Architecture
Own runs on Robinhood Chain (Arbitrum Orbit L2, chainId 4663), settles in USDG, and is organized around a small set of core contracts resolved through a registry.
The system in one loop
Loading diagram...
Core contracts
| Contract | Responsibility |
|---|---|
| ProtocolRegistry | Service locator and role authority; every module resolves its peers and its admins here |
| AssetRegistry | Asset listings, per-asset configuration, issuance caps |
| OwnMarket | RFQ settlement: quote verification, settle band, escrowed resting orders, PSM entry points |
| ETokenFactory / EToken | Deploys and implements eTokens (ERC-20 + permit + dividend accumulator) |
| ReserveVault (per asset) | Protocol-owned wrapper reserves behind each eToken |
| OwnVault | LP collateral vault (ERC-4626 shares, async queues) |
| VaultManager | Pooled risk accounting: utilization, exposure, collateral counting, signer and maker registry |
| ChainlinkOracleVerifier | Price verification: Chainlink anchors, signed attestations, bands, staleness |
| OwnLendingPool / BorrowManager / LendingRouter | The credit stack: pooled USDG, per-position borrow accounting, deposit/withdraw routing |
| VaultYieldManager | Routes lending yield to vaults and the treasury cut |
| EUSDManager | The eUSD CDP engine: positions, sorted lists, mint/repay/redeem/liquidate |
| EUSD / StakedEUSD | The stablecoin (ERC-20 + permit + ERC-7802 rails) and its ERC-4626 staking vault (UUPS proxy) |
| OwnershipNFT | Soulbound points-program record |
Deployed addresses are on the contract addresses page.
Design invariants
- Funds do not idle in intermediaries. Mint proceeds go to the maker's settlement wallet; reserves are protocol-owned; LP funds sit in their own vaults. Each pool has one owner and one purpose.
- Every price is verified, never assumed. No trade price is ever an oracle input; every settlement checks against a verified, fresh mark.
- Risk-increasing paths are gated; exits are not. The pattern repeats at every level: solvency and freshness checks guard new risk, while redemptions, repayments, and withdrawals of paid-for value stay open in every system state.
- Upgradability is scoped. Oracle and selected modules upgrade through the registry with role-gated, delayed admin; eTokens and eUSD balances are plain storage no upgrade path can rewrite.