Skip to content

Operator Vault

Private alpha

Operator Vault is not live. Want in early? contact@textilecredit.com.

The problem

Making markets on an FX corridor takes two things: a bot that prices well, and inventory to price with. They almost never sit in the same place.

An operator who knows the cNGN market can quote all day, but the book is their own balance sheet. Once it is full they stop, however good their pricing is. The people with dollars to put to work, treasuries, funds, family offices, are never going to run a hot wallet, a price feed and a server that has to stay up.

What it is

An on-chain vault that splits capital from control.

LPs deposit the settlement asset (USDT) and hold ERC-20 shares. The operator points their Stitch bot at the vault and quotes the corridor with the vault's inventory. The spread the bot earns lands back in the vault, so it belongs to the LPs.

What the operator cannot do is move the money. There is no withdraw function for them to call. The only thing that ever leaves the vault is a swap the vault itself validated, and the only address allowed to receive the other side of that swap is the vault.

What the operator can sign

The vault is the swapper on every order, so nothing settles unless the vault approves the signature. It checks the whole order, not just who signed it:

  • The pair has to be the vault's own two assets, one in and one out.
  • There is exactly one output, and the recipient is the vault.
  • The size is under the per-side cap fixed at deploy, and under what the vault holds minus the reserve floor.
  • The order expires inside the maximum lifetime, and it carries the current trading epoch.
  • The order names the reactor and the validation contract the vault was built with.

Anything else fails. A quote paying out to the operator's own wallet fails the recipient check. A quote in a token the vault does not hold fails the pair check. A quote for more than the vault has fails the size check.

Fees

The operator is paid a management fee, expressed per year, accrued continuously as shares, and capped in the contract at 10%. Each vault sets its own rate at deploy and it can never go up. There is no performance fee in this version.

Trading P&L is not the operator's. Every fill pays back into the vault, so the spread is LP return. The taker fee a trader pays on a swap is separate and goes to the protocol, exactly as it does for any other maker. See Fees.

What it does not do

One vault covers one pair. A second corridor means a second vault.

There is no instant exit, only the next epoch. There is no live on-chain share price between epochs, because there is not an honest one.

Shares are a claim on a trading book, so LPs carry market risk. If the corridor asset moves against the vault while it holds inventory, the value falls, and a bad operator can lose money inside the rules. The vault stops theft. It does not stop bad trading.

Next