Security & Risk Framework
Earned Network is not an asset manager, we are an infrastructure layer.
We don’t dictate risk appetite or portfolio mix, our users do.
We provide the tooling, safeguards, and transparency so that any risk profile from capital preservation to maximum performance can be executed with confidence.
1) Stablecoin Policy
Single-Asset Strategies: If a client selects a USDC strategy, 100% of principal remains USDC. Allocation is diversified across pools, protocols, and chains, not across different stablecoins — unless configured otherwise.
Stablecoin Whitelist: USDC, USDT, PYUSD, RLUSD, USDE (others by demand).
De-Peg Contingency: Clients may enable automated fallback, meaning if a stablecoin breaches a predefined risk threshold (price band, liquidity issues, issuer/oracle alerts), assets are automatically migrated to an alternative.
2) Exposure Controls (Client-Configurable)
Per-Pool Cap: Default ≤5% of total network AUM in any single pool (clients may set higher/lower limits).
Per-Protocol & Per-Chain Caps: Default guardrails applied; adjustable by client mandate.
Pool Concentration: Default ≤5% of pool TVL to avoid concentration risk.
Sector Caps: Lending vs LP vs RWA exposure configurable per client strategy.
3) Protocol Tiering & Allowlisting
Default routing only to Tier-1 protocols unless “experimental” vaults are enabled.
Tier-1 Determination:
Deep stablecoin liquidity across all integrated chains.
Significant operational history without critical loss.
Extensive history of audits.
Transparent governance, no issues of previous governance attacks.
4) Bridges & Cross-Chain Layer
Multiple Approved Routes: CCIP, CCTP, USDT0, and other vetted networks.
Redundancy: At least two routes per asset/chain.
Controls: Rate limits, and reconciliation checks.
5) Monitoring & Automated Safeguards
Live Monitoring: Liquidity inflows & outflows, utilisation spikes, liquidity pool anomalies, oracle deviations, network status & uptime.
Circuit Breakers: Auto-halt new deposits, trigger rebalancing, freeze bridge routes if risk is detected.
Custom Alerts: Clients can receive risk signals via API, webhook, or dashboard.
6) Governance & Policy Execution
Client-Defined Policy: The allocation engine routes funds based on client-specified parameters (e.g., max protocol risk, target APY, sector mix).
Predictive Yield Layer: Anticipates shifts to reallocate before conditions change, within client-set bounds.
Role Separation: Client config vs network config handled distinctly.
7) Security, Ops & Key Management
Audits & Bounties: All core contracts audited; live bug bounty programs.
Upgrade Safety: Time-locked upgrades, multi-sig approvals, staged rollouts.
Keys: HSM/threshold signing; role-based permissions.
8) Transparency & Reporting
On-Chain Proof: All allocations verifiable via blockchain explorers.
Client Dashboards: Live reports - exposure breakdown, historical allocations, realised APY etc.
Periodic Attestations: Optional third-party verification for institutional clients.
9) Insurance Options
Third-Party Coverage: Integration with decentralised insurers where available.
Last updated