Whitepaper · v1.0 · MVP

The Vaultrise Protocol

Borrow USDC against graduated pump.fun tokens — without selling. How the protocol is built, what is live today on Solana, and what is deliberately kept simple for this MVP.

01

Overview

Vaultrise is a lending protocol on Solana that accepts graduated pump.fun tokens as collateral and issues USDC loans without forcing the holder to sell. It works exclusively with tokens that have graduated from pump.fun and have an active liquidity pool on PumpSwap — real LP is what makes the price oracle and liquidation possible in the first place.

Mainnet-beta
Contract deployed
Up to 25%
Max LTV with $VRISE
30 min
TWAP price oracle
$50,000
Min PumpSwap LP

This document describes the MVP as it stands today. The protocol works end-to-end as a real product — lenders supply USDC, borrowers lock tokens and draw USDC, positions are priced and liquidated automatically. A few capabilities that a full build would put on dedicated infrastructure are, for now, handled off-chain; the experience is identical. Build Status (§07) is explicit about what is live versus simulated versus planned.

Why restrict collateral
Pledra and similar protocols accept any pump.fun token, including bonding-curve tokens with no liquidity. Vaultrise accepts only tokens with a PumpSwap LP: liquidity → oracle → protocol. Limiting collateral is not a weakness — it is the only thing that makes the mechanics honest and solvent.
02

The Problem

Graduation used to migrate a token to Raydium at the ~$69K market-cap target. Now that pump.fun runs its own DEX, graduation mints the LP directly on PumpSwap — a token's liquidity lives in a single, predictable place instead of being spread across aggregators.

After graduation, the holder of a successful token sits on a $2,000–$50,000 position they cannot exit without serious price impact. Selling 10% of a position into a $500K-liquidity token dumps the price 15–30%. The holder is stuck: hodl, with no access to liquidity.

Why existing protocols don't solve it

ProtocolWhy it doesn't fit
Aave / KaminoBlue chips only (SOL, ETH, USDC, mSOL) — no long-tail tokens
PledraAccepts pre-graduation tokens — liquidation is technically impossible
Sharky.fiNFT-focused, P2P model needs a counterparty — no instant liquidity
Rain.fiP2P — the borrower waits for a lender, no instant liquidity
03

How It Works

Vaultrise is a pool-based, over-collateralized protocol. Borrowers lock tokens into a program-owned escrow and draw USDC from a shared lending pool funded by lenders, who earn the interest borrowers pay.

Borrower flow

  1. 1
    Connect & discover

    Connect a wallet. Vaultrise shows only eligible tokens you hold — graduated with a PumpSwap LP above $50,000.

  2. 2
    Choose collateral

    Pick a token and amount and see the max USDC available at up to 20% LTV (25% with $VRISE), plus the resulting health factor and interest rate.

  3. 3
    Lock & receive

    Approve the transfer; collateral moves into an escrow and USDC arrives in your wallet from the lending pool in the same transaction.

  4. 4
    Stay healthy

    Your health factor is re-checked every 5 minutes against the PumpSwap TWAP.

  5. 5
    Repay anytime

    Repay USDC plus accrued interest whenever you like and your collateral returns in the same block. Loans are perpetual while the health factor stays above 1.0.

Lender flow

Lenders deposit USDC and receive gUSDC, a receipt token that continuously appreciates against USDC as borrower interest accrues — there is no rebasing or reward claiming. Withdraw any time there is free liquidity in the pool. Target yield is 8–15% APY, set by a utilization curve.

04

Price Oracle: TWAP on PumpSwap

A spot price on a thin pool is trivially manipulable — one large trade seconds before a snapshot inflates the collateral valuation. A 30-minute time-weighted average forces an attacker to hold the manipulated price for the full window, which makes the attack prohibitively expensive.

In this MVP the TWAP is produced off-chain: a service takes periodic reads of the token's PumpSwap pool, averages them over the 30-minute window, and publishes the price on-chain, where the contract reads it — with a staleness check — to compute LTV and health factors. This off-chain step can later be replaced by direct on-chain cumulative-price reads without changing anything else; the result is identical.

ParameterValue
TWAP window30 minutes — balances freshness against manipulability
SourceThe token / WSOL PumpSwap pool
Update cadenceEvery 5 minutes
Deviation guardIf spot > TWAP +25%, LTV is computed from the TWAP, not spot
Circuit breakerIf spot < TWAP −40%, an immediate liquidation check is triggered
FreezeIf LP falls below $10,000 the token is flagged unhedgeable and frozen
Why $50,000 minimum LP
At $50K LP and 20% LTV, the largest loan is $10K. Selling $10K back into a $50K pool is a ~16–18% price impact — well inside the liquidation buffer. At $20K LP the same loan would create a 40%+ impact and push the protocol into bad debt. $50K is the mathematically-grounded minimum.
05

Risk & Liquidation

Every position is governed by a single health factor:

HF = (collateral_value × 0.28) ÷ debt

Liquidation opens when HF < 1.0. At the 20% max LTV a fresh position sits at HF ≈ 1.4; with the $VRISE 25% LTV it sits at ≈ 1.12 — a deliberate buffer between origination and liquidation.

ParameterValue
Max LTV20% of the TWAP collateral value (25% with $VRISE)
Liquidation threshold28% effective LTV → health factor < 1.0
Liquidation penalty8% — 5% to the liquidator, 3% to the insurance fund
Interest rateVariable: 12% APR (0–50% util), 28% (50–80%), 65% (80%+)
Loan size500 USDC minimum, 50,000 USDC maximum per position
DurationPerpetual — the loan lives while the health factor stays above 1.0

Liquidation

Liquidation is permissionless — anyone can liquidate a position once its health drops below 1.0, and the 5% liquidator bonus and 3% insurance cut are enforced on-chain regardless of who calls it. In this MVP a liquidation bot does this automatically: it checks every position's health factor every 5 minutes and, when one crosses 1.0, triggers the liquidation and routes the seized collateral through Jupiter for the best sale.

The main risk: LP drain
If a token's LP is concentrated in a few wallets, it could be withdrawn just before a liquidation, leaving the protocol unable to sell the seized collateral. Mitigation: a checker queries the largest LP holders every ~10 minutes; if the top-3 control more than 60% of the LP, new positions against that token are frozen and existing ones are warned.
06

Architecture

The protocol has two layers: an on-chain program that holds funds and enforces the rules, and off-chain services that feed it prices and act on liquidations.

On-chain (Solana mainnet-beta)

A single program holds the shared USDC reserve and the per-borrower collateral escrows and enforces health factors and liquidation. Interest accrues through a global borrow index, so a position's debt grows automatically over time. Lender deposits are represented by gUSDC, a receipt token whose value is the reserve's USDC divided by the gUSDC supply — it appreciates as interest accrues rather than rebasing. Both classic SPL and Token-2022 collateral are supported, since graduated pump.fun tokens are Token-2022.

Off-chain services

  • TWAP aggregator. Reads the PumpSwap pool, averages over the window and publishes the price on-chain every 5 minutes, applying the deviation guards.
  • Liquidation bot. Watches every position's health factor on a 5-minute cycle, triggers liquidation when it crosses 1.0, and sells the seized collateral through Jupiter.
  • LP-concentration checker. Polls the largest LP holders every ~10 minutes and freezes new positions on any token whose top-3 holders exceed 60% of the pool.
  • Alerts & metrics. Health-factor warnings (HF < 1.2) and critical alerts (HF < 1.05) over Telegram/Discord, plus public protocol metrics — TVL, active loans, the liquidation feed and the burn tracker.
07

Build Status

Vaultrise is an MVP built to look and behave like a finished protocol. Several capabilities that the full design puts on-chain or on specialized infrastructure are, for now, handled by supporting off-chain services. The on-chain result and the user experience are the same — the difference is internal.

CapabilityMVP approachResult
On-chain cron for health checksOff-chain bot on a 5-minute cycleHF updates every 5 min
TWAP from cumulative-price slotsPeriodic spot-reads averaged off-chain30-min TWAP price
Streamed LP-concentration dataPolled every 10 minutesLP monitoring active
Fully on-chain liquidation routingBot routes the sale through JupiterAutomatic liquidation
Historical analytics chartsCurrent live metrics onlyLive protocol metrics
Live now (MVP)
  • Contract live on mainnet-beta
  • Borrow · Lend · Repay
  • Permissionless liquidation
  • Off-chain TWAP price oracle
  • Liquidation bot & LP monitor
  • Alerts & live analytics
Pre-launch
  • $VRISE token — fair launch on pump.fun
  • Burn-powered terms unlock at launch
Planned
  • Phase 2 — streamed LP monitoring
  • Phase 2 — historical analytics charts
  • Phase 3 — stake-weighted DAO governance
08

The $VRISE Token

$VRISE is the protocol's operational utility token — not governance, not a reward. It is pre-launch and will launch via a fair launch on pump.fun. Every $VRISE spent on an operation is burned on-chain in the same block and never returns to circulation, and the protocol is fully usable without it.

The core principle
$VRISE is never required to use Vaultrise — every operation works without it. But with $VRISE the same action is cheaper and unlocks exclusive parameters. Demand for $VRISE is demand for using the protocol: no usage, no burn, no deflation.

The six burn operations

OperationBurnBenefit
Open position + boost50LTV 25% instead of 20% and 0% protocol fee
LTV Boost (one-off)200Temporarily raise LTV to 28% for 7 days
Liquidation Shield (monthly)5002-hour grace period when HF < 1.05
Instant Repay Discount10015% off accrued interest at repay
Priority Liquidator1,000Whitelisted liquidator with a 7% bonus
Token Whitelist Vote10,000Propose a token for the eligible list

Each burn happens on-chain in the same transaction as the operation, so the benefit is atomic with the burn — it is impossible to receive the upgrade without destroying the tokens. After launch there is no mint authority; supply only ever decreases.

Planned tokenomics

Total supply is a fixed 100,000,000 $VRISE, distributed in favour of the open market and locked liquidity over insiders:

AllocationShareTerms
Public Sale40%Fair launch on pump.fun — no presale, no allocation
Liquidity Bootstrap25%PumpSwap LP after graduation, locked 12 months
Team15%6-month cliff, then 24-month linear vesting
Insurance Fund10%Reserve, unlocked at >$10M TVL
Ecosystem & Grants10%Integrators and liquidation-bot builders
09

Parameters at a Glance

A single reference for the numbers that define the protocol.

Lending
Max LTV
20% · 25% with $VRISE
Liquidation threshold
28% LTV (HF < 1.0)
Liquidation penalty
8% (5% liquidator · 3% insurance)
Protocol fee
0.5% · 0% with $VRISE
Interest (by util.)
12% / 28% / 65% APR
Loan size
500 – 50,000 USDC
Collateral & Oracle
Min PumpSwap LP
$50,000
TWAP window
30 min (off-chain MVP)
Health-factor check
Every 5 min
Deviation cap
Spot > TWAP +25% → use TWAP
LP concentration
Top-3 > 60% → freeze new
Unhedgeable freeze
LP < $10,000
$VRISE
Status
Pre-launch
Total supply
100,000,000 (fixed)
Burn
100% on-chain, same block
Launch
Fair launch on pump.fun
Pool
Receipt token
gUSDC (exchange-rate)
Target lender APY
8–15%
Liquidation
Permissionless · Jupiter
Network
Solana mainnet-beta

Vaultrise deliberately limits itself to PumpSwap-eligible tokens. That forgoes a large share of potential demand, but it is what keeps the oracle honest, liquidation possible and the protocol solvent.