Loaf documentation

Loaf is on-chain investing infrastructure: audited strategy contracts, a shared risk engine and one ledger across six networks. This is the technical reference for people who want to know exactly what happens to their deposit.

The protocol launched recently and is deliberately small — around $742K in total value locked across 32 verified accounts. We publish the real numbers rather than rounded-up ones, and they update as the protocol grows.

Quickstart

From an empty wallet to a funded position takes about three minutes.

1. Connect an EVM or Solana wallet. Read-only until you sign a deposit.
2. Pick a vault and read its mandate — every limit shown there is enforced in the contract.
3. Approve the asset, then deposit. You receive vault share tokens in the same transaction.
4. Withdraw whenever you like. Core vaults have no lockup and no withdrawal queue.

Supported networks

Vault mechanics

A Loaf vault is an ERC-4626-style contract. Depositors hold share tokens; the share price is net asset value divided by supply, recomputed on every interaction.

shares = assets × totalSupply / totalAssets
assets = shares × totalAssets / totalSupply

Curators can trade only the assets and venues listed in the mandate, and only inside the position caps. A trade that would breach a cap reverts — the risk engine is not a monitoring dashboard, it is a precondition.

• Non-custodial: the team cannot move assets outside the strategy contract
• NAV is published on-chain continuously, not snapshotted daily
• Withdrawals are permissionless and cannot be paused outside a published emergency procedure
• Every fill is receipted and independently verifiable against the venue

Live vaults

Fees

Two fees, both enforced by the contract and both visible on the vault page before you deposit.

The high-water mark is per vault, not per depositor cohort: if the share price sits below its all-time high, no performance fee accrues until it recovers.

Risk framework

Every mandate declares hard limits. These are the parameters the contract checks.

Curators post $LOAF as collateral. If they breach a published limit, governance can slash that stake and the vault stops accepting deposits.

$LOAF token

Fixed supply of 1,000,000,000. There is no mint function — supply cannot be increased after deployment.

Staked $LOAF earns a share of protocol revenue and carries voting weight over risk parameters. Governance does not control treasury withdrawal keys.

Security model

• Two independent audits — OpenZeppelin and Spearbit — with reports published in full
• $100K bug bounty live on Immunefi, no exclusions on core contracts
• 4-of-7 multisig with independent signers and a 48-hour timelock on every upgrade
• Proof of reserves attested by Chainlink and refreshed hourly

Upgrades are announced before the timelock starts, so depositors always have time to withdraw before a change takes effect.

Public API

Read endpoints are open and unauthenticated at 60 requests per minute. Trading endpoints need an API key created in the dashboard.

List vaults

GET https://api.loaf.com/v1/vaults

{
  "vaults": [
    {
      "id": "core-yield",
      "name": "Loaf Core Yield",
      "chain": "base",
      "asset": "USDC",
      "tvl": 318000,
      "apy30d": 0.094,
      "sharePrice": "1.0472",
      "risk": "low"
    }
  ]
}

Positions for an address

GET https://api.loaf.com/v1/portfolio/:address

curl https://api.loaf.com/v1/portfolio/0xabc…123 \
  -H "Accept: application/json"

Price stream

const ws = new WebSocket('wss://api.loaf.com/v1/stream')

ws.onopen = () => ws.send(JSON.stringify({
  op: 'subscribe',
  channels: ['nav:core-yield', 'price:LOAF']
}))

ws.onmessage = (e) => console.log(JSON.parse(e.data))

Support

• Product questions — read the FAQ first
• Account and deposits — support@loaf.com
• Security disclosures — security@loaf.com
• Status and incident history — status.loaf.com

Nobody from Loaf will ever ask for your seed phrase, private key, or a signature that transfers assets to an address you did not choose.