Lock Canton-native collateral. Mint USDo, an overcollateralized stablecoin. Your collateral, your debt and your liquidation price live inside a Daml contract shared by exactly two parties: you and the protocol.
On a transparent chain your vault is a row anyone can read — and bots read it faster than you do. They know your liquidation price before you do the math.
Deposit Canton-native collateral. It moves into a vault contract whose only signatories are you and the protocol.
Draw USDo up to your asset's max LTV. The debt is recorded on the same private contract — never on a public balance sheet.
USDo is a transferable Canton asset. It composes atomically with any app on the Global Synchronizer — DvP, swaps, repo.
Repay to unlock. Break the ratio and the contract liquidates itself at the oracle price — one transaction, no auction, no bot.
Canton has no globally replicated state. Each participant node stores only the sub-ledger it is party to, and the synchronizer orders transactions it cannot read.
Vaults, USDo mint and repay, oracle-driven self-liquidation, four collateral types.
Daml template audit, formal spec of the liquidation choice, public bug bounty.
Capped debt ceilings on the Global Synchronizer, USDo savings rate, surplus buffer live.
Permissioned pools with observer-party reporting for supervisors and auditors.