🎉 New Release: This is a beta release. This is on xrpl testnet for now. Learn More →

Built for XRPL EVM

Protect What
You Supply.

RheoFi is a modular, risk-isolated lending protocol on the XRPL EVM Sidechain. Every market is siloed, every price passes a three-tier oracle, every change is timelocked on-chain.

Read the whitepaper→View contracts→
XRPL EVM Testnet · Chain ID 1449000Beta · Not financial advice
Trust primitives

Built to keep your assets safe.

Three architectural choices carry the protocol: isolation, resilient pricing, and delayed governance.

Isolated Markets

Every pool has its own Comptroller. Bad debt cannot bleed from one market into another.

Resilient Oracle

Primary, pivot, and fallback feeds, bound-checked before any price reaches the protocol.

Timelocked Governance

Three severity tiers queue every sensitive change on-chain before it can execute.

4
Isolated pools
17
Live markets
44
Verified contracts
3
Oracle tiers
How assets are protected

Isolate. Validate. Delay.

A three-step defense that runs on every market, every price read, and every parameter change.

  1. Isolate

    Each pool has its own Comptroller. Collateral parameters, market entry, and bad debt live inside a single pool boundary, so losses in one market cannot reach another.

    CoreStablecoinsCurveLST ETH

  2. Validate

    Every price passes a three-tier resilient oracle. A BoundValidator enforces per-asset deviation limits, staleness windows, and sanity ranges before any price is accepted.

    ChainlinkPivotFallbackBoundValidatordeviation · staleness · sanity

  3. Delay

    Privileged changes are queued through one of three timelocks (Normal, FastTrack, or Critical), so every parameter change is visible on-chain before it can execute.

    Proposal queuedsigned · visible on-chainTimelock delayeta ~ hours to daysExecute on-chainwaits for delay to elapseNormal · FastTrack · Critical
Architecture

An on-chain money market, safely.

Isolated pools, a bound-validated oracle, and role-gated governance. Every layer visible on-chain.

Isolated Pools

Core, Stablecoins, Curve, and Liquid Staked ETH, each with its own risk parameters and market roster.

4 live · 2 planned

Resilient Oracle

Chainlink primary, cross-checked by a pivot feed, protected by a bound validator with deviation and staleness limits.

3-tier · bound-validated

On-Chain Governance

AccessControlManager gates every privileged call. Three timelocks stage every parameter change by severity.

3 timelocks · role-gated
Protection that performs

Every loss meets six checks first.

Isolation, per-asset limits, liquidation, caps, oracle bounds, and shortfall coverage.

Market isolation

Each pool has its own Comptroller. Bad debt cannot bleed collateral out of another pool.

Collateral factors

Per-asset LTV caps limit how much borrow power a supplied asset can back.

Liquidation thresholds

Undercollateralized positions can be closed by liquidators before losses reach the protocol.

Supply & borrow caps

Per-market ceilings cap exposure to any single asset, limiting oracle-manipulation blast radius.

Oracle bounds

Stale, deviated, or out-of-range prices are rejected before they can move a market.

Shortfall coverage

RiskFundV2 accumulates converted reserves; Shortfall auctions them to close bad debt.

Fund & governance

Losses have a fund. Changes have a delay.

Two on-chain systems keep the protocol resilient: RiskFundV2 absorbs residual bad debt through the Shortfall auction, and three tiered timelocks queue every privileged change before it can execute.

Shortfall

How losses are absorbed.

  • Revenue routes through ProtocolShareReserve on a fixed on-chain split.
  • RiskFundV2 holds each pool's convertible base asset.
  • Bad debt above threshold triggers a Shortfall auction of the fund.
  • Reserves are only drawn when the fund is insufficient.

Timelocks

How changes are delayed.

  • Normal: standard delay for routine parameter changes.
  • FastTrack: shorter delay for time-sensitive market adjustments.
  • Critical: longest delay, reserved for the most sensitive changes.
  • AccessControlManager gates every privileged call by role.
Verifiable on-chain

Trust the code, not the copy. Every address here is a link to the block explorer.

  • Every deployed address is listed on this page.
  • Every row copies to clipboard and links straight to the block explorer.
  • No off-chain claims. Verify parameters, upgrade proxies, and roles yourself.
Open PoolRegistry on block explorerGet testnet XRP
Network
XRPL EVM Testnet
Live
Chain ID
Currency
RPC endpoint
WebSocket
On-chain

Every deployed contract.

Grouped by role. Copy any address or open it on the block explorer to verify parameters yourself.

Contract addresses44 total
XRPL EVM Testnet · Chain ID 1449000

Core infrastructure

Registry, lens, proxy admin, and upgrade beacons that anchor the protocol on-chain.

  • PoolRegistry
    Registers isolated pools and their markets.
  • PoolLens
    Read-only aggregator for pool + market state.
  • DefaultProxyAdmin
    Owner of transparent upgradeable proxies.
  • Comptroller Beacon
    Beacon that points every pool Comptroller at the current implementation.
  • RToken Beacon
    Beacon that points every rToken market at the current implementation.
Assurance

Built on primitives that predate us.

RheoFi has not yet been independently audited as a standalone deployment. The framework RheoFi forks, Compound V2 and the Isolated Pools model, has been audited multiple times upstream. Every contract on this page is verifiable on-chain today.

Report security issues privately torheofiprotocol@gmail.com
Chainlink logo
Chainlink
Primary oracle
XRPL EVM logo
XRPL EVM
Chain
Compound V2 / Isolated Pools logo
Compound V2 / Isolated Pools
Framework
OpenZeppelin logo
OpenZeppelin
Contracts
Solidity logo
Solidity
Language
Blockscout logo
Blockscout
Explorer
Foundry logo
Foundry
Tooling
Ethereum logo
Ethereum
EVM standards
Disclosure

The full risk picture.

RheoFi is decentralized, non-custodial, and currently on testnet. Nothing here is financial, legal, or tax advice.

  • TestnetChain ID 1449000
  • Non-custodialYou hold the keys
  • No adviceNot financial, legal, or tax

  • Smart contract risk

    Bugs, upgrade errors, or oracle failures can cause partial or total loss.

  • Liquidation risk

    Collateral below the market threshold can be liquidated by anyone.

  • Market risk

    Extreme volatility or oracle staleness can leave positions in bad debt.

  • Testnet nature

    Testnet assets have no monetary value, but wallets still sign real transactions.

  • Regulatory risk

    Availability and legality of DeFi vary by jurisdiction. Local compliance is on you.

  • Your responsibility

    You alone evaluate these risks and decide whether to interact with the protocol.

RheoFi is a decentralized, non-custodial protocol currently on testnet. Interacting with the protocol is at your own risk. By using it you acknowledge every risk listed above.

FAQs

Security questions, answered on-chain.

Everything about audits, oracles, timelocks, and how RheoFi keeps isolated pools safe on the XRPL EVM Sidechain.

RheoFi's contracts derive from the audited Compound V2 Isolated Pools framework. RheoFi-specific audits are in progress; the current codebase runs on XRPL EVM Testnet with limited assets while security review continues. Audit reports will be published on this page once complete.

Verify. Then Supply. Trust the code, not the copy.

Every contract on this page is verifiable on the XRPL EVM block explorer. Read the whitepaper or launch the app when you're ready.