Halo is an auto-compounding stablecoin vault with a card wired to it. Every four hours the vault harvests, then splits the harvest the way you told it to: part folds back into the core, part lands in a spendable ring. The core itself is never spendable, whatever the dial says.
The core is your capital plus everything you chose to compound. The ring is everything you chose to spend. Move the dial and the next harvest lands differently.
Most vaults compound everything and leave you nothing to spend. Most yield cards spend everything and leave you nothing compounding. Halo does both from the same harvest, and neither route can reach the capital underneath.
Compound legFolds back into the core as new vault shares. Your core grows, and the grown part is just as unspendable as the original deposit.
Spend legLands in the ring as a plain balance. Card authorizations are priced against this and nothing else.
No third legThere is no route from a card authorization to the core, at any dial setting, including 100% to ring. The dial changes where yield goes, never what is spendable.
Value only ever travels outward: capital to harvest, harvest to core or ring, ring to card. Nothing travels back.
Supply USDG once and receive vault shares. The vault supplies it to a single named lending market. That balance becomes your core.
Every four hours a permissionless keeper sweeps accrued interest out of the market. If the oracle is more than fifteen minutes stale, the cycle is skipped rather than guessed.
The harvest divides at your dial setting. The compound leg mints new shares into the core. The spend leg credits the ring.
Swipe against the ring, or redeem your shares and take the core out. Neither action is gated by the other, ever.
More to the ring means more to spend now. More to the core means more to spend later, because the base itself grows. Neither setting puts the core at risk.
Pull the rate to zero and both legs go to zero with it. The card then declines everything, and the core still reads exactly what you put in. That is the honest downside, stated once.
Halo runs on the USDG-native L2, an Arbitrum Orbit rollup, chain id 4663, fully EVM. No validator staking, no emissions: the yield is lending interest from an on-chain money market, and nothing else.
Nothing exotic is holding this together. The interesting part is the ledger split, not the infrastructure underneath it.
Properties of how the account is built, including the inconvenient ones.
Core and ring settle apart. No authorization path debits the core, at any split.
Stale oracle, unreachable market, ambiguous state: the answer is no. Doubt never resolves toward spending.
Yield comes from a single lending market you can look up and check against your statement.
A $60 charge against $58 of ring declines in full. Partial authorization is not supported, deliberately.
No lockup, no minimum spend, no cooldown tied to card use. Shares redeem when you say so.
Changing the split applies from the next harvest. It cannot claw back yield already credited to either side.
It routes protocol fees and votes on which market the vault draws from. It is not collateral, not a backstop, and not a balance the authorizer can see.
No transfer taxUntaxed in both directions, permanently.
LP burned at deployLaunch liquidity tokens go to a dead address, verifiable on chain.
No admin keys on vaultsNothing in the token contract can pause, drain, or reassign a core balance.
Market selectionHolders vote which single lending market the vault draws from next epoch.
Fee shareProtocol fees route to stakers rather than to a discretionary treasury.
$HALO launches into a single Uniswap v4 pool. The position tokens are burned at deploy, so the pool cannot be pulled by anyone, including us. Nothing about the pool touches a vault balance.
Each phase ships when the one before it has been live long enough to be boring.
Including the ones with answers you may not like.
Both legs go to zero. The core stops growing and the ring stops filling, so once you have spent what already landed, every charge declines. Halo does not bridge the gap with your core, with credit, or with a treasury subsidy. Your core stays whole and redeemable the entire time.
Yes, and that is a legitimate setting. Nothing reaches the ring, so nothing is spendable, and the whole harvest compounds. People switch to it when they want a pure vault for a while, then dial back when they want to spend again.
Not through the card. Redeem your shares to your own wallet and it is ordinary money again. The restriction is on the card reaching it, not on you reaching it.
Partial authorization is how principal starts getting touched everywhere else. As soon as something is allowed to cover a shortfall, the thing covering it is always principal. Declining in full keeps the boundary sharp.
Routing makes your spendable balance depend on a strategy you cannot audit. One named market means you can check the published rate against your statement yourself.
Anyone can call the harvest function once the four-hour window has elapsed, and the caller is reimbursed gas from protocol fees. It means harvests do not depend on us being online, and no privileged address can hold them back.
No to both. Capital supplied to an on-chain lending market carries smart contract and market risk. There is no bank behind it, no deposit guarantee, and no insurance scheme.
It is USDG-native, so the unit the vault is denominated in is the unit the chain settles in, with no wrapping step. It is an Arbitrum Orbit rollup and EVM equivalent, so the contracts are ordinary contracts on ordinary tooling.
Leave an address and we will send your batch invite, the market the vault draws from, and the ceiling your orbit opens at.