satUSD

River Stablecoin (satUSD)

· 46/100as of 2026-10-24

satUSD is River's omni-CDP stablecoin overcollateralized by BTC, ETH, BNB, and LSTs; collateral stays source-chain and satUSD is minted via LayerZero OFT.

USD-Pegged Crypto-Backed Centralized-Dependent

InfrastructureLiquity v1

28 Mar 2024

Price

$0.9937

N/A

Market cap

$119.73M

Stale supply · as of Oct 22

+3.98% 24h

Supply

120.50M satUSD

-3.94% 7d

-19.45% 30d

DEWSWatch17/100 · as of 2026-10-24

Peg

Liq48as of 2026-10-24

30d Excess

Price

$0.9937

N/A

Market cap

$119.73M

Stale supply · as of Oct 22

+3.98% 24H

Supply

120.50M satUSD

-3.94% 7D · -19.45% 30D

30d Excess

MechanismCrypto CDPMintingGoverned CDP FreezeYesChains11 JurisdictionNot disclosed Issued2024

MintingGoverned CDP FreezeYesChains11 JurisdictionNot disclosed Issued2024

Omni-CDP Dollar With Vault-Minted Supply

River's satUSD began as an Omni- stablecoin: users lock BTC, ETH, BNB, or liquid staking tokens on one chain and mint satUSD on another through LayerZero , across eleven native deployments. The trove book is no longer the whole story. River's late-September dashboard figures put most observed deposits in Prime Vault custodial BTC wrappers and a further slice in Smart Vault USDT strategy deposits, both of which support internally minted satUSD that never reaches user wallets. River publishes no current liability-weighted reconciliation of those vaults, so Pharos scores the backing pillar on limited evidence. Exit is the strongest pillar: against the least-collateralized troves is permissionless, though on the reviewed Base branch proceeds arrive as WBTC rather than cash. The weakest pillar is economic control. A single River owner EOA holds upgrade and ward powers across the native deployments, including a path to burn from any holder, and collateral pricing runs through single-source oracle paths with no automatic failover. Hundreds of logged peg deviation events also trim the D overall grade. The durable constraint is that overcollateralized troves no longer describe most of what stands behind the token.

Claims as of 2026-10-19

Updated 2026-10-19 · AI summary · drafted by claude-opus-5-5 · facts as of 2026-10-19

AI policy

CeFi-Dependent|Compare

Exit evidence

Redemption route · Waiting for section

Redemption evidence loads when the Risk section approaches the viewport.

Control evidence

satUSD

Mint Authority

Users mint satUSD against collateral under governance, controlled by multiple EOAs and multiple contracts; supply is unbounded under adverse authority.

Confidence: VerifiedControl posture: Single operator

Control map

IssuerGoverned CDP

ControlsDirect minter×8Direct minter EOA×2Proxy admin EOA×2

SupplysatUSDUnbounded, adverse authority

Scoring breakdown

Derived posture Unknown

Component score Loading

The current Safety Score publication is loading; reviewed mint authority evidence is shown below.

Primary controls (17)

satUSD Ethereum River system contract ward (impl 0x87440b10)
Direct minter / Contract
ethereum / 0x5cd923...ee5296
MintDirect
satUSD Ethereum River system contract ward (impl 0xf3d6913b)
Direct minter / Contract
ethereum / 0x355961...4aed86
MintDirect
satUSD Base operational EOA ward
Direct minter / Externally owned account
base / 0xfbddd1...0fa8d0
MintDirectCustodySingle-key address - custody unverifiable
satUSD Base operational EOA ward
Direct minter / Externally owned account
base / 0xc25981...0773c7
MintDirectCustodySingle-key address - custody unverifiable
satUSD Base UUPS owner and ward administrator
Proxy admin / Externally owned account
base / 0xd3e87b...317d47
MintDirectCustodySingle-key address - custody unverifiable
satUSD UUPS owner and ward administrator
Proxy admin / Externally owned account
ethereum / 0xd3e87b...317d47
MintCan authorizeCustodySingle-key address - custody unverifiable
satUSD Ethereum SatoshiXApp mint path
Direct minter / Contract
ethereum / 0xb8374e...5b67E6
MintCap-limited
The verified debt token permits this SatoshiXApp to mint CDP debt and fixed gas compensation; the intended economic bound is the source-chain overcollateralized position and liquidation logic.
satUSD Base SatoshiXApp mint path
Direct minter / Contract
base / 0x9a3c72...811dd3
MintCap-limited
The verified debt token permits this SatoshiXApp to mint CDP debt and fixed gas compensation; the intended economic bound is the source-chain overcollateralized position and liquidation logic.
satUSD Arbitrum SatoshiXApp mint path
Direct minter / Contract
arbitrum / 0x07bbc5...0aa4ec
MintCap-limited
The verified DebtTokenWithLz permits this local SatoshiXApp to mint CDP debt and fixed gas compensation; the intended economic bound is the source-chain overcollateralized position and liquidation logic.
satUSD BSC SatoshiXApp mint path
Direct minter / Contract
bsc / 0x07bbc5...0aa4ec
MintCap-limited
The verified DebtTokenWithLz permits this local SatoshiXApp to mint CDP debt and fixed gas compensation; the intended economic bound is the source-chain overcollateralized position and liquidation logic.
satUSD Sonic SatoshiXApp mint path
Direct minter / Contract
sonic / 0x07bbc5...0aa4ec
MintCap-limited
The verified DebtTokenWithLz permits this local SatoshiXApp to mint CDP debt and fixed gas compensation; the intended economic bound is the source-chain overcollateralized position and liquidation logic.
satUSD BOB SatoshiXApp mint path
Direct minter / Contract
bob / 0xec272a...787ccf
MintCap-limited
The verified DebtTokenWithLz permits this local SatoshiXApp to mint CDP debt and fixed gas compensation; the intended economic bound is the source-chain overcollateralized position and liquidation logic.

Showing 12 of 17 primary controls · 5 more in the full control census

Review notes & sources (34)

satUSD native Mint Authority covers the chain-local SatoshiXApp/CDP issuance paths, the verified Ethereum and Base ward histories, and the River owner EOA's native UUPS/rely powers across all 11 reviewed native deployments. LayerZero OFT burn/mint, peer, delegate, endpoint, and messaging machinery is assessed separately under Bridge Risk.

Control posture

Material control is classified as concentrated in one issuer, protocol team, or operating entity.

CeFi-Dependent is the broader governance classification. Control posture describes more precisely where operational authority sits.

Control posture is not a Safety Score input. Economic Control is scored from the reviewed mint authority, oracle and bridge evidence.

Reviewed 2026-08-16

satUSD

Collateral pricing & liquidation

Single-source / laggy

31 branches price collateral from a single-source or laggy feed; loosest staleness bound 1445m.

Oracle review: Verified

Max LTV90.91%

Min CR110%

Liquidation delayNone

Pricing path

SourcesChainlinkChainlink-compatibleChainlink-compatible (upstream operator unverified)+5 more

AggregatorSingle-source / laggy28 feeds · 31 branches

ConsumerLiquidation engine

Branches

First 5 of 31 · debt shares not measured

ethereum WETH Trove branchPricing tier: Single-source / laggyMin CR 110%
ethereum WBTC Trove branchPricing tier: Single-source / laggyMin CR 110%
ethereum weETH Trove branchPricing tier: Single-source / laggyMin CR 125%
bsc WBTC Trove branchPricing tier: Single-source / laggyMin CR 110%
bsc BTCB Trove branchPricing tier: Single-source / laggyMin CR 120%

+ 26 more branches under Feeds, parameters & failure behavior

Feeds, parameters & failure behavior

Feeds

PriceFeed 0x44AfcF491d9BcA179F9F99d7b11EC5519895f317 -> WETH/USD at 0x5f4eC3Df9cbd43714FE2740f5E3616155c5b8419 · Chainlink · Ethereum · 65m staleness bound
PriceFeed 0x1Af6626290b03803Cedf7eF32e7ADB7DaE844663 -> WBTC/USD at 0xF4030086522a5bEEa4988F8cA5B36dbC97BeE88c · Chainlink · Ethereum · 65m staleness bound
PriceFeed 0x93736af88195abbe9c8E0abeb53Cf6550F0747F6 -> weETH/USD at 0x01cC29E063cc5c28C4e7A84bF1F565C83ba300A5 · Chainlink-compatible · Ethereum · 65m staleness bound
PriceFeed 0x7ddCA7C659BF897dfaA65f830Eaf3343E026Fe8D -> WBTC/USD at 0xcFd160510b5a7912Ee593f8711429b23C71ca947 · Chainlink · BSC · 1445m staleness bound
PriceFeed 0x9d9f0D9a13d3bA201003DD2e8950059d2c08D782 -> BTCB/USD at 0xC3740C3c49EdA37298F8e6C5970D53b9C2498F2b · Chainlink · BSC · 1445m staleness bound
PriceFeed 0xde87146b00817fC265978424880646Fb7b4Fe7b8 -> WETH/USD at 0x8b85b50535551F8E8cDAF78dA235b5Cf1005907b · Chainlink · X Layer · 1445m staleness bound
PriceFeed 0xcA14eAd06B3fa58460d7f9e46a2DE4E1e5090b75 -> WBTC/USD at 0x4D6f6488a2B3a5f7b088f276887f608a1e9805c4 · Chainlink · X Layer · 1445m staleness bound
PriceFeed 0x0341E348DB0F81fD6E425703D05B1FFb9a0835FC -> cbBTC/USD at 0x5f88f74f2474925dF0BE9ef93cA8C3671D9B935A · Chainlink-compatible · X Layer · 1445m staleness bound
PriceFeed 0x82bea9fC5Aa6101AAB55933eA76F2f71cE3ae4e2 -> WETH/USD at 0x71041dddad3595F9CEd3DcCFBe3D1F4b0a16Bb70 · Chainlink · Base · 25m staleness bound
PriceFeed 0xc601034d15e2b739E73D2E1E8Ef9A5C452fB9C0d -> WBTC/USD at 0xCCADC697c55bbB68dc5bCdf8d3CBe83CdD4E071E · Chainlink · Base · 25m staleness bound
PriceFeed 0xB06Ee04eE3FBAD0394259497b15f590DacbCCa83 -> cbBTC/USD at 0x07DA0E54543a844a80ABE69c8A12F22B3aA59f9D · Chainlink · Base · 25m staleness bound
SatoshiXApp oracleRecords(collateralToken) -> PriceFeed 0xc601034d15e2b739e73d2e1e8ef9a5c452fb9c0d -> source() 0xccadc697c55bbb68dc5bcdf8d3cbe83cdd4e071e · Chainlink-compatible (upstream operator unverified) · Base · 25m staleness bound
PriceFeed 0x9d9f0D9a13d3bA201003DD2e8950059d2c08D782 -> WETH/USD at 0x639Fe6ab55C921f74e7fac1ee960C0B6293ba612 · Chainlink · Arbitrum · 1445m staleness bound
PriceFeed 0x5348fFaB4F2dDc88400D7471230a17e18bF26087 -> WBTC/USD at 0xd0C7101eACbB49F3deCcCc166d238410D6D46d57 · Chainlink · Arbitrum · 1445m staleness bound
SatoshiXApp oracleRecords(collateralToken) -> PriceFeed 0x5348ffab4f2ddc88400d7471230a17e18bf26087 -> source() 0xd0c7101eacbb49f3decccc166d238410d6d46d57 · Chainlink-compatible (upstream operator unverified) · Arbitrum · 1445m staleness bound
SatoshiXApp oracleRecords(collateralToken) -> PriceFeed 0x7fe7de5d72633b981191eaee2ccaed95c77e79a9 -> source() 0x824364077993847f71293b24cca8567c00c2de11 · Chainlink-compatible (upstream operator unverified) · Sonic · 1445m staleness bound
SatoshiXApp oracleRecords(collateralToken) -> PriceFeed 0x1324285bb2ddadfc9bebc2f8fc5049d7985312c0 -> source() 0x8bcd59cb7eeeea8e2da3080c891609483dae53ef · Chainlink-compatible (upstream operator unverified) · Sonic · 1445m staleness bound
SatoshiXApp oracleRecords(collateralToken) -> PriceFeed 0xde1cea02e673c9a0dfb8f625b8be289db5bec9fb -> source() 0x8a6e27666cea273958d1d39594f185f5411a2fe4 · Chainlink-compatible (upstream operator unverified) · BOB · 1445m staleness bound · read by 3 branches
SatoshiXApp oracleRecords(collateralToken) -> PriceFeed 0x2fcef71407ffefa2aa0393ecd1750dafcf39ea8d -> source() 0xedf0c69f723910750500a8136b971be135775a07 · Chainlink-compatible (upstream operator unverified) · BOB · 1445m staleness bound
SatoshiXApp oracleRecords(collateralToken) -> PriceFeed 0x4851b1f29e2a2802bb97136aea4106992fc82f33 -> source() 0x81a64473d102b38edcf35a7675654768d11d7e24 · Chainlink-compatible (upstream operator unverified) · BOB · 1d staleness bound
SatoshiXApp oracleRecords(collateralToken) -> PriceFeed 0xaa738260f0c7af2976027d9e0e56e7114991a2bf -> source() 0xfcd454d19f9b8806f8908e99d85b8ea17b3c7346 · APRO (issuer-described) · B² Network · 1d staleness bound · read by 2 branches
PriceFeed 0x9d9f0D9a13d3bA201003DD2e8950059d2c08D782 -> WETH/USD at 0xb9D0073aCb296719C26a8BF156e4b599174fe1d5 · RedStone · Hemi · 365m staleness bound
PriceFeed 0x7ddCA7C659BF897dfaA65f830Eaf3343E026Fe8D -> HemiBTC/USD at 0xE23eCA12D7D2ED3829499556F6dCE06642AFd990 · RedStone · Hemi · 6h staleness bound
SatoshiXApp oracleRecords(collateralToken) -> PriceFeed 0xe10a99cd3f1a064fd358feccb36f968fb38a8bae -> source() 0xe23eca12d7d2ed3829499556f6dce06642afd990 · Chainlink-compatible (upstream operator unverified) · Hemi · 1d staleness bound
PriceFeed 0xDBd6d24dFbBe88B87Bf54961E791FAc7827426CF -> WBTC/USD at 0x9a9a5113b853b394E9BA5FdB7e72bC5797C85191 · DIA · BEVM · 1d staleness bound
PriceFeed 0xfC555dA7C383A583FBc040b9bDcd4cC7d892575D -> BTC/USD multiplied by wstBTC/stBTC exchange rate at 0x9a9a5113b853b394E9BA5FdB7e72bC5797C85191 · DIA plus staking exchange rate · BEVM · 1d staleness bound
PriceFeed 0x78C04c4A2A606077be0Aa04721d6b144Df44Df52 -> WBTC/USD at 0x29304F0c6fd0Db604312d6E982164e1E7C3adAD9 · APRO · Bitlayer · 4000s staleness bound
PriceFeed 0x40918B4649a618eEE47f62Be7Fb6ce5b9906da9A -> stBTC/USD at 0xafB68Ec2aA21B5c2D2A408792eaD54a7AC8fC197 · APRO · Bitlayer · 4000s staleness bound

xlayer WETH Trove branchPricing tier: Single-source / laggyMin CR 110%
xlayer WBTC Trove branchPricing tier: Single-source / laggyMin CR 110%
xlayer cbBTC Trove branchPricing tier: Single-source / laggyMin CR 150%
base WETH Trove branchPricing tier: Single-source / laggyMin CR 110%
base WBTC Trove branchPricing tier: Single-source / laggyMin CR 110%
base cbBTC Trove branchPricing tier: Single-source / laggyMin CR 120%
base clBTC Trove branchPricing tier: Single-source / laggyMin CR 150%
arbitrum WETH Trove branchPricing tier: Single-source / laggyMin CR 110%
arbitrum WBTC Trove branchPricing tier: Single-source / laggyMin CR 110%
arbitrum clBTC Trove branchPricing tier: Single-source / laggyMin CR 150%
sonic WETH Trove branchPricing tier: Single-source / laggyMin CR 110%
sonic WBTC Trove branchPricing tier: Single-source / laggyMin CR 110%
bob WBTC Trove branchPricing tier: Single-source / laggyMin CR 110%
bob tBTC Trove branchPricing tier: Single-source / laggyMin CR 125%
bob solvBTC Trove branchPricing tier: Single-source / laggyMin CR 145%
bob solvBTC.BBN Trove branchPricing tier: Single-source / laggyMin CR 155%
bob FBTC Trove branchPricing tier: Single-source / laggyMin CR 125%
bsquared WBTC Trove branchPricing tier: Single-source / laggyMin CR 110%
bsquared stBTC (registry uBTC) Trove branchPricing tier: Single-source / laggyMin CR 170%
hemi WETH Trove branchPricing tier: Single-source / laggyMin CR 110%
hemi HemiBTC Trove branchPricing tier: Single-source / laggyMin CR 110%
hemi WBTC Trove branchPricing tier: Single-source / laggyMin CR 110%
bevm WBTC Trove branchPricing tier: Single-source / laggyMin CR 110%
bevm wstBTC Trove branchPricing tier: Single-source / laggyMin CR 170%
bitlayer WBTC Trove branchPricing tier: Single-source / laggyMin CR 110%
bitlayer stBTC Trove branchPricing tier: Single-source / laggyMin CR 160%

ethereum WETH Trove branch

WETH · max LTV 90.91% · MCR 110% · TroveManager 0xb97E6219B0836E21ae671358e746f03dcdbCb6D8; PriceFeed 0x44AfcF491d9BcA179F9F99d7b11EC5519895f317; debt 84057591437969129521091 raw 18-decimal satUSD; cap 1000000 satUSD; sunsetting=false and paused=false.

Any caller can execute an immediate fixed-path liquidation below MCR; there is no auction or keeper allowlist. The chain-local Stability Pool burns satUSD against seized collateral first and any unoffset debt/collateral is redistributed across surviving troves; Recovery Mode expands eligibility up to TCR or 150% subject to pool coverage. · liquidation delay None

Chain-local depositor-funded Stability Pool offsets liquidations first; flash-loan execution can supply atomic liquidity but is not committed insurance. Any remainder is redistributed to active troves.

The branch wrapper reverts on a non-positive or older-than-3900-second source. There is no cached-price or alternate-provider fallback; an admin-configurable source or threshold is not automatic failover.

Owner sunset sets the branch cap to zero, blocks new debt, and leaves repayment, redemption, and liquidation live. Unoffset debt and collateral are redistributed to surviving troves; the final trove cannot be liquidated and must repay or be redeemed.

ethereum WBTC Trove branch

WBTC · max LTV 90.91% · MCR 110% · TroveManager 0xc03403DD8f27CEFA314Fc109D26777c81b0De895; PriceFeed 0x1Af6626290b03803Cedf7eF32e7ADB7DaE844663; debt 22520199283000000000000 raw 18-decimal satUSD; cap 1000000 satUSD; sunsetting=false and paused=false.

ethereum weETH Trove branch

weETH · max LTV 80% · MCR 125% · TroveManager 0x2135EfEF5aC35ba549Cc791cEc4D15E8C8115611; PriceFeed 0x93736af88195abbe9c8E0abeb53Cf6550F0747F6; debt 240000000000000000000 raw 18-decimal satUSD; cap 1000000 satUSD; sunsetting=false and paused=false.

bsc WBTC Trove branch

WBTC · max LTV 90.91% · MCR 110% · TroveManager 0xb655775C4C7C6e0C2002935133c950FB89974928; PriceFeed 0x7ddCA7C659BF897dfaA65f830Eaf3343E026Fe8D; debt 37455425000000000000 raw 18-decimal satUSD; cap 1000000 satUSD; sunsetting=false and paused=false.

The branch wrapper reverts on a non-positive or older-than-86700-second source. There is no cached-price or alternate-provider fallback; an admin-configurable source or threshold is not automatic failover.

bsc BTCB Trove branch

BTCB · max LTV 83.33% · MCR 120% · TroveManager 0x5EA26D0A1a9aa6731F9BFB93fCd654cd1C3079Ec; PriceFeed 0x9d9f0D9a13d3bA201003DD2e8950059d2c08D782; debt 40550370557849253066 raw 18-decimal satUSD; cap 1000000 satUSD; sunsetting=false and paused=false.

xlayer WETH Trove branch

WETH · max LTV 90.91% · MCR 110% · TroveManager 0xbe223F331f05a8cf18F98675033FEFD6b23c7176; PriceFeed 0xde87146b00817fC265978424880646Fb7b4Fe7b8; debt 0 raw 18-decimal satUSD; cap 1000000 satUSD; sunsetting=false and paused=false; zero debt but the branch remained callable with a nonzero cap.

xlayer WBTC Trove branch

WBTC · max LTV 90.91% · MCR 110% · TroveManager 0xd19BC6B110896d136D9456E8fD45C71C8d8C5abB; PriceFeed 0xcA14eAd06B3fa58460d7f9e46a2DE4E1e5090b75; debt 12050000000000000000 raw 18-decimal satUSD; cap 1000000 satUSD; sunsetting=false and paused=false.

xlayer cbBTC Trove branch

cbBTC · max LTV 66.67% · MCR 150% · TroveManager 0xE92d7002E3172dD1Ee4ABeAfcfD4fDB0D8F042D5; PriceFeed 0x0341E348DB0F81fD6E425703D05B1FFb9a0835FC; debt 12050000000000000000 raw 18-decimal satUSD; cap 1000000 satUSD; sunsetting=false and paused=false.

base WETH Trove branch

WETH · max LTV 90.91% · MCR 110% · TroveManager 0xddac7d4e228c205197FE9961865FFE20173dE56B; PriceFeed 0x82bea9fC5Aa6101AAB55933eA76F2f71cE3ae4e2; debt 16603481000000000002 plus 2 defaulted raw 18-decimal satUSD; cap 1000000 satUSD; sunsetting=false and paused=false.

The branch wrapper reverts on a non-positive or older-than-1500-second source. There is no cached-price or alternate-provider fallback; an admin-configurable source or threshold is not automatic failover.

base WBTC Trove branch

WBTC · max LTV 90.91% · MCR 110% · TroveManager 0x4B37F38DF39C9E6D876b830ED3FF444533Aa2E45; PriceFeed 0xc601034d15e2b739E73D2E1E8Ef9A5C452fB9C0d; debt 12000000000000000000 raw 18-decimal satUSD; cap 1000000 satUSD; sunsetting=false and paused=false.

base cbBTC Trove branch

cbBTC · max LTV 83.33% · MCR 120% · TroveManager 0x50B02283f3c39A463DF3d84d44d46b5432D7D193; PriceFeed 0xB06Ee04eE3FBAD0394259497b15f590DacbCCa83; debt 2975417198000000048192 raw 18-decimal satUSD; cap 1000000 satUSD; sunsetting=false and paused=false.

base clBTC Trove branch

clBTC · max LTV 66.67% · MCR 150% · Historical 2026-07-14 collateral-parameter observation (not refreshed): TroveManager 0x01DF7D28c51639F2f2F95dcF2FdFF374269327B0; PriceFeed 0xA9ECf240B4621cf703aDc3985a084770D8Df1F3A; debt 9415926056000000000000000 raw 18-decimal satUSD; cap 10000000 satUSD; sunsetting=false and paused=false. The registry now selects 0xc601034d15e2b739e73d2e1e8ef9a5c452fb9c0d at block 52024166 on 2026-10-01; the earlier PriceFeed in this note is historical.

The current wrapper's runtime logic matches the verified PriceFeedChainlink implementation after accounting for the immutable source address and compiler metadata. It reverts on a non-positive or older-than-1500-second source; there is no cached-price or alternate-provider fallback, and the owner can change the age threshold.

arbitrum WETH Trove branch

WETH · max LTV 90.91% · MCR 110% · TroveManager 0xb655775C4C7C6e0C2002935133c950FB89974928; PriceFeed 0x9d9f0D9a13d3bA201003DD2e8950059d2c08D782; debt 6477998081663552406180 raw 18-decimal satUSD; cap 1000000 satUSD; sunsetting=false and paused=false.

arbitrum WBTC Trove branch

WBTC · max LTV 90.91% · MCR 110% · TroveManager 0x5EA26D0A1a9aa6731F9BFB93fCd654cd1C3079Ec; PriceFeed 0x5348fFaB4F2dDc88400D7471230a17e18bF26087; debt 38175000000000000000 raw 18-decimal satUSD; cap 1000000 satUSD; sunsetting=false and paused=false.

arbitrum clBTC Trove branch

clBTC · max LTV 66.67% · MCR 150% · Historical 2026-07-14 collateral-parameter observation (not refreshed): TroveManager 0xa7B54413129441e872F42C1c4fE7D1984332CA87; PriceFeed 0x7a38cB1aB2409873C86b73C71cdb33e916696956; debt 9645828176264000000000000 raw 18-decimal satUSD; cap 10000000 satUSD; sunsetting=false and paused=false. The registry now selects 0x5348ffab4f2ddc88400d7471230a17e18bf26087 at block 510584522 on 2026-10-01; the earlier PriceFeed in this note is historical.

The current wrapper's runtime logic matches the verified PriceFeedChainlink implementation after accounting for the immutable source address and compiler metadata. It reverts on a non-positive or older-than-86700-second source; there is no cached-price or alternate-provider fallback, and the owner can change the age threshold.

sonic WETH Trove branch

WETH · max LTV 90.91% · MCR 110% · Historical 2026-07-14 collateral-parameter observation (not refreshed): TroveManager 0xb655775C4C7C6e0C2002935133c950FB89974928; PriceFeed 0x595aDC759518DD58fd644b8d5a166A00388c77C4; debt 12085149397581336470 raw 18-decimal satUSD; cap 1000000 satUSD; sunsetting=false and paused=false. The registry now selects 0x7fe7de5d72633b981191eaee2ccaed95c77e79a9 at block 80179092 on 2026-10-01; the earlier PriceFeed in this note is historical.

The current wrapper's runtime logic matches the verified PriceFeedChainlink implementation after accounting for the immutable source address and compiler metadata. It reverts on a non-positive or older-than-86700-second source; there is no cached-price or alternate-provider fallback, and the owner can change the age threshold.

sonic WBTC Trove branch

WBTC · max LTV 90.91% · MCR 110% · Historical 2026-07-14 collateral-parameter observation (not refreshed): TroveManager 0x5EA26D0A1a9aa6731F9BFB93fCd654cd1C3079Ec; PriceFeed 0x9d9f0D9a13d3bA201003DD2e8950059d2c08D782; debt 41175000000000000000 plus 17075000000000000000 defaulted raw 18-decimal satUSD; cap 1000000 satUSD; sunsetting=false and paused=false. The registry now selects 0x1324285bb2ddadfc9bebc2f8fc5049d7985312c0 at block 80179092 on 2026-10-01; the earlier PriceFeed in this note is historical.

The current wrapper's runtime logic matches the verified PriceFeedChainlink implementation after accounting for the immutable source address and compiler metadata. It reverts on a non-positive or older-than-86700-second source; there is no cached-price or alternate-provider fallback, and the owner can change the age threshold.

bob WBTC Trove branch

WBTC · max LTV 90.91% · MCR 110% · Historical 2026-07-14 collateral-parameter observation (not refreshed): TroveManager 0xB6C69F4EfC6ad9d12C5Fc3715722D5bbEa712a3f; PriceFeed 0x4851b1F29E2A2802bb97136aEA4106992FC82f33; debt 0 raw 18-decimal satUSD; cap 1000000 satUSD; sunsetting=false and paused=false; zero debt but the branch remained callable with a nonzero cap. The registry now selects 0xde1cea02e673c9a0dfb8f625b8be289db5bec9fb at block 38987846 on 2026-10-01; the earlier PriceFeed in this note is historical.

The current wrapper's runtime logic matches the verified PriceFeedChainlink implementation after accounting for the immutable source address and compiler metadata. It reverts on a non-positive or older-than-86700-second source; there is no cached-price or alternate-provider fallback, and the owner can change the age threshold.

bob tBTC Trove branch

tBTC · max LTV 80% · MCR 125% · Historical 2026-07-14 collateral-parameter observation (not refreshed): TroveManager 0xbf626Fc742bFfD6F17de9Cf2480Da25Dad4D5135; PriceFeed 0x18D2d92cecE0E983C77c1F705F7617b6826c33e8; debt 12000000000000000000 raw 18-decimal satUSD; cap 1000000 satUSD; sunsetting=false and paused=false. The registry now selects 0x2fcef71407ffefa2aa0393ecd1750dafcf39ea8d at block 38987846 on 2026-10-01; the earlier PriceFeed in this note is historical.

The current wrapper's runtime logic matches the verified PriceFeedChainlink implementation after accounting for the immutable source address and compiler metadata. It reverts on a non-positive or older-than-86700-second source; there is no cached-price or alternate-provider fallback, and the owner can change the age threshold.

bob solvBTC Trove branch

solvBTC · max LTV 68.97% · MCR 145% · Historical 2026-07-14 collateral-parameter observation (not refreshed): TroveManager 0x39F36DA1f4028473d41e077E178c8551bE4bb231; PriceFeed 0x6A18A6b715bF690aC5e16b022AceF139b3355956; debt 203000000000000000000 raw 18-decimal satUSD; cap 1000000 satUSD; sunsetting=false and paused=false. The registry now selects 0xde1cea02e673c9a0dfb8f625b8be289db5bec9fb at block 38987846 on 2026-10-01; the earlier PriceFeed in this note is historical.

The current wrapper's runtime logic matches the verified PriceFeedChainlink implementation after accounting for the immutable source address and compiler metadata. It reverts on a non-positive or older-than-86700-second source; there is no cached-price or alternate-provider fallback, and the owner can change the age threshold.

bob solvBTC.BBN Trove branch

solvBTC.BBN · max LTV 64.52% · MCR 155% · Historical 2026-07-14 collateral-parameter observation (not refreshed): TroveManager 0x1F6eF853341037c5C057101F2E38C15c95130807; PriceFeed 0xE3cD7A8AEb9c1305162b216aB93Ef98EfC0e451c; debt 128600243066708655760 raw 18-decimal satUSD; cap 1000000 satUSD; sunsetting=false and paused=false. The registry now selects 0xde1cea02e673c9a0dfb8f625b8be289db5bec9fb at block 38987846 on 2026-10-01; the earlier PriceFeed in this note is historical.

The current wrapper's runtime logic matches the verified PriceFeedChainlink implementation after accounting for the immutable source address and compiler metadata. It reverts on a non-positive or older-than-86700-second source; there is no cached-price or alternate-provider fallback, and the owner can change the age threshold.

bob FBTC Trove branch

FBTC · max LTV 80% · MCR 125% · Historical 2026-07-14 collateral-parameter observation (not refreshed): TroveManager 0x4dEA4c11bDd3Ad05063405C7167Fa9B3f95Aea90; PriceFeed 0x5c64d9aa1E7Bb51C50A940F2E46b2B65C99Fca81; debt 0 raw 18-decimal satUSD; cap 1000000 satUSD; sunsetting=false and paused=false; zero debt but the branch remained callable with a nonzero cap. The registry now selects 0x4851b1f29e2a2802bb97136aea4106992fc82f33 at block 38987846 on 2026-10-01; the earlier PriceFeed in this note is historical.

Historical 2026-07-14 wrapper behavior: The branch wrapper reverts on a non-positive or older-than-86400-second source. There is no cached-price or alternate-provider fallback; an admin-configurable source or threshold is not automatic failover. At the 2026-10-01 pin the registry selects 0x4851b1f29e2a2802bb97136aea4106992fc82f33; source() and maxTimeThreshold() were observed, but the replacement wrapper's full enforcement/failover implementation was not independently reverified. No new protective control is claimed.

bsquared WBTC Trove branch

WBTC · max LTV 90.91% · MCR 110% · Historical 2026-07-14 collateral-parameter observation (not refreshed): TroveManager 0x8FBfe28D6E5424d7f8c8c29A4910ce8a618d2D54; PriceFeed 0xdee136cd19cBfb6571c93E834071E00d721E5cF0; debt 24000000000000000000 raw 18-decimal satUSD; cap 1000000 satUSD; sunsetting=false and paused=false. The registry now selects 0xaa738260f0c7af2976027d9e0e56e7114991a2bf at block 38837026 on 2026-10-01; the earlier PriceFeed in this note is historical.

Historical 2026-07-14 wrapper behavior: The branch wrapper reverts on a non-positive or older-than-86400-second source. There is no cached-price or alternate-provider fallback; an admin-configurable source or threshold is not automatic failover. At the 2026-10-01 pin the registry selects 0xaa738260f0c7af2976027d9e0e56e7114991a2bf; source() and maxTimeThreshold() were observed, but the replacement wrapper's full enforcement/failover implementation was not independently reverified. No new protective control is claimed.

bsquared stBTC (registry uBTC) Trove branch

stBTC (registry uBTC) · max LTV 58.82% · MCR 170% · Historical 2026-07-14 collateral-parameter observation (not refreshed): TroveManager 0xa03B86E93c98FE95caC2A6645fF271Bb67040eab; PriceFeed 0x6C481F0d17Cd6d1299D5f211217e86f25d829B00; debt 1030162243973017249291147 raw 18-decimal satUSD; cap 1000000 satUSD; sunsetting=false and paused=false. The registry now selects 0xaa738260f0c7af2976027d9e0e56e7114991a2bf at block 38837026 on 2026-10-01; the earlier PriceFeed in this note is historical.

Historical 2026-07-14 wrapper behavior: The branch wrapper reverts on a non-positive or older-than-3780-second source. There is no cached-price or alternate-provider fallback; every configured component must succeed; an admin-configurable source or threshold is not automatic failover. At the 2026-10-01 pin the registry selects 0xaa738260f0c7af2976027d9e0e56e7114991a2bf; source() and maxTimeThreshold() were observed, but the replacement wrapper's full enforcement/failover implementation was not independently reverified. No new protective control is claimed.

hemi WETH Trove branch

WETH · max LTV 90.91% · MCR 110% · TroveManager 0xb655775C4C7C6e0C2002935133c950FB89974928; PriceFeed 0x9d9f0D9a13d3bA201003DD2e8950059d2c08D782; debt 12000000000000000000 raw 18-decimal satUSD; cap 1000000 satUSD; sunsetting=false and paused=false.

The branch wrapper reverts on a non-positive or older-than-21900-second source. There is no cached-price or alternate-provider fallback; an admin-configurable source or threshold is not automatic failover.

hemi HemiBTC Trove branch

HemiBTC · max LTV 90.91% · MCR 110% · TroveManager 0x5EA26D0A1a9aa6731F9BFB93fCd654cd1C3079Ec; PriceFeed 0x7ddCA7C659BF897dfaA65f830Eaf3343E026Fe8D; debt 13089134868000000038279 raw 18-decimal satUSD; cap 1000000 satUSD; sunsetting=false and paused=false.

The branch wrapper reverts on a non-positive or older-than-21600-second source. There is no cached-price or alternate-provider fallback; an admin-configurable source or threshold is not automatic failover.

hemi WBTC Trove branch

WBTC · max LTV 90.91% · MCR 110% · Historical 2026-07-14 collateral-parameter observation (not refreshed): TroveManager 0xa7B54413129441e872F42C1c4fE7D1984332CA87; PriceFeed 0x7cfe0DB80E7D197e61B9388F67008946C7AF1281; debt 12050000000000000000 raw 18-decimal satUSD; cap 1000000 satUSD; sunsetting=false and paused=false. The registry now selects 0xe10a99cd3f1a064fd358feccb36f968fb38a8bae at block 5414247 on 2026-10-01; the earlier PriceFeed in this note is historical.

The current wrapper's runtime logic matches the verified PriceFeedChainlink implementation after accounting for the immutable source address and compiler metadata. It reverts on a non-positive or older-than-86400-second source; there is no cached-price or alternate-provider fallback, and the owner can change the age threshold.

bevm WBTC Trove branch

WBTC · max LTV 90.91% · MCR 110% · TroveManager 0xe7E23aD9c455c2Bcd3f7943437f4dFBe9149c0D2; PriceFeed 0xDBd6d24dFbBe88B87Bf54961E791FAc7827426CF; debt 320180921893450153694 raw 18-decimal satUSD; cap 1000000000 satUSD; sunsetting=false and paused=false.

The branch wrapper reverts on a non-positive or older-than-86400-second source. There is no cached-price or alternate-provider fallback; an admin-configurable source or threshold is not automatic failover.

bevm wstBTC Trove branch

wstBTC · max LTV 58.82% · MCR 170% · TroveManager 0xD63e204F0aB688403205cFC144CAdfc0D8C68458; PriceFeed 0xfC555dA7C383A583FBc040b9bDcd4cC7d892575D; debt 1623945700000000000000 raw 18-decimal satUSD; cap 1000000000 satUSD; sunsetting=false and paused=false.

bitlayer WBTC Trove branch

WBTC · max LTV 90.91% · MCR 110% · TroveManager 0x3DC0565bcA627823828Aa3F2f8d805ec8a16005a; PriceFeed 0x78C04c4A2A606077be0Aa04721d6b144Df44Df52; debt 1045000000000000000000 raw 18-decimal satUSD; cap 1000000000 satUSD; sunsetting=false and paused=false.

The branch wrapper reverts on a non-positive or older-than-4000-second source. There is no cached-price or alternate-provider fallback; an admin-configurable source or threshold is not automatic failover.

bitlayer stBTC Trove branch

stBTC · max LTV 62.5% · MCR 160% · TroveManager 0x404dCd7E15947D04063B436f71d93E2d79023aa9; PriceFeed 0x40918B4649a618eEE47f62Be7Fb6ce5b9906da9A; debt 522500000000000000000 raw 18-decimal satUSD; cap 1000000000 satUSD; sunsetting=false and paused=false.

Review notes & sources (52)

The 2026-07-14 review enumerated 31 callable collateral branches across 11 chains and documented branch-local single-provider or all-components-required aggregate wrappers, fail-closed pricing without cache or automatic provider failover, and immediate Stability Pool-first liquidation followed by redistribution. Pinned 2026-10-01 registry reads identified 12 replacement pricing paths, updated below with current source and maximum-age parameters. Unrefreshed collateral parameters and other branch descriptions retain their historical dates; these partial reads do not constitute a new full-profile review.

ethereum WETH Trove branch: The callable WETH branch uses one Chainlink wrapper path with a contract-enforced 3900-second maximum age.
ethereum WBTC Trove branch: The callable WBTC branch uses one Chainlink wrapper path with a contract-enforced 3900-second maximum age.
ethereum weETH Trove branch: The callable weETH branch uses one Chainlink-compatible wrapper path with a contract-enforced 3900-second maximum age.
bsc WBTC Trove branch: The callable WBTC branch uses one Chainlink wrapper path with a contract-enforced 86700-second maximum age.
bsc BTCB Trove branch: The callable BTCB branch uses one Chainlink wrapper path with a contract-enforced 86700-second maximum age.
xlayer WETH Trove branch: The callable WETH branch uses one Chainlink wrapper path with a contract-enforced 86700-second maximum age.
xlayer WBTC Trove branch: The callable WBTC branch uses one Chainlink wrapper path with a contract-enforced 86700-second maximum age.
xlayer cbBTC Trove branch: The callable cbBTC branch uses one Chainlink-compatible wrapper path with a contract-enforced 86700-second maximum age.
base WETH Trove branch: The callable WETH branch uses one Chainlink wrapper path with a contract-enforced 1500-second maximum age.
base WBTC Trove branch: The callable WBTC branch uses one Chainlink wrapper path with a contract-enforced 1500-second maximum age.
base cbBTC Trove branch: The callable cbBTC branch uses one Chainlink wrapper path with a contract-enforced 1500-second maximum age.
base clBTC Trove branch: As of 2026-10-01, the collateral registry selects PriceFeed 0xc601034d15e2b739e73d2e1e8ef9a5c452fb9c0d, whose source() returned 0xccadc697c55bbb68dc5bcdf8d3cbe83cdd4e071e and maxTimeThreshold() returned 1500 seconds. This is a source()-based path, not the historical provider/aggregate configuration; no automatic failover protection is credited.
arbitrum WETH Trove branch: The callable WETH branch uses one Chainlink wrapper path with a contract-enforced 86700-second maximum age.
arbitrum WBTC Trove branch: The callable WBTC branch uses one Chainlink wrapper path with a contract-enforced 86700-second maximum age.
arbitrum clBTC Trove branch: As of 2026-10-01, the collateral registry selects PriceFeed 0x5348ffab4f2ddc88400d7471230a17e18bf26087, whose source() returned 0xd0c7101eacbb49f3decccc166d238410d6d46d57 and maxTimeThreshold() returned 86700 seconds. This is a source()-based path, not the historical provider/aggregate configuration; no automatic failover protection is credited.
sonic WETH Trove branch: As of 2026-10-01, the collateral registry selects PriceFeed 0x7fe7de5d72633b981191eaee2ccaed95c77e79a9, whose source() returned 0x824364077993847f71293b24cca8567c00c2de11 and maxTimeThreshold() returned 86700 seconds. This is a source()-based path, not the historical provider/aggregate configuration; no automatic failover protection is credited.
sonic WBTC Trove branch: As of 2026-10-01, the collateral registry selects PriceFeed 0x1324285bb2ddadfc9bebc2f8fc5049d7985312c0, whose source() returned 0x8bcd59cb7eeeea8e2da3080c891609483dae53ef and maxTimeThreshold() returned 86700 seconds. This is a source()-based path, not the historical provider/aggregate configuration; no automatic failover protection is credited.
bob WBTC Trove branch: As of 2026-10-01, the collateral registry selects PriceFeed 0xde1cea02e673c9a0dfb8f625b8be289db5bec9fb, whose source() returned 0x8a6e27666cea273958d1d39594f185f5411a2fe4 and maxTimeThreshold() returned 86700 seconds. This is a source()-based path, not the historical provider/aggregate configuration; no automatic failover protection is credited.
bob tBTC Trove branch: As of 2026-10-01, the collateral registry selects PriceFeed 0x2fcef71407ffefa2aa0393ecd1750dafcf39ea8d, whose source() returned 0xedf0c69f723910750500a8136b971be135775a07 and maxTimeThreshold() returned 86700 seconds. This is a source()-based path, not the historical provider/aggregate configuration; no automatic failover protection is credited.
bob solvBTC Trove branch: As of 2026-10-01, the collateral registry selects PriceFeed 0xde1cea02e673c9a0dfb8f625b8be289db5bec9fb, whose source() returned 0x8a6e27666cea273958d1d39594f185f5411a2fe4 and maxTimeThreshold() returned 86700 seconds. This is a source()-based path, not the historical provider/aggregate configuration; no automatic failover protection is credited.
bob solvBTC.BBN Trove branch: As of 2026-10-01, the collateral registry selects PriceFeed 0xde1cea02e673c9a0dfb8f625b8be289db5bec9fb, whose source() returned 0x8a6e27666cea273958d1d39594f185f5411a2fe4 and maxTimeThreshold() returned 86700 seconds. This is a source()-based path, not the historical provider/aggregate configuration; no automatic failover protection is credited.
bob FBTC Trove branch: As of 2026-10-01, the collateral registry selects PriceFeed 0x4851b1f29e2a2802bb97136aea4106992fc82f33, whose source() returned 0x81a64473d102b38edcf35a7675654768d11d7e24 and maxTimeThreshold() returned 86400 seconds. This is a source()-based path, not the historical provider/aggregate configuration; no automatic failover protection is credited.
bsquared WBTC Trove branch: As of 2026-10-01, the collateral registry selects PriceFeed 0xaa738260f0c7af2976027d9e0e56e7114991a2bf, whose source() returned 0xfcd454d19f9b8806f8908e99d85b8ea17b3c7346 and maxTimeThreshold() returned 86400 seconds. This is a source()-based path, not the historical provider/aggregate configuration; no automatic failover protection is credited.
bsquared stBTC (registry uBTC) Trove branch: As of 2026-10-01, the collateral registry selects PriceFeed 0xaa738260f0c7af2976027d9e0e56e7114991a2bf, whose source() returned 0xfcd454d19f9b8806f8908e99d85b8ea17b3c7346 and maxTimeThreshold() returned 86400 seconds. This is a source()-based path, not the historical provider/aggregate configuration; no automatic failover protection is credited.
hemi WETH Trove branch: The callable WETH branch uses one RedStone wrapper path with a contract-enforced 21900-second maximum age.
hemi HemiBTC Trove branch: The callable HemiBTC branch uses one RedStone wrapper path with a contract-enforced 21600-second maximum age.
hemi WBTC Trove branch: As of 2026-10-01, the collateral registry selects PriceFeed 0xe10a99cd3f1a064fd358feccb36f968fb38a8bae, whose source() returned 0xe23eca12d7d2ed3829499556f6dce06642afd990 and maxTimeThreshold() returned 86400 seconds. This is a source()-based path, not the historical provider/aggregate configuration; no automatic failover protection is credited.
bevm WBTC Trove branch: The callable WBTC branch uses one DIA wrapper path with a contract-enforced 86400-second maximum age.
bevm wstBTC Trove branch: The callable wstBTC branch uses one DIA plus staking exchange rate wrapper path with a contract-enforced 86400-second maximum age.
bitlayer WBTC Trove branch: The callable WBTC branch uses one APRO wrapper path with a contract-enforced 4000-second maximum age.
bitlayer stBTC Trove branch: The callable stBTC branch uses one APRO wrapper path with a contract-enforced 4000-second maximum age.

Reviewed 2026-07-14

satUSD

Mostly validator network

11 routes on 11 chains, mostly external validator network (10). 10 third-party (91%).

Confidence: Manual review

Routes by chain (11)

Equal widths, supply split unavailable

Review notes & sources (4)

The review rates the inventory external lock & mint overall, weaker than every listed route (weakest: external validator network).

River's chain-local SatoshiXApp/CDP paths create native satUSD liabilities and remain in Mint Authority. Bridge Risk separately scores the issuer-deployed DebtTokenWithLz LayerZero OFT burn/mint routes, including owner-gated upgrades, peer/delegate/configuration authority, endpoint and messaging dependencies, and DVN/executor common-mode risk. This CTRL/BRDG review remains blocked on unresolved current peers, route limits, and LayerZero DVN/executor configuration; it is not a cleared validation review. The BEVM deployment's owner, SatoshiXApp, implementation, and endpoint getter were re-read at block 13444309 on 2026-10-01, but the endpoint's protocol version and validation configuration remain unverified. River's bridge documentation confirms the OFT burn/mint model, while the verified owner-gated UUPS implementations on the non-BEVM routes leave bridge-mint limits raiseable; the resulting route tier remains external-lock-mint.

Reviewed 2026-08-28

satUSD

Freezable

A reviewed issuer or protocol control can freeze or seize this token in holders' wallets.

Sourced review

Power and scope

PowerFreezable

ScopeCanonical · RestrictableBridged · Restrictable×3

Reviewed deployments (4)

EthereumCanonical · Restrictable
BaseBridged · Restrictable
BOBBridged · Restrictable
BSCBridged · Restrictable

Transfer posture reviewed 2026-07-17.

Review notes & sources (5)

On 2026-10-19, BSC and BOB were material satUSD deployments: BSC outstanding supply was 79,352,817.887974 satUSD (63.26% of the circulating-supply census) and BOB outstanding supply was 20,315,858.869542 satUSD (16.23%). At BSC block 128510918 and in the BOB read, owner() returned 0xd3e87B4B76E6F8bFf454AAFc2AD3271C5b317d47, an EOA with empty runtime code (0x), and wards(owner) returned 1 on both chains. Read-only eth_call simulations of burn(0x000000000000000000000000000000000000dEaD,0) from that owner succeeded with return data 0x on both deployments, while random EOA callers reverted with 'Debt: Caller not TroveManager or auth'. The verified DebtTokenWithLz implementation permits an authorized ward to burn from an arbitrary holder without holder allowance. The current owner/ward can therefore reach a holder-targeted burn path on each material deployment, establishing Yes independently of the separate fixed protocol-recipient transfer guard. The zero-amount simulations establish authorization and code reachability, not destruction of a nonzero holder balance; no transactions were broadcast.

Reviewed 2026-10-19

Regulatory standing

Not reviewed

Key links

Website Twitter Docs

Contracts

11 deployments tracked across Ethereum, Arbitrum, Base, and BSC, plus 7 more.

Primary contract

Ethereum

0x1958...d0d2

View on Ethereum explorer

Ethereum0x1958...d0d2

Arbitrum0xb481...66cb

Base0x7065...a162

BSC0xb481...66cb

Sonic0xb481...66cb

BOB0xecf2...871f

Bitlayer0xba50...a783

B² Network0x8dd8...1f6f

Hemi0xb481...66cb

Supply & Liquidity

History

Explore

Explore next

Move from this coin into the next useful surface: peer benchmarks, taxonomy cohorts, or live trackers that add context to what you just read.

Peers

DAI

Depeg history

satUSD depeg Mar 2026 satUSD depeg Feb 2026 satUSD depeg Feb 2026 satUSD depeg Feb 2026 satUSD depeg Feb 2026

Taxonomy

All US Dollar stablecoins CeFi-Dependent stablecoins Crypto-Collateralized stablecoins Liquity v1 stablecoins

Trackers

Stablecoin safety scores DEX liquidity rankings Depeg tracker See all CDP stablecoins

Actions

Open satUSD in live compare Set satUSD Telegram alerts Browse stablecoin comparisons Read the daily digest Use the Pharos API

Profile

satUSD profile facts

River Stablecoin (satUSD) static profile: governance model CeFi-Dependent; backing model Crypto-Collateralized; peg US Dollar.

CeFi-Dependent Crypto-Collateralized US Dollar Liquity v1

Collateral: BTC, ETH, BNB, and liquid staking tokens through Omni-CDP; Prime Vault custodian-held BTC and Smart Vault deposits including USDT/USDC support internally minted satUSD
Peg mechanism: Omni-CDP overcollateralized by BTC, ETH, BNB, or LSTs; collateral stays on its source chain and destination satUSD uses LayerZero messaging. Holder collateral redemption selects least-collateralized positions. The reviewed Base WBTC trove requires TCR at least 110% and a 14-day deployment bootstrap; its fee uses dynamic base rate plus a current 0.5% floor capped at 5%, and actual proceeds are WBTC rather than native BTC or cash. Prime and Smart Vault maturity withdrawals are distinct deposit-holder paths: their internally minted satUSD never enters user wallets. Other collateral/deployment phases require separate execution reviews
Jurisdiction: Not disclosed in the static profile.
Proof of reserves: No proof-of-reserves entry in the static profile.
Contracts: 11 deployments tracked across Ethereum, Arbitrum, Base, and BSC, plus 7 more.

Source: Pharos registry profile fields. Live price, supply, reserve, liquidity, event, and safety data load in the interactive dossier on this page.

satUSD quick answers

What is River Stablecoin (satUSD)?

satUSD is River's omni-CDP stablecoin overcollateralized by BTC, ETH, BNB, and LSTs; collateral stays source-chain and satUSD is minted via LayerZero OFT. The static profile records its US Dollar peg mechanism as: Omni-CDP overcollateralized by BTC, ETH, BNB, or LSTs; collateral stays on its source chain and destination satUSD uses LayerZero messaging. Holder collateral redemption selects least-collateralized positions.

Is satUSD safe?

As of Oct 24, 2026, Pharos grades satUSD D (46/100) on its Safety Score. Pharos's reviews record that the issuer or an admin can freeze individual holders' balances, and any holder can use its reviewed redemption route. That is a low-band grade, which flags significant structural risk. The grade moves as reserve, redemption, peg and control evidence changes; the live Safety Score on this page shows the current reading.

What backs satUSD?

Pharos records satUSD's reserves as of Sep 29, 2026 as 62.5% Prime Vault custodial BTC collateral (bfBTC on BNB Chain, uniBTC on Base and BOB), 27.2% On-chain omni-CDP trove collateral (clBTC on Arbitrum and Base dominant; residual WETH, WBTC, tBTC, SolvBTC, xSolvBTC, HemiBTC, xBTC, BTCB, and ETH branches), and 10.3% Smart Vault USDT-denominated strategy deposits (Ethereum; holdings unreconciled). Reserve evidence: live reserve feed configured. Pharos classifies the backing as Crypto-Collateralized.

Can satUSD be frozen or blacklisted?

Based on tracked contract metadata and blacklist coverage, issuer or admin freeze controls are recorded.

How do you redeem satUSD?

Under the route Pharos reviewed on Aug 27, 2026, any holder can redeem satUSD for blue-chip crypto collateral. Redemption settles atomically on-chain. The fee is variable or not fully published. Whether a given holder qualifies is set by the route's own terms, not by this summary.

Control evidence

satUSD

Mint Authority

Users mint satUSD against collateral under governance, controlled by multiple EOAs and multiple contracts; supply is unbounded under adverse authority.

Confidence: VerifiedControl posture: Single operator

Control map

IssuerGoverned CDP

ControlsDirect minter×8Direct minter EOA×2Proxy admin EOA×2

SupplysatUSDUnbounded, adverse authority

Scoring breakdown

Derived posture Unknown

Component score Loading

The current Safety Score publication is loading; reviewed mint authority evidence is shown below.

Primary controls (17)

satUSD Ethereum River system contract ward (impl 0x87440b10)
Direct minter / Contract
ethereum / 0x5cd923...ee5296
MintDirect
satUSD Ethereum River system contract ward (impl 0xf3d6913b)
Direct minter / Contract
ethereum / 0x355961...4aed86
MintDirect
satUSD Base operational EOA ward
Direct minter / Externally owned account
base / 0xfbddd1...0fa8d0
MintDirectCustodySingle-key address - custody unverifiable
satUSD Base operational EOA ward
Direct minter / Externally owned account
base / 0xc25981...0773c7
MintDirectCustodySingle-key address - custody unverifiable
satUSD Base UUPS owner and ward administrator
Proxy admin / Externally owned account
base / 0xd3e87b...317d47
MintDirectCustodySingle-key address - custody unverifiable
satUSD UUPS owner and ward administrator
Proxy admin / Externally owned account
ethereum / 0xd3e87b...317d47
MintCan authorizeCustodySingle-key address - custody unverifiable
satUSD Ethereum SatoshiXApp mint path
Direct minter / Contract
ethereum / 0xb8374e...5b67E6
MintCap-limited
The verified debt token permits this SatoshiXApp to mint CDP debt and fixed gas compensation; the intended economic bound is the source-chain overcollateralized position and liquidation logic.
satUSD Base SatoshiXApp mint path
Direct minter / Contract
base / 0x9a3c72...811dd3
MintCap-limited
The verified debt token permits this SatoshiXApp to mint CDP debt and fixed gas compensation; the intended economic bound is the source-chain overcollateralized position and liquidation logic.
satUSD Arbitrum SatoshiXApp mint path
Direct minter / Contract
arbitrum / 0x07bbc5...0aa4ec
MintCap-limited
The verified DebtTokenWithLz permits this local SatoshiXApp to mint CDP debt and fixed gas compensation; the intended economic bound is the source-chain overcollateralized position and liquidation logic.
satUSD BSC SatoshiXApp mint path
Direct minter / Contract
bsc / 0x07bbc5...0aa4ec
MintCap-limited
The verified DebtTokenWithLz permits this local SatoshiXApp to mint CDP debt and fixed gas compensation; the intended economic bound is the source-chain overcollateralized position and liquidation logic.
satUSD Sonic SatoshiXApp mint path
Direct minter / Contract
sonic / 0x07bbc5...0aa4ec
MintCap-limited
The verified DebtTokenWithLz permits this local SatoshiXApp to mint CDP debt and fixed gas compensation; the intended economic bound is the source-chain overcollateralized position and liquidation logic.
satUSD BOB SatoshiXApp mint path
Direct minter / Contract
bob / 0xec272a...787ccf
MintCap-limited
The verified DebtTokenWithLz permits this local SatoshiXApp to mint CDP debt and fixed gas compensation; the intended economic bound is the source-chain overcollateralized position and liquidation logic.

Showing 12 of 17 primary controls · 5 more in the full control census

Review notes & sources (34)

Control posture

Material control is classified as concentrated in one issuer, protocol team, or operating entity.

CeFi-Dependent is the broader governance classification. Control posture describes more precisely where operational authority sits.

Control posture is not a Safety Score input. Economic Control is scored from the reviewed mint authority, oracle and bridge evidence.

Reviewed 2026-08-16

satUSD

Collateral pricing & liquidation

Single-source / laggy

31 branches price collateral from a single-source or laggy feed; loosest staleness bound 1445m.

Oracle review: Verified

Max LTV90.91%

Min CR110%

Liquidation delayNone

Pricing path

SourcesChainlinkChainlink-compatibleChainlink-compatible (upstream operator unverified)+5 more

AggregatorSingle-source / laggy28 feeds · 31 branches

ConsumerLiquidation engine

Branches

First 5 of 31 · debt shares not measured

ethereum WETH Trove branchPricing tier: Single-source / laggyMin CR 110%
ethereum WBTC Trove branchPricing tier: Single-source / laggyMin CR 110%
ethereum weETH Trove branchPricing tier: Single-source / laggyMin CR 125%
bsc WBTC Trove branchPricing tier: Single-source / laggyMin CR 110%
bsc BTCB Trove branchPricing tier: Single-source / laggyMin CR 120%

+ 26 more branches under Feeds, parameters & failure behavior

Feeds, parameters & failure behavior

Feeds

PriceFeed 0x44AfcF491d9BcA179F9F99d7b11EC5519895f317 -> WETH/USD at 0x5f4eC3Df9cbd43714FE2740f5E3616155c5b8419 · Chainlink · Ethereum · 65m staleness bound
PriceFeed 0x1Af6626290b03803Cedf7eF32e7ADB7DaE844663 -> WBTC/USD at 0xF4030086522a5bEEa4988F8cA5B36dbC97BeE88c · Chainlink · Ethereum · 65m staleness bound
PriceFeed 0x93736af88195abbe9c8E0abeb53Cf6550F0747F6 -> weETH/USD at 0x01cC29E063cc5c28C4e7A84bF1F565C83ba300A5 · Chainlink-compatible · Ethereum · 65m staleness bound
PriceFeed 0x7ddCA7C659BF897dfaA65f830Eaf3343E026Fe8D -> WBTC/USD at 0xcFd160510b5a7912Ee593f8711429b23C71ca947 · Chainlink · BSC · 1445m staleness bound
PriceFeed 0x9d9f0D9a13d3bA201003DD2e8950059d2c08D782 -> BTCB/USD at 0xC3740C3c49EdA37298F8e6C5970D53b9C2498F2b · Chainlink · BSC · 1445m staleness bound
PriceFeed 0xde87146b00817fC265978424880646Fb7b4Fe7b8 -> WETH/USD at 0x8b85b50535551F8E8cDAF78dA235b5Cf1005907b · Chainlink · X Layer · 1445m staleness bound
PriceFeed 0xcA14eAd06B3fa58460d7f9e46a2DE4E1e5090b75 -> WBTC/USD at 0x4D6f6488a2B3a5f7b088f276887f608a1e9805c4 · Chainlink · X Layer · 1445m staleness bound
PriceFeed 0x0341E348DB0F81fD6E425703D05B1FFb9a0835FC -> cbBTC/USD at 0x5f88f74f2474925dF0BE9ef93cA8C3671D9B935A · Chainlink-compatible · X Layer · 1445m staleness bound
PriceFeed 0x82bea9fC5Aa6101AAB55933eA76F2f71cE3ae4e2 -> WETH/USD at 0x71041dddad3595F9CEd3DcCFBe3D1F4b0a16Bb70 · Chainlink · Base · 25m staleness bound
PriceFeed 0xc601034d15e2b739E73D2E1E8Ef9A5C452fB9C0d -> WBTC/USD at 0xCCADC697c55bbB68dc5bCdf8d3CBe83CdD4E071E · Chainlink · Base · 25m staleness bound
PriceFeed 0xB06Ee04eE3FBAD0394259497b15f590DacbCCa83 -> cbBTC/USD at 0x07DA0E54543a844a80ABE69c8A12F22B3aA59f9D · Chainlink · Base · 25m staleness bound
SatoshiXApp oracleRecords(collateralToken) -> PriceFeed 0xc601034d15e2b739e73d2e1e8ef9a5c452fb9c0d -> source() 0xccadc697c55bbb68dc5bcdf8d3cbe83cdd4e071e · Chainlink-compatible (upstream operator unverified) · Base · 25m staleness bound
PriceFeed 0x9d9f0D9a13d3bA201003DD2e8950059d2c08D782 -> WETH/USD at 0x639Fe6ab55C921f74e7fac1ee960C0B6293ba612 · Chainlink · Arbitrum · 1445m staleness bound
PriceFeed 0x5348fFaB4F2dDc88400D7471230a17e18bF26087 -> WBTC/USD at 0xd0C7101eACbB49F3deCcCc166d238410D6D46d57 · Chainlink · Arbitrum · 1445m staleness bound
SatoshiXApp oracleRecords(collateralToken) -> PriceFeed 0x5348ffab4f2ddc88400d7471230a17e18bf26087 -> source() 0xd0c7101eacbb49f3decccc166d238410d6d46d57 · Chainlink-compatible (upstream operator unverified) · Arbitrum · 1445m staleness bound
SatoshiXApp oracleRecords(collateralToken) -> PriceFeed 0x7fe7de5d72633b981191eaee2ccaed95c77e79a9 -> source() 0x824364077993847f71293b24cca8567c00c2de11 · Chainlink-compatible (upstream operator unverified) · Sonic · 1445m staleness bound
SatoshiXApp oracleRecords(collateralToken) -> PriceFeed 0x1324285bb2ddadfc9bebc2f8fc5049d7985312c0 -> source() 0x8bcd59cb7eeeea8e2da3080c891609483dae53ef · Chainlink-compatible (upstream operator unverified) · Sonic · 1445m staleness bound
SatoshiXApp oracleRecords(collateralToken) -> PriceFeed 0xde1cea02e673c9a0dfb8f625b8be289db5bec9fb -> source() 0x8a6e27666cea273958d1d39594f185f5411a2fe4 · Chainlink-compatible (upstream operator unverified) · BOB · 1445m staleness bound · read by 3 branches
SatoshiXApp oracleRecords(collateralToken) -> PriceFeed 0x2fcef71407ffefa2aa0393ecd1750dafcf39ea8d -> source() 0xedf0c69f723910750500a8136b971be135775a07 · Chainlink-compatible (upstream operator unverified) · BOB · 1445m staleness bound
SatoshiXApp oracleRecords(collateralToken) -> PriceFeed 0x4851b1f29e2a2802bb97136aea4106992fc82f33 -> source() 0x81a64473d102b38edcf35a7675654768d11d7e24 · Chainlink-compatible (upstream operator unverified) · BOB · 1d staleness bound
SatoshiXApp oracleRecords(collateralToken) -> PriceFeed 0xaa738260f0c7af2976027d9e0e56e7114991a2bf -> source() 0xfcd454d19f9b8806f8908e99d85b8ea17b3c7346 · APRO (issuer-described) · B² Network · 1d staleness bound · read by 2 branches
PriceFeed 0x9d9f0D9a13d3bA201003DD2e8950059d2c08D782 -> WETH/USD at 0xb9D0073aCb296719C26a8BF156e4b599174fe1d5 · RedStone · Hemi · 365m staleness bound
PriceFeed 0x7ddCA7C659BF897dfaA65f830Eaf3343E026Fe8D -> HemiBTC/USD at 0xE23eCA12D7D2ED3829499556F6dCE06642AFd990 · RedStone · Hemi · 6h staleness bound
SatoshiXApp oracleRecords(collateralToken) -> PriceFeed 0xe10a99cd3f1a064fd358feccb36f968fb38a8bae -> source() 0xe23eca12d7d2ed3829499556f6dce06642afd990 · Chainlink-compatible (upstream operator unverified) · Hemi · 1d staleness bound
PriceFeed 0xDBd6d24dFbBe88B87Bf54961E791FAc7827426CF -> WBTC/USD at 0x9a9a5113b853b394E9BA5FdB7e72bC5797C85191 · DIA · BEVM · 1d staleness bound
PriceFeed 0xfC555dA7C383A583FBc040b9bDcd4cC7d892575D -> BTC/USD multiplied by wstBTC/stBTC exchange rate at 0x9a9a5113b853b394E9BA5FdB7e72bC5797C85191 · DIA plus staking exchange rate · BEVM · 1d staleness bound
PriceFeed 0x78C04c4A2A606077be0Aa04721d6b144Df44Df52 -> WBTC/USD at 0x29304F0c6fd0Db604312d6E982164e1E7C3adAD9 · APRO · Bitlayer · 4000s staleness bound
PriceFeed 0x40918B4649a618eEE47f62Be7Fb6ce5b9906da9A -> stBTC/USD at 0xafB68Ec2aA21B5c2D2A408792eaD54a7AC8fC197 · APRO · Bitlayer · 4000s staleness bound

xlayer WETH Trove branchPricing tier: Single-source / laggyMin CR 110%
xlayer WBTC Trove branchPricing tier: Single-source / laggyMin CR 110%
xlayer cbBTC Trove branchPricing tier: Single-source / laggyMin CR 150%
base WETH Trove branchPricing tier: Single-source / laggyMin CR 110%
base WBTC Trove branchPricing tier: Single-source / laggyMin CR 110%
base cbBTC Trove branchPricing tier: Single-source / laggyMin CR 120%
base clBTC Trove branchPricing tier: Single-source / laggyMin CR 150%
arbitrum WETH Trove branchPricing tier: Single-source / laggyMin CR 110%
arbitrum WBTC Trove branchPricing tier: Single-source / laggyMin CR 110%
arbitrum clBTC Trove branchPricing tier: Single-source / laggyMin CR 150%
sonic WETH Trove branchPricing tier: Single-source / laggyMin CR 110%
sonic WBTC Trove branchPricing tier: Single-source / laggyMin CR 110%
bob WBTC Trove branchPricing tier: Single-source / laggyMin CR 110%
bob tBTC Trove branchPricing tier: Single-source / laggyMin CR 125%
bob solvBTC Trove branchPricing tier: Single-source / laggyMin CR 145%
bob solvBTC.BBN Trove branchPricing tier: Single-source / laggyMin CR 155%
bob FBTC Trove branchPricing tier: Single-source / laggyMin CR 125%
bsquared WBTC Trove branchPricing tier: Single-source / laggyMin CR 110%
bsquared stBTC (registry uBTC) Trove branchPricing tier: Single-source / laggyMin CR 170%
hemi WETH Trove branchPricing tier: Single-source / laggyMin CR 110%
hemi HemiBTC Trove branchPricing tier: Single-source / laggyMin CR 110%
hemi WBTC Trove branchPricing tier: Single-source / laggyMin CR 110%
bevm WBTC Trove branchPricing tier: Single-source / laggyMin CR 110%
bevm wstBTC Trove branchPricing tier: Single-source / laggyMin CR 170%
bitlayer WBTC Trove branchPricing tier: Single-source / laggyMin CR 110%
bitlayer stBTC Trove branchPricing tier: Single-source / laggyMin CR 160%

ethereum WETH Trove branch

ethereum WBTC Trove branch

ethereum weETH Trove branch

bsc WBTC Trove branch

bsc BTCB Trove branch

xlayer WETH Trove branch

xlayer WBTC Trove branch

xlayer cbBTC Trove branch

base WETH Trove branch

base WBTC Trove branch

base cbBTC Trove branch

base clBTC Trove branch

arbitrum WETH Trove branch

arbitrum WBTC Trove branch

arbitrum clBTC Trove branch

The current wrapper's runtime logic matches the verified PriceFeedChainlink implementation after accounting for the immutable source address and compiler metadata. It reverts on a non-positive or older-than-86700-second source; there is no cached-price or alternate-provider fallback, and the owner can change the age threshold.

sonic WETH Trove branch

The current wrapper's runtime logic matches the verified PriceFeedChainlink implementation after accounting for the immutable source address and compiler metadata. It reverts on a non-positive or older-than-86700-second source; there is no cached-price or alternate-provider fallback, and the owner can change the age threshold.

sonic WBTC Trove branch

The current wrapper's runtime logic matches the verified PriceFeedChainlink implementation after accounting for the immutable source address and compiler metadata. It reverts on a non-positive or older-than-86700-second source; there is no cached-price or alternate-provider fallback, and the owner can change the age threshold.

bob WBTC Trove branch

The current wrapper's runtime logic matches the verified PriceFeedChainlink implementation after accounting for the immutable source address and compiler metadata. It reverts on a non-positive or older-than-86700-second source; there is no cached-price or alternate-provider fallback, and the owner can change the age threshold.

bob tBTC Trove branch

The current wrapper's runtime logic matches the verified PriceFeedChainlink implementation after accounting for the immutable source address and compiler metadata. It reverts on a non-positive or older-than-86700-second source; there is no cached-price or alternate-provider fallback, and the owner can change the age threshold.

bob solvBTC Trove branch

The current wrapper's runtime logic matches the verified PriceFeedChainlink implementation after accounting for the immutable source address and compiler metadata. It reverts on a non-positive or older-than-86700-second source; there is no cached-price or alternate-provider fallback, and the owner can change the age threshold.

bob solvBTC.BBN Trove branch

The current wrapper's runtime logic matches the verified PriceFeedChainlink implementation after accounting for the immutable source address and compiler metadata. It reverts on a non-positive or older-than-86700-second source; there is no cached-price or alternate-provider fallback, and the owner can change the age threshold.

bob FBTC Trove branch

bsquared WBTC Trove branch

Historical 2026-07-14 wrapper behavior: The branch wrapper reverts on a non-positive or older-than-86400-second source. There is no cached-price or alternate-provider fallback; an admin-configurable source or threshold is not automatic failover. At the 2026-10-01 pin the registry selects 0xaa738260f0c7af2976027d9e0e56e7114991a2bf; source() and maxTimeThreshold() were observed, but the replacement wrapper's full enforcement/failover implementation was not independently reverified. No new protective control is claimed.

bsquared stBTC (registry uBTC) Trove branch

hemi WETH Trove branch

hemi HemiBTC Trove branch

hemi WBTC Trove branch

The current wrapper's runtime logic matches the verified PriceFeedChainlink implementation after accounting for the immutable source address and compiler metadata. It reverts on a non-positive or older-than-86400-second source; there is no cached-price or alternate-provider fallback, and the owner can change the age threshold.

bevm WBTC Trove branch

bevm wstBTC Trove branch

bitlayer WBTC Trove branch

bitlayer stBTC Trove branch

Review notes & sources (52)

ethereum WETH Trove branch: The callable WETH branch uses one Chainlink wrapper path with a contract-enforced 3900-second maximum age.
ethereum WBTC Trove branch: The callable WBTC branch uses one Chainlink wrapper path with a contract-enforced 3900-second maximum age.
ethereum weETH Trove branch: The callable weETH branch uses one Chainlink-compatible wrapper path with a contract-enforced 3900-second maximum age.
bsc WBTC Trove branch: The callable WBTC branch uses one Chainlink wrapper path with a contract-enforced 86700-second maximum age.
bsc BTCB Trove branch: The callable BTCB branch uses one Chainlink wrapper path with a contract-enforced 86700-second maximum age.
xlayer WETH Trove branch: The callable WETH branch uses one Chainlink wrapper path with a contract-enforced 86700-second maximum age.
xlayer WBTC Trove branch: The callable WBTC branch uses one Chainlink wrapper path with a contract-enforced 86700-second maximum age.
xlayer cbBTC Trove branch: The callable cbBTC branch uses one Chainlink-compatible wrapper path with a contract-enforced 86700-second maximum age.
base WETH Trove branch: The callable WETH branch uses one Chainlink wrapper path with a contract-enforced 1500-second maximum age.
base WBTC Trove branch: The callable WBTC branch uses one Chainlink wrapper path with a contract-enforced 1500-second maximum age.
base cbBTC Trove branch: The callable cbBTC branch uses one Chainlink wrapper path with a contract-enforced 1500-second maximum age.
base clBTC Trove branch: As of 2026-10-01, the collateral registry selects PriceFeed 0xc601034d15e2b739e73d2e1e8ef9a5c452fb9c0d, whose source() returned 0xccadc697c55bbb68dc5bcdf8d3cbe83cdd4e071e and maxTimeThreshold() returned 1500 seconds. This is a source()-based path, not the historical provider/aggregate configuration; no automatic failover protection is credited.
arbitrum WETH Trove branch: The callable WETH branch uses one Chainlink wrapper path with a contract-enforced 86700-second maximum age.
arbitrum WBTC Trove branch: The callable WBTC branch uses one Chainlink wrapper path with a contract-enforced 86700-second maximum age.
arbitrum clBTC Trove branch: As of 2026-10-01, the collateral registry selects PriceFeed 0x5348ffab4f2ddc88400d7471230a17e18bf26087, whose source() returned 0xd0c7101eacbb49f3decccc166d238410d6d46d57 and maxTimeThreshold() returned 86700 seconds. This is a source()-based path, not the historical provider/aggregate configuration; no automatic failover protection is credited.
sonic WETH Trove branch: As of 2026-10-01, the collateral registry selects PriceFeed 0x7fe7de5d72633b981191eaee2ccaed95c77e79a9, whose source() returned 0x824364077993847f71293b24cca8567c00c2de11 and maxTimeThreshold() returned 86700 seconds. This is a source()-based path, not the historical provider/aggregate configuration; no automatic failover protection is credited.
sonic WBTC Trove branch: As of 2026-10-01, the collateral registry selects PriceFeed 0x1324285bb2ddadfc9bebc2f8fc5049d7985312c0, whose source() returned 0x8bcd59cb7eeeea8e2da3080c891609483dae53ef and maxTimeThreshold() returned 86700 seconds. This is a source()-based path, not the historical provider/aggregate configuration; no automatic failover protection is credited.
bob WBTC Trove branch: As of 2026-10-01, the collateral registry selects PriceFeed 0xde1cea02e673c9a0dfb8f625b8be289db5bec9fb, whose source() returned 0x8a6e27666cea273958d1d39594f185f5411a2fe4 and maxTimeThreshold() returned 86700 seconds. This is a source()-based path, not the historical provider/aggregate configuration; no automatic failover protection is credited.
bob tBTC Trove branch: As of 2026-10-01, the collateral registry selects PriceFeed 0x2fcef71407ffefa2aa0393ecd1750dafcf39ea8d, whose source() returned 0xedf0c69f723910750500a8136b971be135775a07 and maxTimeThreshold() returned 86700 seconds. This is a source()-based path, not the historical provider/aggregate configuration; no automatic failover protection is credited.
bob solvBTC Trove branch: As of 2026-10-01, the collateral registry selects PriceFeed 0xde1cea02e673c9a0dfb8f625b8be289db5bec9fb, whose source() returned 0x8a6e27666cea273958d1d39594f185f5411a2fe4 and maxTimeThreshold() returned 86700 seconds. This is a source()-based path, not the historical provider/aggregate configuration; no automatic failover protection is credited.
bob solvBTC.BBN Trove branch: As of 2026-10-01, the collateral registry selects PriceFeed 0xde1cea02e673c9a0dfb8f625b8be289db5bec9fb, whose source() returned 0x8a6e27666cea273958d1d39594f185f5411a2fe4 and maxTimeThreshold() returned 86700 seconds. This is a source()-based path, not the historical provider/aggregate configuration; no automatic failover protection is credited.
bob FBTC Trove branch: As of 2026-10-01, the collateral registry selects PriceFeed 0x4851b1f29e2a2802bb97136aea4106992fc82f33, whose source() returned 0x81a64473d102b38edcf35a7675654768d11d7e24 and maxTimeThreshold() returned 86400 seconds. This is a source()-based path, not the historical provider/aggregate configuration; no automatic failover protection is credited.
bsquared WBTC Trove branch: As of 2026-10-01, the collateral registry selects PriceFeed 0xaa738260f0c7af2976027d9e0e56e7114991a2bf, whose source() returned 0xfcd454d19f9b8806f8908e99d85b8ea17b3c7346 and maxTimeThreshold() returned 86400 seconds. This is a source()-based path, not the historical provider/aggregate configuration; no automatic failover protection is credited.
bsquared stBTC (registry uBTC) Trove branch: As of 2026-10-01, the collateral registry selects PriceFeed 0xaa738260f0c7af2976027d9e0e56e7114991a2bf, whose source() returned 0xfcd454d19f9b8806f8908e99d85b8ea17b3c7346 and maxTimeThreshold() returned 86400 seconds. This is a source()-based path, not the historical provider/aggregate configuration; no automatic failover protection is credited.
hemi WETH Trove branch: The callable WETH branch uses one RedStone wrapper path with a contract-enforced 21900-second maximum age.
hemi HemiBTC Trove branch: The callable HemiBTC branch uses one RedStone wrapper path with a contract-enforced 21600-second maximum age.
hemi WBTC Trove branch: As of 2026-10-01, the collateral registry selects PriceFeed 0xe10a99cd3f1a064fd358feccb36f968fb38a8bae, whose source() returned 0xe23eca12d7d2ed3829499556f6dce06642afd990 and maxTimeThreshold() returned 86400 seconds. This is a source()-based path, not the historical provider/aggregate configuration; no automatic failover protection is credited.
bevm WBTC Trove branch: The callable WBTC branch uses one DIA wrapper path with a contract-enforced 86400-second maximum age.
bevm wstBTC Trove branch: The callable wstBTC branch uses one DIA plus staking exchange rate wrapper path with a contract-enforced 86400-second maximum age.
bitlayer WBTC Trove branch: The callable WBTC branch uses one APRO wrapper path with a contract-enforced 4000-second maximum age.
bitlayer stBTC Trove branch: The callable stBTC branch uses one APRO wrapper path with a contract-enforced 4000-second maximum age.

Reviewed 2026-07-14

satUSD

Mostly validator network

11 routes on 11 chains, mostly external validator network (10). 10 third-party (91%).

Confidence: Manual review

Routes by chain (11)

Equal widths, supply split unavailable

Review notes & sources (4)

The review rates the inventory external lock & mint overall, weaker than every listed route (weakest: external validator network).

Reviewed 2026-08-28

satUSD

Freezable

A reviewed issuer or protocol control can freeze or seize this token in holders' wallets.

Sourced review

Power and scope

PowerFreezable

ScopeCanonical · RestrictableBridged · Restrictable×3

Reviewed deployments (4)

EthereumCanonical · Restrictable
BaseBridged · Restrictable
BOBBridged · Restrictable
BSCBridged · Restrictable

Transfer posture reviewed 2026-07-17.

Review notes & sources (5)

Reviewed 2026-10-19

Regulatory standing

Not reviewed

River Stablecoin (satUSD)

Omni-CDP Dollar With Vault-Minted Supply

Exit evidence

Redemption route · Waiting for section

Control evidence

Mint Authority

Control posture

Collateral pricing & liquidation

Branches

Feeds

ethereum WETH Trove branch

ethereum WBTC Trove branch

ethereum weETH Trove branch

bsc WBTC Trove branch

bsc BTCB Trove branch

xlayer WETH Trove branch

xlayer WBTC Trove branch

xlayer cbBTC Trove branch

base WETH Trove branch

base WBTC Trove branch

base cbBTC Trove branch

base clBTC Trove branch

arbitrum WETH Trove branch

arbitrum WBTC Trove branch

arbitrum clBTC Trove branch

sonic WETH Trove branch

sonic WBTC Trove branch

bob WBTC Trove branch

bob tBTC Trove branch

bob solvBTC Trove branch

bob solvBTC.BBN Trove branch

bob FBTC Trove branch

bsquared WBTC Trove branch

bsquared stBTC (registry uBTC) Trove branch

hemi WETH Trove branch

hemi HemiBTC Trove branch

hemi WBTC Trove branch

bevm WBTC Trove branch

bevm wstBTC Trove branch

bitlayer WBTC Trove branch

bitlayer stBTC Trove branch

Bridging & deployments

Freeze & seizure

Regulatory standing

Key links

Contracts

Supply & Liquidity#

History#

Explore#

Explore next

satUSD profile facts

satUSD quick answers

River Stablecoin (satUSD)

Omni-CDP Dollar With Vault-Minted Supply

Mechanism

Peg mechanism

Collateral

Peg mechanism

Collateral

Mechanism review

Reserves

Exit evidence

Redemption route · Waiting for section

Control evidence

Mint Authority

Control posture

Collateral pricing & liquidation

Branches

Feeds

ethereum WETH Trove branch

ethereum WBTC Trove branch

ethereum weETH Trove branch

bsc WBTC Trove branch

bsc BTCB Trove branch

xlayer WETH Trove branch

xlayer WBTC Trove branch

xlayer cbBTC Trove branch

base WETH Trove branch

base WBTC Trove branch

base cbBTC Trove branch

Supply & Liquidity

History

Explore

Supply & Liquidity

History

Explore