Protocol
Security and custody
Your wallet stays yours. The fund's reserve is held in Resarv's HyperCore accounts, like any index fund holds its basket.
Custody#
- Your Para or external wallet is non-custodial. Resarv never holds your keys.
- Each index has its own HyperCore account, so each fund's NAV is clean and separate.
- The reserve is public: anyone can read the account's balances, positions and fills on Hyperliquid.
Keys and what they can do#
| Key | Can | Cannot |
|---|---|---|
| Owner | Owns the fund accounts. Withdraws and approves trading agents. | Is kept cold and used rarely. |
| Trading agent | Places and cancels orders on HyperCore. | Withdraw or transfer funds. |
| Price signer | Signs NAV, settlements, rUSD prices and compositions. | Move funds, or sign a price older than allowed. |
| Guardian | Pauses new requests, sets caps and fees, vetoes airdrop roots. | Block cancel, reclaim, repay, withdraw or liquidation. |
Built-in limits#
- Per-hour caps on minting and redeeming, and a limit on how far NAV may move between settlements.
- Signed prices expire within seconds and must agree across two Hyperliquid sources.
- Unsettled requests can always be cancelled or reclaimed by the user after one hour.
- The vault's USDC can only be sent to allowlisted settlement addresses.
Found a vulnerability? Email hello@resarv.xyz.
Something unclear? Tell us.