched approximately 10 months ago (in August 2024) on the BOB network. xSolvBTC has been deployed across multiple EVM compatible chains and currently maintains a circulating supply of approximately 5,340 tokens.

On the BOB network specifically, xSolvBTC supply peaked in late 2024 at around 1,750 tokens, driven by early adoption and staking demand. However, supply has since declined and stabilized around 370.

Approximately 80% of the xSolvBTC supply on BOB is currently deposited in a Uniswap pool, where it is paired with solvBTC.

Liquidity

There are three primary liquidity pools for xSolvBTC on the BOB network. Two of these are paired with solvBTC, comprising approximately $16 million in total liquidity. However, these pools have recently become redundant, as xSolvBTC and solvBTC can already be converted atomically via the protocol. As a result, they no longer provide a meaningful enhancement to xSolvBTC’s standalone liquidity.

The third pool is against WBTC; however, the depth on the WBTC side is currently negligible, with only 0.37 WBTC (~$41,000) available. As a result, external liquidity for xSolvBTC is extremely limited.

For example, swapping just 0.5 xSolvBTC (~$55,265) into USDT would incur approximately 9% price impact. This lack of stablecoin liquidity severely limits the ability to efficiently liquidate xSolvBTC positions that underwrite stablecoin debt.

It is important to note that, xSolvBTC benefits from its ability to be atomically converted to and from solvBTC. This atomic convertibility ensures that xSolvBTC can directly inherit solvBTC’s onchain liquidity without the need for separate deep liquidity pools. However, as previously discussed, solvBTC’s onchain liquidity on BOB is also highly limited.

Bridging

xSolvBTC supports cross-chain transfers via Chainlink’s CCIP, the same mechanism used by solvBTC.

This bridging infrastructure allows xSolvBTC to be moved between chains, facilitating cross-chain utility without the need for external custodians.

Risks

xSolvBTC inherits the base risks associated with solvBTC, including custodial risk and operational security of solvBTC’s underlying system. However, it also introduces additional risks due to its integration with the Babylon network, which introduces slashing risk and smart contract risk on top of solvBTC’s existing risk profile.

As detailed in our Staking Penalties on Babylon’s Bitcoin Staking Protocol analysis, the Babylon protocol enforces a slashing mechanism that penalizes misbehavior. Currently, the maximum theoretical slashing penalty for BTC staked via Babylon is set at 0.1%. However, this penalty is subject to change and may increase in the future as more Babylon Supercharged Networks (BSNs) are launched and Babylon’s economic security model evolves.

This creates a potential mismatch with the redemption fee structure in the xSolvBTC system. The current redemption fee for converting xSolvBTC back to solvBTC is 0.05%, which is lower than the maximum possible slashing penalty. In the event of a slashing incident on Babylon, sophisticated users could quickly redeem their xSolvBTC for solvBTC before the NAV is updated manually to reflect the reduced backing. This behavior can cause the backing loss to be socialized across all solvBTC holders, depending on the size of the slashing and the number of xSolvBTC holders redeeming before the exchange rate is updated. As a result, solvBTC holders with no exposure to xSolvBTC may be penalized, or the remaining xSolvBTC holders after the exchange rate adjustment may be disproportionately impacted.

Even though the slashing penalty is currently set at a relatively low 0.1%, the redemption fee discrepancy creates a structural risk that can impact solvBTC holders under certain conditions.

To mitigate this risk while preserving the atomic convertibility between solvBTC and xSolvBTC, we recommend that the Solv protocol integrate a slashing aware risk oracle. Such an oracle would allow the protocol to automatically pause redemptions from xSolvBTC to solvBTC upon detection of a slashing event on Babylon. This would prevent the propagation of slashing losses to solvBTC holders and help ensure fair treatment across both token holders.

We also recommend that Aave integrate with the same slashing aware oracle to automatically freeze solvBTC and xSolvBTC markets in the event of a Babylon slashing incident. This coordination between protocol and lending markets is essential to avoid value extraction, maintain fair pricing, and limit arbitrage opportunities during slashing-related volatility.

LTV, Liquidation Threshold, and Liquidation Bonus

Given the structural similarity and atomic convertibility between xSolvBTC and solvBTC, we propose applying the similar conservative parameters to xSolvBTC initially.

These restrictive parameters are intended to discourage general usage of xSolvBTC as collateral outside of designated E-Mode categories, such as the xSolvBTC_solvBTC and xSolvBTC_WBTC e-modes.

Supply & Borrow Caps

We propose a supply cap of 50 xSolvBTC and a borrow cap of zero. These limits are intended to minimize lending market exposure to an asset that carries slashing risk and has the ability to claim BABY rewards. Given the lack of a clear use case for borrowing xSolvBTC, borrowing is not enabled.

E-mode

To support capital efficient usage of xSolvBTC, we propose two E-Mode configurations.

The first is a dedicated E-Mode pairing xSolvBTC with solvBTC. In this setup, xSolvBTC would be enabled exclusively as collateral, while solvBTC would be borrowable only. We recommend setting the LTV at 83%, the LT at 85%, and the LB at 3%. This configuration facilitates efficient intra-protocol leverage while preserving risk containment, particularly given the current liquidity constraints on the BOB network.

The second proposed E-Mode category groups xSolvBTC with solvBTC and WBTC to enable broader BTC-correlated collateral usage. In this configuration, xSolvBTC remains the sole collateral asset, while both solvBTC and WBTC are borrowable. Given the additional liquidity and price volatility considerations associated with WBTC, we recommend a slightly more conservative risk posture: an LTV of 80%, LT of 82%, and a 4% Liquidation Bonus. This E-Mode category expands borrowing flexibility while preserving appropriate liquidation margins.

Oracle Configuration/Pricing

We recommend pricing xSolvBTC using a composite mechanism that accounts for both its underlying asset exposure and potential internal oracle risk. Specifically, we suggest using Chainlink’s BTC/USD price feed as the primary feed, combined with the onchain xSolvBTC/solvBTC exchange rate published via Solv’s internal oracle.

Although xSolvBTC is a yield bearing token, it does not currently accrue value directly into the token. Instead, staking rewards are distributed separately to users. As a result, the exchange rate between xSolvBTC and solvBTC does not increase monotonically, and is currently fixed at 1. Furthermore, slashing events on Babylon can reduce the value of staked BTC, necessitating a pricing model that can account for such negative events.

To protect the protocol in the event that Solv’s internal oracle is compromised, we propose introducing a cap adapter, similar to the approach used for stablecoins. This adapter would enforce an upper bound on the xSolvBTC/solvBTC exchange rate used in pricing calculations. We recommend setting the price cap at 1.04, meaning the protocol would never treat xSolvBTC as being worth more than 1.04 times the value of solvBTC, regardless of the internal NAV. This provides a buffer against manipulation while preserving upside flexibility for future yield accrual mechanisms.

In the future, if Solv Protocol chooses to internalize xSolvBTC’s value accrual, such that the token automatically accrues yield and trades at a structural premium to BTC and solvBTC, similar to the expected transition of LBTC, the cap adapter can be upgraded to a CAPO adapter.

This composite approach, anchoring to BTC/USD, incorporating the solvBTC reference price, and enforcing a cap on internal conversion rates, offers a robust and conservative pricing configuration for xSolvBTC in its current form.

Collaboration with Solv Protocol on xSolvBTC Safety Improvements

Chaos Labs has worked closely with the Solv team to enhance the safety of xSolvBTC for listing on Aave. This collaboration has focused on two main areas:

1. Internal Oracle Mechanism for Minting and Redemption Pricing

Negative Rebase Support – In the original implementation, the xSolvBTC internal exchange rate oracle only allowed monotonically increasing values, meaning it could not reflect a drop in value after a slashing event. We recommended enabling negative rebases to allow the oracle to adjust downward if necessary. The Solv team has implemented this functionality.

Update Frequency Safeguard – To reduce manipulation risk, we suggested introducing a minimum time interval between consecutive oracle updates. The Solv team implemented a safeguard that limits oracle updates (up or down) to once per day.

Update Magnitude Cap – The Solv team has also capped per-update changes at the withdrawFeeRate (currently 5 basis points). To further protect against manipulation of the withdrawFeeRate itself, an additional safeguard was added: updates cannot exceed 100 basis points in either direction per function call, even if the withdrawFeeRate is increased. For example, if the withdrawFeeRate is set to 50%, the oracle update would still be capped at 1%.

2. Atomic Redemption Risk Management

xSolvBTC can be redeemed atomically for solvBTC. In a slashing event, the penalty could exceed the withdrawFeeRate, creating a risk where sophisticated holders frontrun the negative rebase by redeeming before the adjustment is applied.

We recommended adding a freeze function to temporarily halt redemptions in such scenarios. This would allow Solv Protocol to prevent redemptions until the slashing penalty is reflected in the exchange rate. The Solv team has not yet implemented this functionality but is actively considering it. The long term plan should be to integrate such a freeze mechanism with a slashing-aware Risk Oracle that can trigger freezes automatically without human intervention.

While the absence of this feature leaves a potential risk, the existing oracle safeguards reduce the likelihood of significant exploitation. We therefore do not consider its current absence a blocker for listing xSolvBTC on Aave.

OpenUSDT

OpenUSDT (oUSDT) is an interoperable stablecoin issued to unify fragmented USDT liquidity across multiple blockchain networks within the OP Superchain ecosystem. Built through a collaboration among Chainlink, Hyperlane, Celo and Velodrome, OpenUSDT utilizes a burn and mint architecture underpinned by Chainlink’s CCIP and Hyperlane’s messaging infrastructure. This approach ensures that each unit of oUSDT is always backed 1:1 by native USDT.

It supports both the XERC20 and SuperchainERC20 token standards, enabling oUSDT to operate seamlessly across EVM chains. This structure allows for native asset delivery across multiple chains without requiring bespoke token deployments or vendor specific bridge solutions.

Superswap

Superswap is Velodrome’s onchain cross-chain swap infrastructure, built as a public good for the Superchain. Its goal is to make interchain swaps feel as seamless as local swaps.

Superswaps allow users to swap tokens across different chains in a single transaction flow. Rather than requiring manual bridging followed by a swap on the destination chain, Superswaps combine the two steps. This experience is enabled by Hyperlane’s Interchain Accounts (ICAs), which let contracts on the origin chain remotely execute swaps on the destination chain on behalf of the user.

The Superswap process works as follows:

  1. The user initiates a token swap on Chain A.

  2. Velodrome converts the token into oUSDT on Chain A.

  3. oUSDT is bridged to Chain B using Hyperlane’s Warp Routes.

  4. Velodrome swaps oUSDT into the desired token on Chain B.

  5. The user receives the final token on Chain B in one seamless transaction flow.

OpenUSDT as an Intermediary Stablecoin

A central design element of Superswaps is the use of a stable, fungible intermediary asset to transfer value across chains. OpenUSDT fulfills this role by serving as the intermediary stablecoin.

This design offers several advantages. First, it ensures stable value transfer, as oUSDT is backed 1:1 by native USDT, providing a medium of exchange. Second, it enables unified liquidity routing by using oUSDT as the common asset for all cross-chain swaps. Finally, oUSDT’s compatibility with both XERC20 and SuperchainERC20 token standards ensures broad interoperability, allowing Superswaps to initiate transactions seamlessly across both EVM and non-EVM environments.

Mint

The minting of oUSDT is enabled through a lock and mint mechanism centered around designated hub chains, currently Ethereum and Celo. On each hub chain, a contract called the XERC20Lockbox is deployed. Users initiate the minting process by depositing native USDT into the XERC20Lockbox on either Ethereum or Celo. Upon receiving the deposit, the protocol mints an equivalent amount of oUSDT on the user’s specified destination chain, maintaining a 1:1 backing ratio. This architecture ensures that every oUSDT token in circulation is fully collateralized by USDT locked on a canonical hub chain, enabling secure and verifiable cross-chain issuance without requiring users to interact with multiple bridge interfaces.

As of now, the majority of oUSDT’s collateral resides on Ethereum, with approximately 4.38 million USDT deposited into the Ethereum XERC20Lockbox. In contrast, the Celo hub currently holds around 565,000 USDT. This distribution reflects the dominant role of Ethereum as the primary source of backing for oUSDT across the ecosystem.

Redemption

Redemptions of oUSDT can be initiated from any supported chain, the corresponding amount of oUSDT is burned on the origin chain, and an equivalent amount of USDT is released to the user on one of the designated hub chains, either Ethereum or Celo.

The redeemed USDT is drawn directly from the XERC20Lockbox contract on the selected hub chain. Redemptions typically settle within a few minutes, enabling fast and reliable access to native USDT.

Market Capitalization & Liquidity

Since its introduction in March 2025, OpenUSDT has seen moderate adoption, reaching a circulating supply of approximately 4.8 million tokens across all Optimism chains. The majority of this supply, around 4.3 million, is on the Base chain. In contrast, the BOB chain has seen minimal adoption, with only 32 oUSDT in circulation. Due to its limited supply on the BOB chain, OpenUSDT effectively has no DEX liquidity on BOB.

There is an expectation that the existing USDT supply on BOB will eventually migrate to oUSDT, aligning with the broader goal of liquidity unification across the Superchain. The BOB team has indicated that there are upcoming LP commitments to support onchain oUSDT markets. However, these commitments have not yet materialized onchain, and without publicly verifiable data, it is not currently possible to assess the sufficiency or reliability of future oUSDT liquidity on the BOB network.

Bridging

OpenUSDT relies on Chainlink’s CCIP and Hyperlane’s secure cross-chain messaging solutions to enable bridging and interoperability across supported blockchain networks. This bridging infrastructure allows users to transfer oUSDT across chains within the OP Superchain ecosystem.

Risks

Hub Chain Dependency

Redemptions of oUSDT rely on the availability of Ethereum and Celo, where the backing USDT is held in XERC20Lockbox contracts. If either hub chain experiences downtime, users may be temporarily unable to redeem oUSDT. This risk is more acute for Celo, which, as a newer chain, may face higher chances of instability. Extended outages could delay redemptions and limit access to underlying USDT until the affected chain resumes normal operations.

Bridge and Messaging Layer Risk

The security of oUSDT’s cross-chain functionality depends on the integrity of Chainlink’s CCIP and Hyperlane’s messaging infrastructure. Any vulnerabilities, misconfigurations, or consensus failures in these layers could disrupt minting, redemptions, or interchain routing. While both systems are designed with robust security assumptions, the multi-layered architecture increases the surface area for potential failures or attacks.

Liquidity Risk

Although future liquidity commitments have been suggested, the absence of concrete and verifiable liquidity provisioning raises concerns about usability, slippage, and price execution on BOB network.

LTV, Liquidation Threshold, and Liquidation Bonus

We recommend that oUSDT not be enabled as collateral at this stage. While the asset is fully backed, it currently lacks sufficient onchain liquidity on the BOB network to support safe liquidation in the event of defaults. Until deeper and verifiable liquidity is established, the LTV, LT, and liquidation bonus should all be set to zero.

Supply & Borrow Caps

To account for the possibility of near term migration of native USDT to oUSDT and anticipated LP commitments, we propose an initial supply cap of 300,000 oUSDT and a borrow cap of 250,000 oUSDT. These limits can be revised upward in response to verified improvements in BOB side liquidity and usage. This conservative approach ensures protocol safety while allowing for gradual adoption and organic growth of oUSDT utility on BOB.

Oracle Configuration/Pricing

Given that each oUSDT token is fully backed 1:1 by native USDT, it is recommended to use the existing Chainlink USDT/USD price feed for oracle configuration. Since oUSDT does not introduce any independent market dynamics or deviation from USDT’s value, a separate oracle is not required.

Additional Asset Listings: tBTC, WBTC, LBTC

In our January 2025 Bob deployment post, we proposed the inclusion of tBTC, WBTC, and LBTC as initial listing candidates but deferred the risk parameterization. We now revisit these assets with updated supply and liquidity metrics, and propose conservative listing parameters reflecting current conditions on Bob.

Asset Overview

While tBTC and WBTC have moderate liquidity, they lack meaningful stablecoin pairs and do not accrue yield or points. LBTC, on the other hand, accrues BABY yield and incentive points, but its liquidity is highly constrained, selling just 1.45 LBTC ($159,231.99) to WBTC or tBTC incurs 10% slippage.

Risk Configuration

Due to the current lack of stablecoin liquidity on the Bob network, these assets should have limited collateral use. tBTC and WBTC should be configured as borrow-only assets that can be utilized within E-Modes but not as collateral. LBTC, which accrues yield and Babylon points, should be the sole collateral asset within a BTC-correlated E-Mode that includes tBTC and WBTC as borrowable assets.

Although the LBTC to WBTC and LBTC to tBTC trading pairs are currently illiquid, where even relatively small trades incur significant price impact, the Bob team has outlined upcoming liquidity incentives and received LP commitments aimed at improving market depth. Based on this expectation, we have adjusted the risk parameters to be slightly less conservative than they would otherwise be, while still accounting for the current state of liquidity.

Specification

Following the above analysis, we recommend the following parameter settings:

E-mode (xSolvBTC_SolvBTC)

E-mode (xSolvBTC_WBTC)

E-mode (solvBTC_WBTC)

E-mode (LBTC_BTC Correlated)

Disclaimer

Chaos Labs has not been compensated by any third party for publishing this recommendation.

Copyright

Copyright and related rights waived via CC0

1 Like

To address your asks in order for clarity.

  1. Timeline: We cannot commit to a one month timeframe for deployment, however we will make an effort to prioritise this deployment with Service Providers.

  2. BTC partnership and exclusivity:
    We confirm that BOB will be the sole BTC L2 for Aave. In exchange we ask for exclusivity as the lending partner on BOB network. TO be clear this means there should be no communication, partnership, airdrop, or incentives to any other lending protocols on BOB network.

  3. BTC asset listings:
    We will make best efforts to deploy BTC LSTs and LRTs on the BOB instance as the first instance for deployment when asset onboardings are requested by the BOB team. However, as we cannot control asset issuers’ choices of chains to deploy on or liquidity depth, and as risk and technical review for new assets cannot be committed to prior to review, we cannot commit to this where onboarding to BOB at the exclusion of other chains would work against broader Aave business interests, agreements entered into with other chains and protocols, or risk and technical considerations.

7 Likes

Some feedback from my side (important clarification, this is my opinion as AAVE holder and has no relation with my involvement on BGD Labs and the workflow to activate Aave on BOB network).

First of all, I think it is a good initiative to bring these types of partnership proposals to the governance forum, to, amongst others, set precedents for upcoming networks.
The reality is that ACI initially pushed against an activation of Aave on BOB has not much to do with BOB itself, but about historic cases of network activations: for new network candidates, the Aave DAO invests very substantial resources and brings something that simply can’t be achieved any else, the most trusted liquidity protocol for the users of the network, but also a huge vote of confidence of the network fitting the standards to host Aave.

Now, regarding the proposals part from BOB, let’s go point by point:

  • Economic guarantees. A $1m floor revenue means that BOB will step in to cover the difference if the revenue of Aave from RF in the first year doesn’t reach $1m. Considering rates, RF configurations on other networks, roughly we could say that in the other of $150m in outstanding borrowings would be required.
    Considering previous activations of Aave considered successful, this seems reasonable, but as I comment in my following section, I don’t think it is enough.
  • Free 1-click BTC deposit integration. This is not any type of offer to the DAO: the frontend is referred to as “Aave frontend” has no relation with the DAO (aside from the DAO funding its development in the past), it is proprietary software of Avara, and should not be part of any negotiation here.
  • Distribution leverage. This is just expected, not sure why it should be some type of benefit for the DAO. The point here is that custodians, wallets, fintechs, etc, trust Aave, so here the benefit is from the DAO towards BOB, not the opposite.

Regarding the returns from the Aave DAO to BOB component, this is pretty misdirected: the return of Aave to BOB is the presence of the protocol and the investment the DAO is doing (e.g. activation and evaluation via service providers, maintenance to BOB) for free, if we consider that is on the best interest of BOB to grow its network to levels where the Aave protocol generates the floor revenue.

Let’s be more specific on what exactly the DAO invests in candidate networks (all these are direct $ cost to the DAO):

  • ACI support during the whole process via Skywards, which tries to make seamless all the governance process, from start (temp check) to end (arfc).
  • Risk analysis of the network by not one, but 2 compensated risk providers from the DAO: Chaos and Llamarisk. This is material that the network can use for any partner in the future, being public resources. Even if I don’t have full visibility on it, pretty sure it has implicit recommendations from these providers to the network team.
  • Technical analysis by BGD Labs. Same as with risk, it can be used by a network with partners, and includes recommendations which usually target improving the network overall, not only what concerns Aave.
  • Ad-hoc assets analysis requested by the network team as candidates to be listed. Some of them already planned for the DAO, but not necessarily.
  • All the technical lifting to do the activation itself.
  • Post-launch, maintenance of the network by all providers, including routine items, upgrades, etc.

That “package” has a cost of minimum hundreds of thousands by itself in operations, highly possible in the order of magnitude of million dollars. And arguably is not even something that can be acquired in the market. And I didn’t even touch the brand and trust value of Aave expanding to the network, which has arguably way more value.


So to considering the previous, my opinion is the following: there are no “returns” to negotiate here, and the fact of even bringing some of the points (like trying to influence the revenue making of Aave in other networks or assets), is disrespectful.It is the responsibility of BOB to grow its own network for being an attractive place to Aave, and Aave should not give a single benefit extra for that.

Given the alignment is not total, aside from removing all those “returns”/conditions, I would suggest raising the revenue floor to $2m in the first year, activating a first payment of 30% of the total to the DAO on the 3-month mark (from the activation moment), if revenue accrued to the BOB Collector contract has not been on that level; and the rest on the 1-year mark (all these treasury aspects to be analysed by TokenLogic as treasury provider).
In exchange, the Aave DAO will support BOB with the highest standards of quality, to make Aave on BOB a success.

And as an additional point, this type of “standards” should apply to all new network candidates, not only BOB.

Once again as clarification, this is my personal opinion as AAVE holder, and no matter the outcome the team I’m part of will support BOB as the DAO decides, and with obviously the maximum quality

3 Likes

solvBTC technical analysis


Summary

This is a technical analysis of all the smart contracts of the SolvBTC asset and its main dependencies.
No matter if the Aave on BOB network activation is done or not, the analysis is applicable for future listing appetite in other instances.


Disclosure: This is not an exhaustive security review of the asset like the ones done by the Solv Team, but an analysis from an Aave technical service provider on different aspects we consider critical to review before a new type of listing. Consequently, like with any security review, this is not an absolute statement that the asset is flawless, only that, in our opinion, we don’t see significant problems with its integration with Aave, apart from different trust points.


Analysis

SolvBTC is a wrapped version of 1:1 Bitcoin across different EVM chains. Users can deposit BTC directly from the Bitcoin blockchain and receive SolvBTC on the BNB Chain, or mint using other wrapped Bitcoin assets (on BOB, only WBTC is acceptable). Users can also redeem through a two-step process by first requesting and then claiming.


For the context of this analysis, our focus has been on the following aspects, critical for the correct and secure integration with Aave:

  • A recommendation of pricing strategy to be used in the integration asset <> Aave.
  • Any miscellaneous aspect of the code we can consider important.
  • Analysis of the access control (ownerships, admin roles) and the nature of the entities involved in the system. Regarding the table permissions’ holders and their criticality/risk, it is done following these guidelines:
Criticality Description
CRITICAL Usually super-admin functionality: it can compromise the system by completely changing its fundamentals, leading to loss of funds if misused or exploited. E.g. proxy admin, default admin
HIGH It can control several parts of the system with some risk of losing funds. E.g., general owners or admin roles involved in the flow of funds
MEDIUM It can cause malfunction and/or minor financial losses if misused or exploited. E.g., fee setter, fee recipient addresses
LOW It can cause system malfunctions but on non-critical parts without meaningful/direct financial losses. E.g., updating descriptions or certain non-critical parameters.

Risk Description
:green_circle: The role is controlled via a mechanism we consider safe, such as on-chain governance, a timelock contract, or setups involving multi-sigs under certain circumstances.
:yellow_circle: The role is controlled in a way that could expose the system and users to some risk depending on the actions it can control.
:red_circle: The role is controlled via a clearly non-secure method, representing risks for the system and users.

General points

  • Most system contracts can be upgraded with a 3-day Timelock, while two contracts have their upgradable admin set to an EOA.
  • It uses the OZ Beacon proxy for the SolvBTC implementation and the Transparent proxy pattern for other proxies.
  • For access control, it employs role-based and ownable standards.
  • For the token, it uses the SFT standard.
  • For the exchange rate, it uses different NAV values for deposit and redemptions.

Contracts

The following is a non-exhaustive overview of the main smart contracts involved with SolvBTC.



SolvBTC

It is an OZ BeaconProxy ERC20 contract with 2-step ownable and role-based access control. It represents 1:1 of BTC in the BOB ecosystem.

Permission Owner functions Criticality Risk
UpgradableBeaconSolvBTCFactory3-day Timelock upgradeTo CRITICAL :green_circle:
owner: Safe 3-of-5 destroyBlackFunds, updateBlacklistManager, transferOwnership HIGH :green_circle:
blacklist manager: Safe 3-of-5 addBlacklist, addBlacklistBatch, removeBlacklist, removeBlacklistBatch HIGH :green_circle:
DEFAULT_ADMIN_ROLE: 3-day Timelock grantRole, revokeRole HIGH :green_circle:
SOLVBTC_MINTER_ROLE: SolvBTCMultiAssetPool, BurnMintTokenPool (CCIP), xSolvBTCPool, TunnelContract (Free Tunnel Bridge) mint, burn HIGH :green_circle:
SOLVBTC_POOL_BURNER_ROLE: SolvBTCMultiAssetPool, xSolvBTCPool burn HIGH :green_circle:

  • Access Control

    • The owner can burn funds from a blacklisted address by calling the destroyBlackFunds(address) method.
    • The DEFAULT_ADMIN_ROLE can grant and revoke roles through the grantRole(role, address) and revokeRole(role, address) methods.
    • The SOLVBTC_MINTER_ROLE can mint new SolvBTC tokens and burn them to accounts not blacklisted via the mint(to, amount) and burn(from, amount) functions.
    • The SOLVBTC_POOL_BURNER_ROLE can also burn SolvBTC tokens via the burn(from, amount) function.
    • The blacklist manager can add and remove accounts from the blacklist by calling the addBlacklist(address) and removeBlacklist(address) methods. The manager can also add or remove multiple accounts in batches via the addBlacklistBatch(address[]) removeBlacklistBatch(address[]) functions.
  • Bridges

    • ChainLink CCIP: Chainlink CCIP transmits cross-chain messages between BOB and other blockchains through the Router contract. The BurnMintTokenPool is the facilitator that enables cross-chain transfers via the CCIP Router. It is configured with mint and burn capabilities on SolvBTC.
    • Free Tunnel Bridge: The Free Tunnel bridge enables cross-chain transfers between BOB and other blockchains through the FreeTunnelHub contract. The Tunnel Contract is the facilitator with minting and burning capabilities on SolvBTC. It is an Atomic-Lock-Mint/Atomic-Burn-Mint system where, through the FreeTunnelHub contract, users initiate cross-chain transfers by proposing to burn their assets, and in the destination chain, the Tunnel admin proposes the mint. Then, on the origin chain, the tokens are burned, and in the destination chain, the tokens are minted.

SolvBTCRouter

The SolvBTC Router serves as the starting point for users to mint and redeem SolvBTC by interacting with the SolvBTCMultiAssetPool. It is an OZ Transparent Proxy with a two-step ownable access control.

Permission Owner functions Criticality Risk
ProxyAdmin3-day Timelock upgrade, upgradeAndCall CRITICAL :green_circle:
Admin: Safe 3-of-5 setOpenFundMarket, setSolvBTCMultiAssetPool, transferAdmin HIGH :yellow_circle:

  • Access Control

    • The admin can configure the OFM and the SolvBTCMultiAssetPool addresses via the setOpenFundMarket(address) and setSolvBTCMultiAssetPool(address) methods.
  • Minting and Redemptions

    • Users can mint SolvBTC on BOB by depositing WBTC through the createSubscription(pool Id, amount) method. Internally, it first validates that pool Id is the SolvBTC and creates a subscription in the OFM (Open Fund Market) contract by calling OFM.subscribe(pool Id, amount, open fund share, expire) which calculates the amount of shares the user will receive through a navOracle contract (basically a contract to determine the denominator that controls how many shares per subscription the user gets*; for WBTC, the exchange rate is set at 1:0.9975).* and mints the amount as an SFT (Semi Fungible Token) to the router. Then, the router deposits the SFT amount in the SolvBTCMultiAssetPool contract via the SolvBTCMultiAssetPool.deposit(SFT, id, amount), which sends the SolvBTC amount to the user.
    • Users can redeem their SolvBTC using the createRedemption(pool Id, amount) function. Internally, after transferring the SolvBTC to the router, it withdraws the SFT from the SolvBTCMultiAssetPool and creates a request in the OFM contract by calling the OFM.requestRedeem(pool Id, amount), which mints a redemption SFT to the user. After 7 days, the user can claim their tokens from the Redemption SFT contract using the openFundRedemption.claimTo(to, tokenId, token, amount) which burns the SFT. It’s important to mention that no fee is applied for redemptions. Therefore, in the case of redemptions on BOB from SolvBTC to WBTC, the conversion ratio is 1:1.
    • It is also possible to cancel the request via the cancelRedemption(pool Id, sft redemption Id), which will transfer the redemption SFT to the router and mint back the SolvBTC tokens to the user.

OpenFundMarket

It is the contract that creates and tracks pools of SolvBTC and handles minting of SFT tokens for the router. It’s a Transparent Proxy contract with a two-step ownable access control.

Permission Owner functions Criticality Risk
ProxyAdminEOA (0x55C0…013E) upgrade, upgradeAndCall CRITICAL :red_circle:
Admin: Safe 3-of-5 setGovernorOnlyAdmin HIGH :red_circle:
Governor: EOA (0x55C0…013E) updatePoolInfoOnlyGovernor, setCurrencyOnlyGovernor, addSFTOnlyGovernor, removeSFTOnlyGovernor, setProtocolFeeOnlyGovernor, updateFundraisingEndTime HIGH :red_circle:
Pool Managers: WBTC → EOA (0x2e51…2BB0) setWhiteList, closeCurrentRedeemSlot, removePool HIGH :red_circle:
subscribeNavManager: Safe 1-of-3 setSubscribeNav HIGH :red_circle:
redeemNavManager: Safe 1-of-3 setRedeemNav, updateFundraisingEndTime HIGH :red_circle:

  • Access Control

    • The admin can configure the governor address through the setGovernorOnlyAdmin(address) method.
    • New SolvBTC Pools are created permissionlessly through the createPool(Pool Info) function; however, the Governor needs to enable the token that this pool will receive in exchange for SolvBTC via the setCurrencyOnlyGovernor(address) function and enable both the SFT OpenFundMarket and the SFT OpenFundRedemption addresses and their manager via the addSFTOnlyGovernor(address sft, address manager) method.
    • The Governor can change the pool configuration via the updatePoolInfoOnlyGovernor(), including max cap, min, and max values of subscription, and subscription and redemption NAV addresses.
    • The Governor can remove the SFT OpenFund Market and Redemption info by calling the removeSFTOnlyGovernor(address sft) . This will disable the pool.
    • Pool managers can whitelist addresses through the setWhiteList(address) function. By whitelisting an address, the pool becomes non-permissionless, and only those whitelisted addresses can subscribe for the SFT shares.
    • Pool managers can delete a pool by calling the removePool(Pool Id) function, which is only possible if no subscriptions have been made.
    • The subscribe Nav Manager can configure new pools and their nav value (used to calculate the exchange rate) in the navOracle via the setSubscribeNav(Pool Id, nav) function. While the redeem Nav Manager via the setRedeemNav(Pool Id, nav) function.
    • The redeem Nav Manager and the Governor can set a new period in which it is possible to fund the pool, via the updateFundraisingEndTime(Pool Id, time).
  • Subscription and Redemption

    • The router mainly, but users can also subscribe (mint SFT shares that can be deposited in exchange for SolvBTC tokens) by calling the subscribe(poolId, amount, openFundShareId, expireTime) function. It first validates whether the poolId exists, and if the cap has been reached by minting the amount. After all validations, the OFM contract calls the mintValueOnlyIssueMarket() in the SFT token, which sends the SFT shares to the msg.sender (router or users). It is important to mention that this function does not mint any SolvBTC; instead, it issues SFT shares, which are used to mint SolvBTC through the SolvBTCMultiAssetPool contract.
    • The router or users can request a redemption by calling the requestRedeem(poolId, openFundShareId, openFundRedemptionId, amount) method. After checking whether the request is enabled and if the poolId exists, it will call the SFT openFundRedemption token and mint via the mintOnlyIssueMarket() a redemption NFT, which will be used to claim the underlying assets later (WBTC in this case).
    • Requests can also be canceled through the revokeRedeem(poolId, openFundRedemptionId) method.
    • The pool manager can complete a current redemption request and start a new round via the closeCurrentRedeemSlot(Pool Id) function. It will retrieve the latest redeem slot and verify if it is closed at least 24h after the previous request, and call the OpenFundRedemption to create a new slot with the data of the latest redemption using the OPR.createSlotOnlyIssueMarket(RedeemInfo) to allow users to claim their underlying tokens later.

OpenFundRedemption

The OpenFundRedemption is the contract for users to claim their requested redemptions. It is an OZ Beacon Proxy with a 2-step ownable for access control.

Permission Owner functions Criticality Risk
Admin → BeaconFactoryEOA (0x55C0…013E) upgradeTo, setConcreteOnlyAdmin CRITICAL :red_circle:
OpenFundMarket createSlotOnlyIssueMarket, setRedeemNavOnlyMarket HIGH :green_circle:

  • Access Control

    • The admin can set the OpenFundRedemptionConcrete contract calling the setConcreteOnlyAdmin(address) function. This OFR Concrete contract is used to store data related to slots, token IDs, and claimable amounts.
    • The OFM contract can create slots with data regarding the underlying token and its pool ID via the createSlotOnlyIssueMarket(SlotInfo) function.
    • The OFM contract can set the redemption nav for at a slot via the setRedeemNavOnlyDelegate(slot, nav) function. The nav is the value of shares with the decimal places used during the redemption.
  • Claim redemption request

    • Users can claim their request via the claimTo(to, tokenId, currency, value) function. Internally, it validates whether the user is the owner or has permissions for the tokenId, whether the currency is a valid underlying token, and whether the value is claimable. Then, it calls the OFR Concrete to update the internal claimable slot storage of the tokenIdThe system burns the users’ SFT shares and transfers the underlying token to the user.

SolvBTCMultiAssetPool

The MultiAssetPool is the contract that interacts directly with the SolvBTC by minting or burning tokens. It can receive different SFT tokens minted with different underlying (on BOB only WBTC) and, in exchange, will mint/burn the new SolvBTC tokens. It’s an OZ Transparent proxy with 2-step ownable/admin access control.

Permission Owner functions Criticality Risk
ProxyAdmin3-day Timelock upgrade, upgradeAndCall CRITICAL :green_circle:
Admin: Safe 3-of-5 addSftSlotOnlyAdmin, changeSftSlotAllowedOnlyAdmin, transferAdmin HIGH :yellow_circle:

  • Access Control

    • The admin can add new SFT slots for specific ERC20 underlying tokens via the addSftSlotOnlyAdmin(sft, slot, token, holdingValueSftId) function. It first validates that the slot is new and wasn’t configured previously with another ERC20 token, then if holdingValueSftId > 0, it checks if the slot matches the slot parameter, and if the MultiAssetPool contract is the owner of the SftId of the holdingValueSftId. After those validations, deposits and withdrawals of the SFT in that specific slot are enabled.
    • The admin can modify deposits and withdrawals from a specific SFT slot via the changeSftSlotAllowedOnlyAdmin(sft, slot, depositAllowed, withdrawAllowed) function.
  • Deposits and Withdraws

    • The router mainly, but users with SFT shares can mint SolvBTC via the deposit(sft, sftId, value) function. It validates that deposited SFT shares are allowed in the slot of the sftId and then mints the value of SolvBTC tokens.
    • The router mainly, but users can withdraw SFT shares by calling the withdraw(sft, slot, sftId, value). Internally, it checks if withdrawals are enabled in the slot of the sftId and then burns the SolvBTC tokens and sends the equivalent value of SFT shares.

Pricing strategy

See Conclusion.

Miscellaneous

  • The system has undergone audits by OZ, Paladin, Salus, and Quantstamp that can be found here.
  • In general, the system relies on Multisig and EOAs for upgradability and configuration, which could pose several risks to the asset if, for example, the EOA keys are compromised and the contracts are upgraded to malicious implementations. We suggested the team adjust the general configuration with multisig wallets and timelocks.

Conclusion

We think the complexity of solvBTC, in combination with the highly centralized access control of different critical parts of the system (especially the OpenFundMarket), doesn’t make the asset suitable for onboarding on Aave at the current moment.

Once the team does an overall review of the access control and improves it, we will be able to re-evaluate.

Its yield-bearing version (xSolvBTC) is dependent on the underlying being suitable for listing.

Response to BGD Labs’ Technical Assessment of SolvBTC

We acknowledge the technical assessment carried out by BGD Labs on the SolvBTC contracts and related infrastructure. The review highlighted important considerations for integration with Aave.

In response, we have completed a comprehensive restructuring of access control and governance mechanisms across our contracts, with particular emphasis on the OpenFundMarket and its related components. All critical roles have now been migrated to multisig + timelock setups, as outlined below:

Access Control

  • OpenFundMarket ProxyAdmin → upgrade, upgradeAndCall

  • OpenFundMarket Admin → setGovernorOnlyAdmin

  • OpenFundMarket Governor → updatePoolInfoOnlyGovernor, setCurrencyOnlyGovernor, addSFTOnlyGovernor, removeSFTOnlyGovernor, setProtocolFeeOnlyGovernor, updateFundraisingEndTime

  • OpenFundRedemption Admin → upgradeTo, setConcreteOnlyAdmin

Furthermore,

  • OpenFundMarket PoolManager: This is a 2/3 MPC multisig, hosted by ForDefi.

  • OpenFundMarket SubscribeNavManager & RedeemNavManager → migrated to Safe 3/5 multisig.

Router & Pool Controls

The following were previously in Safe 3/5 setups. We have taken additional measures to incorporate a timelock structure.

  • SolvBTCRouter Admin

  • SolvBTCMultiAssetPool Admin

Security, resilience, and transparency are paramount for us as SolvBTC becomes more integrated in DeFi. We remain committed to strengthening our contract governance to align with best practices in the ecosystem, and we will continue to collaborate openly with partners like BGD Labs and the Aave community to ensure the highest level of confidence in SolvBTC’s integrations.

3 Likes

Dear Aave community, @MarcZeller, @stani

Thank you for your feedback and patience!

Economics: BOB is very excited to move forward with the suggested economic terms (summary of above discussions below)

BOB will:

  • Provide economic guarantees for $1M of Aave DAO revenue in the first year, de-risking the launch for Aave and aligning both parties on economic performance. (Payment of outstanding revenues will be made at the end of the 12-month term after Aave deployment in a native asset on the BOB network. Of the total, 50% will be unlocked immediately and 50% will vest linearly over 6 months. The final settlement amount will be adjusted to ensure a total payment equivalent to USD 1,000,000, based on the dollar value of the asset at the time of distribution.)

  • Support the Aave instance with BTC product integrations (1-click BTC deposits) and promote and distribute the lending market to its partners and clients.

Aave will:

  • Make an effort to prioritise this deployment with Service Providers.

  • Make best efforts to deploy BTC LSTs and LRTs on the BOB instance as the first instance for deployment when asset onboardings are requested by the BOB team. BOB acknowledges that Aave cannot control asset issuers’ choices of chains to deploy on or liquidity depth, and as risk and technical review for new assets cannot be committed to prior to review, Aave cannot commit to this where onboarding to BOB at the exclusion of other chains would work against broader Aave business interests, agreements entered into with other chains and protocols, or risk and technical considerations.

Exclusivity: After thorough discussions with Aave SPs, we propose removing the exclusivity requirement on both sides.

As an ecosystem, BOB must be able to support the listing of smaller and newer assets on lending markets—for example, emerging BTC LSTs that generate yield from diverse sources. Some of these will not yet meet the scale required for Aave V3. Based on the latest information, we anticipate that Aave V4 permissionless markets could be live on BOB in Q1 2026.

When we originally proposed the idea of exclusivity, our expectation was that V4 would arrive sooner. Over the past weeks, we engaged with Aave service providers on alternatives, and the clearest path forward is to proceed with the current proposal without exclusivity for now. This can be revisited once V4 is live on BOB. There is already strong economic alignment between Aave and BOB under the current framework, even without exclusivity.

Day 1 markets: For BOB’s initial markets, SolvBTC and xSolvBTC assets are currently pending final technical re-review by BGD, following the implementation of feedback and system improvements by the Solv team after the first review. To avoid further delays, we recommend moving forward with the set of assets approved at the time of the AIP.
Should Solv assets require additional review time, we suggest they be introduced as part of BOB’s day-two markets.

Request for ARFC vote: We are excited to begin working closely with Aave to establish the premier venue for Bitcoin lending, and we kindly request that this proposal now advance to the ARFC vote.

2 Likes