Enforced by Your keys
Your funds
Each Garden is a smart-contract wallet at your own address. You hold the keys; BLOK Capital doesn't hold your funds.
Read the source (source: Your funds, opens in a new tab)Security Check the work, not our word.
What the contracts let anyone do, who can change them, where the audits are published, and how to report a problem.
Readout
- Network
- Arbitrum One
- Custody
- Your keys only
- Audits
- New audits in progress
- Addresses
- Published in the docs
- Upgrades
- DAO-approved only
- Readiness
- 0 of 5 done · 2 in progress · 3 planned
release steps
- Write
- Test
- Audit
- Scan
- Approve
- Ship
Launch readiness
What's done, and what isn't yet.
The checks before the public launch. Each status is what this site already says, with the proof beside it; a date appears only where one is known.
0 of 5 done · 2 in progress · 3 planned
Independent audits published
New independent audits are under way. The reports will be published in the BLOK Capital docs once they're final.
In progressMainnet contract addresses published and verified
Mainnet deployment is in progress. Verified addresses will be published in the docs.
In progressPublic bug bounty
A public programme on Immunefi. No dates set yet.
PlannedOpen audit contests
On Cantina and Code4rena. No dates set yet.
PlannedPublic $BLOKC voting
Until the token launches, only the core DAO members listed on Aragon vote. Public $BLOKC voting follows the IDO.
Planned
Who can do what
Who can change what.
Can anyone but you move your funds? Every actor against every action, each answer linked to where it's stated.
Five moments, and what guards each
You
The Garden's owner, signed in with Google or your own wallet.
- Trade or rebalance
- Yes, in a Yield Garden (source: Yield Gardens)
- Install or upgrade facets
- DAO-approved ones only (source: Facets, in the docs, opens in a new tab)
- Pause new Gardens
- Not stated yet
- Change fees
- Not stated yet
Index rebalancer
One pooled trade for every Garden on an index. Anyone can trigger it, once a day.
- Move funds out
- Not stated yet
- Trade or rebalance
- Rebalance only: past 2% drift, at most daily, ≤ 0.5% value loss (source: Rebalancer.sol, opens in a new tab)
- Install or upgrade facets
- Not stated yet
- Pause new Gardens
- Not stated yet
- Change fees
- Not stated yet
Gardener (2027)
A manager you authorise from your Garden, and revoke the same way.
- Trade or rebalance
- Within the permissions you grant (source: Gardeners)
- Install or upgrade facets
- Not stated yet
- Pause new Gardens
- Not stated yet
DAO vote
On-chain through Aragon OSx. Until the token launches, only the core members listed on Aragon vote.
- Move funds out
- Not stated yet
- Trade or rebalance
- Not stated yet
- Install or upgrade facets
- Yes: approves them in the Facet Registry (source: Architecture docs, opens in a new tab)
- Pause new Gardens
- Not stated yet
Security council
Tracked through ENS domains, not a list of hot wallets. Authorises protocol state changes.
- Move funds out
- Not stated yet
- Trade or rebalance
- Not stated yet
- Install or upgrade facets
- Not stated yet
- Pause new Gardens
- Yes: the Garden Factory then refuses new Gardens (source: Architecture docs, opens in a new tab)
- Change fees
- Not stated yet
BLOK Capital team
No admin key over your funds, and no back-room upgrades.
- Move funds out
- No: it doesn't hold your funds (source: Non-custodial design, in the docs, opens in a new tab)
- Trade or rebalance
- Not stated yet
- Install or upgrade facets
- Only through a DAO vote (source: How the DAO decides)
- Pause new Gardens
- Not stated yet
The rules as the docs and contracts describe them; mainnet contracts aren't deployed yet. Each filled cell links to its source. means this site doesn't state it yet. Delays and timelocks will be listed only once they're verified on-chain.
Simulation
Watch a Garden say no.
Five things that could happen to a Garden, run through the checks its contracts enforce. Each trace links to the rule it comes from.
garden.trace / rebalance
Illustrative
Index rebalance: BLOKC5 drifts off its target weights.
- Rebalancer runs for BLOKC5: anyone can trigger.
- Chainlink feeds: LINK, UNI, AAVE, ARB, PENDLE: fresh.
- Every price within ±10% of its average: ok.
- AAVE 2.6% over target (trigger: 2%): trade.
- UNI 0.7% under target (trigger: 2%): skip.
- Best quote: Uniswap V3 vs Camelot V3: routed.
- Value loss 0.21% (cap: 0.5%): within cap.
Verdict: Allow. One pooled trade brings every BLOKC5 Garden back to target.
Rule from Rebalancer.sol (opens in a new tab)Non-custodial design, in the docs (opens in a new tab)Facets and upgrades, in the docs (opens in a new tab)IndexComponentRegistry.sol (opens in a new tab)Rebalancer.sol (opens in a new tab)
The checks are real; the figures and addresses are examples.
Audits
New audits, in progress.
Independent audits of the contracts are under way. The reports are published in the docs, so you can read each one in full.
Status
In progressReports go in the docs.
New independent audits are under way. The reports will be published in the BLOK Capital docs once they're final.
When a report is out, check
- 01
Scope. Which contracts it covers, and which it doesn't.
- 02
Version. The commit it reviewed, against the code that's deployed.
- 03
Findings. What was found, and whether each one was fixed.
How a change reaches production
Fig 3The release line
write · Solidity ^0.8.31, public on GitHub
Contracts
Addresses live in the docs.
Mainnet deployment is in progress. The docs are where verified contract addresses are published. Treat any address that claims to be a BLOK Capital contract, and isn't there, with suspicion.
Official links
Check it against this list.
Every BLOK Capital domain and handle, written out in full, so you can compare them character by character before you click, sign or send. Contract addresses are in the docs.
Websites
- Contract addresses
docs.blokcapital.io/en/ resources/ smart-contract-address - Open Contract addresses (opens in a new tab)
Community
Anything else is not us.
Responsible disclosure
Found a vulnerability?
Report it privately, in a Discord ticket. Here is exactly how, and what we will and won't ask of you.
How to report it
Open a private ticket in the BLOK Capital Discord
Use the Discord invite from the official links above, so you know the server is ours.
Describe it
Include the steps to reproduce it and the impact.
Keep it private
Please don't post it in a public channel or open a public GitHub issue.
Hear back within 24 hours
We'll work out a fix and a disclosure timeline with you there, privately.
We will never ask you to move funds.
In scope: the Garden Diamond, facets, indices and rebalancer contracts, and this website.
Open a private ticket in Discord (opens in a new tab)Stay safe. The BLOK Capital team will never DM you first, and never asks for your seed phrase, private keys or Google login, or for you to sign a transaction or ‘verify’ a wallet. Support happens only in tickets inside our Discord server. Official links are listed here.
Bug bounty and audit contests
Both are planned, with no dates set yet. They're tracked in launch readiness.
Join in
Be first to plant a Garden.
Read the code, then ask the people who wrote it in the Discord.
Launch news goes out on X and in the Discord. Follow us on X (opens in a new tab).
