Reference

Deployed contracts

Mainnet contract addresses for the live market, the current market parameters, and how to verify that the deployed bytecode matches the public source.

Mainnet

Deployed 2026-07-11 from commit 67151f8 against Blend v2’s FixedV2 USDC pool.

ComponentContract

SY wrapper

USDC in, SY shares out; supplies the Blend v2 pool

CCLFK26PU5GNMCUAGBBBGKVXE6GWYA2PB3RFTC7Y5HRVPPBRGWYUZKUU

PT token

SEP-41; mint/burn gated to the tokenizer

CDZ2M6DWIVY6KFJSFEA5KWIDQUDEGFEDQ5XMJPITAVBYLNGFEYLBRMSX

YT token

SEP-41; settles yield on every balance change

CDJIC6JKQ7J5G3KUNRPFXQYNFWVTADCDFWHROSMCI36TVN2ATGIIYFRJ

Tokenizer

Escrows SY; split, recombine, claim, redeem

CBMB52N4XDAFRQRQ4MYGRPFUS3DDREWYY45VWWXEJSPITE5XH7DXEHBX

PT/SY AMM

Time-decay pool; YT routes through it

CDA4HVNGSQ52DCGRYQIE5JKSNWCFTH4FEANHPLWB2U32EXGP36DGZVJK

USDC (Circle SAC)

The underlying asset

CCW67TSZV3SSS2HXMBQ5JFGCKJNXKZM7UQUWUZPUTHXSTZLEO7SJMI75

Blend v2 FixedV2 pool

The yield source

CAJJZSGMMM3PD7N33TAPHGBUGTB43OC73HVIK2L2G6BNGGGYOSSYBXBD

Current market parameters

  • Underlying: Circle USDC, supplied to the Blend v2 FixedV2 pool.
  • Maturity: 2026-08-09 15:39 UTC (a 30-day first cycle).
  • Decimals: 7 (Stellar-native), with rate math in 18-decimal WAD.
  • Swap fee: 0.1% on PT↔SY swaps, configured at deployment.
  • TWAP window: 30 minutes.

The full parameter-selection record (why each value is what it is) is public at docs/deploy/MAINNET_PARAMETERS.md.

Verifying the deployment

The contracts are built reproducibly: the manifest at deployments/mainnet.toml records the source commit and the wasm hash of every contract, and anyone can rebuild from that commit and compare against the on-chain hash:

git checkout 67151f8
bash scripts/verify-reproducible-build.sh \
  --manifest deployments/mainnet.toml

The process and its guarantees are documented in docs/deploy/PROVENANCE.md. CI enforces manifest drift checks, so the recorded provenance stays honest against the repository.

Admin surface

The contracts are immutable: there is no upgrade entrypoint. The single admin key holds exactly one post-deploy power: a constrained reserve-index migration that can re-point the SY wrapper at the same underlying asset under a new Blend reserve slot. The migration validates the new index’s asset against the configured underlying, so it cannot redirect funds, reprice, or mint. Details in Security and risks.

Testnet

A parallel testnet deployment exists for development, generated from the manifest at deployments/testnet.toml. It is not canonical now that mainnet is live.