aumo
Documentation

How Aumo works

A treasury agent that puts idle stablecoins to work in the best risk-adjusted yield across on-chain lending and real-world-asset-backed dollars, inside limits enforced on-chain, and proves every move.

Overview

Aumo is an autonomous treasury agent for stablecoins. You deposit USDT0 into a shared pool and receive shares. An off-chain agent continuously scores allowlisted yield venues, allocates the pooled balance to the best risk-adjusted option, and records a receipt for every decision. All of this happens within caps written into the vault contract.

The goal is to give the convenience of an active manager without the custody. The agent can rebalance, but it can only move funds between allowlisted venues, and never beyond the limits the contract enforces. If you remove the agent, depositor funds stay safe and redeemable.

Using Aumo

Getting started takes a few minutes, and you keep custody the whole time. Your deposit is always redeemable for your share of the pool.

1. Connect a wallet

Open the app and connect a wallet like MetaMask or OKX Wallet on X Layer. If you are on the wrong network, the wallet menu can add or switch it for you.

2. Get some USDT0

You deposit USDT0. Hold it on X Layer, or bridge it in from another chain — the Deposit tab quotes the route and fee for you.

3. Deposit

On the Deposit tab, enter an amount and confirm. The first time, you approve the pool to move your USDT0 (a one-time step), then deposit. You receive pool shares that represent your slice of everything the pool earns.

4. Watch the agent work

The Overview shows your value, how much is idle versus deployed, and the agent's latest reasoning in plain language. Ask Aumo anything — why it chose a venue, or what would make it defensive — and it answers from its own live state. Venues shows how it scored each option; Activity is the full trail of decisions.

5. Withdraw any time

Redeem your shares back to USDT0 whenever you want. Withdrawals do not wait on the agent — you can always take out whatever the pool can currently cover.

That is the whole flow. No dashboards to decode and no yield-hunting: you deposit, the agent manages it inside guardrails it cannot break, and you can leave whenever.

How it works

Every rebalance runs the same five steps.

  • Sense. Read live vault state and market data for every allowlisted venue: APY, TVL, available liquidity, utilization, and peg deviation.
  • Score. The risk engine haircuts each venue's headline yield by protocol, liquidity, peg, utilization, and correlation risk, then ranks venues by risk-adjusted APY rather than raw APY.
  • Reason. A language-model layer reads the market regime. It can only make the plan more conservative than the risk engine proposed. It can veto or shrink a move. It cannot loosen a guardrail.
  • Act. The chosen move executes on-chain, bounded by the per-move and per-venue caps in the contract.
  • Prove. The decision is written as a receipt: a plain-language rationale bound to a keccak fingerprint of the exact policy in force, anchored by the on-chain transaction.

Architecture

Aumo has four parts working together.

  • The pool. An ERC-4626 vault (AumoPool) that holds USDT0 and issues shares. Deposits mint shares pro-rata. Withdrawals redeem them for the depositor's slice of the pool, including accrued yield. A decimals offset mitigates the first-depositor inflation attack.
  • The agent. A TypeScript service that runs the sense, score, reason, act, record loop on a schedule and exposes a read-only status API the app reads from.
  • The reasoning layer. An optional model pass with a strict, tighten-only safety kernel. Its output can only narrow the risk engine's plan.
  • The bridge. USDT0's native LayerZero OFT, so deposits can originate on Ethereum, Arbitrum, Optimism, or Polygon and arrive on X Layer ready to deposit.

Everything settles on X Layer. The base asset is USDT0 throughout. The agent allocates across three live venues: Aave v3 lending; USDG, a regulated dollar backed by cash and short-term U.S. Treasuries (USDT0 is swapped to USDG on Uniswap, then supplied to Aave) for real-world-asset yield; and Pendle PT-USDG, fixed yield to maturity on that same Treasury-backed dollar. A fourth adapter, a full-range USDG/USDT0 position on Uniswap v3 that earns trading fees on two dollar-pegged legs, is shipped and fork-verified, pending allowlisting on the live pool. Each is proven end-to-end against live X Layer mainnet contracts.

For the full mechanics and the math behind every decision (the risk-engine blend, the guardrail budgets, the adapter internals, the LP fee accounting), see Internals.

The risk engine

Headline APY is not the objective. The engine converts each venue's raw yield into a risk-adjusted figure by applying a transparent, weighted set of haircuts.

  • Protocol risk. A base factor for the venue's maturity and audit surface.
  • Liquidity-at-risk. How much of the position could actually exit, blending market depth against the size Aumo would hold.
  • Peg deviation. How far the underlying has drifted from par.
  • Utilization. How stretched the venue is, which governs whether an exit is available.
  • Correlation-aware concentration. Exposure is penalised by how correlated the venues are, so two names that move together are treated closer to one.

Each venue lands in a band (low, moderate, elevated, or high) and the engine ranks on risk-adjusted APY. The full breakdown for the latest cycle is visible in the app.

Guardrails & trust

Because Aumo moves real money, the limits live in the contract, not in the agent's code.

  • Per-move cap. The most that can move in a single transaction.
  • Per-venue cap. The most that can sit in any one venue.
  • Max total deployed. The ceiling on how much of the pool is ever at work.
  • Per-epoch loss budget. A swap venue costs a small spread on each round trip, so even the value a rogue agent could burn by churning is capped per epoch. Your own withdrawals are never subject to it, so you can always exit.
  • Per-epoch deploy budget. A separate rate limit on how fast new capital can be staged, bounding churn independently of the loss budget.
  • Allowlisted venues only. The agent can send funds nowhere else.
  • No external withdrawal path. The agent can shuffle funds between allowlisted venues and back to the pool. It cannot withdraw to any outside address.

Ownership uses a two-step transfer and renouncing is disabled, so the vault can never be left ownerless. The pool can be paused. Every decision is bound to a fingerprint of the governing policy, so a change in behaviour is always traceable to a change in policy.

Deposit & withdraw

Deposit USDT0 into the pool and receive ERC-4626 shares. Those shares are your claim on a pro-rata slice of everything the agent earns. The first deposit needs a one-time approval so the pool can pull your USDT0, then the deposit itself. Withdraw at any time by redeeming shares for USDT0 at the current share price.

Aumo is live on X Layer. You need USDT0 and a little OKB for gas.

Tokenized stocks

Aumo also offers opt-in, at-risk exposure to tokenized US stocks on X Layer, separate from the safe stablecoin pool and its guardrails. These pools hold directional price exposure you choose. They are not capital preservation, and their value moves with the stock.

How the pools work

  • One pool per stock, plus a diversified basket. Each stock (NVIDIA, Apple, Microsoft, Meta) has its own isolated ERC-4626 pool; a separate basket pool holds all four equal-weight. You deposit USDT0 and receive shares.
  • Priced onchain. A market feed Aumo runs posts each stock's price to an on-chain oracle, disclosed to depositors. Deposits, withdrawals, and NAV read from it.
  • Market hours enforced by the contract. The pool freezes entry and exit when the US market is closed, so no one deposits or redeems at a stale weekend price. The underlying can't be traded then anyway.
  • The same guardrails. The agent moves funds only into the stock's allowlisted venue, within per-move, per-venue, and total caps, and can never withdraw to an outside address. The owner never has custody.

What the agent does, and does not, do

On an individual stock pool the agent buys and holds the exposure you chose. It does not time the market or pick stocks. We tested a trend rule that de-risks to cash when a stock breaks its trend, and backtested it honestly: on single names it whipsaws, gives up returns, and does not reliably reduce drawdown, so we removed it. There is no market-timing rule.

The one thing that reliably reduces drawdown is diversification. Over the last five years, including the 2022 selloff, holding an equal-weight basket of these four names cut the maximum drawdown from about 43% on a single name to about 32%. That is what the basket pool is for: one deposit, equal-weight exposure, and the agent's only job is to keep the weights equal by rebalancing on drift. No timing, no stock-picking, and no promise on drawdown.

Risk and exit

You own the price risk. A single stock's drawdown is unbounded, and no rule here promises a maximum loss. Redemption depends on market hours and on the stock's onchain liquidity: exit into a thin order book and you get a worse fill, and an oracle-plus-slippage guard will block a sale that is far below fair value rather than fill it at any price, so in a genuinely thin book an exit can be held back until price or liquidity recovers. Each exiter bears their own exit cost; it is never pushed onto holders who stay. Deposit only what you can afford to lose.

Bridging in

USDT0 is a LayerZero OFT, so you can fund your position from another chain. Pick a source chain and amount, and Aumo quotes the real route and messaging fee from the OFT. The bridged USDT0 arrives on X Layer ready to deposit. Bridging executes from your wallet on the source chain.

FAQ

Can the agent run off with my funds?

No. It can only move funds between allowlisted venues and back to the pool, within on-chain caps. There is no code path that sends funds to an arbitrary address.

What happens if the agent goes offline?

Nothing happens to your funds. Deposits and withdrawals are contract functions that work whether or not the agent is running. An offline agent simply stops rebalancing.

Is this audited?

Aumo runs on X Layer mainnet with conservative caps. The contracts have been hardened and reviewed, but they have not completed a formal third-party audit. Do not deposit funds you cannot afford to lose.

Is this financial advice?

No. Aumo is a tool. Yields are variable and not guaranteed. See the Terms.