Deposit once. Choose what compounds and what you spend.
Halo is an auto-compounding stablecoin vault with a card wired to it. Every four hours the vault harvests, then splits the harvest the way you told it to: part folds back into the core, part lands in a spendable ring.
The core itself is never spendable, whatever the dial says.
Access opens in batches. Ceilings start low and rise with history.
Two balances, one dial between them
The core is your capital plus everything you chose to compound. The ring is everything you chose to spend. Move the dial and the next harvest lands differently.
Principal plus compounded yield.
Not spendableThe only balance the card can reach.
Card authorises hereHarvest split between core and ring
harvesting every 4h
Change it whenever. It applies from the next harvest, never retroactively.
One harvest, two destinations, zero paths to your core
Most vaults compound everything and leave you nothing to spend. Most yield cards spend everything and leave you nothing compounding. Halo does both from the same harvest, and neither route can reach the capital underneath.
Compound leg
Folds back into the core as new vault shares. Your core grows, and the grown part is just as unspendable as the original deposit.
Spend leg
Lands in the ring as a plain balance. Card authorizations are priced against this and nothing else.
No third leg
There is no route from a card authorization to the core, at any dial setting, including 100% to ring. The dial changes where yield goes, never what is spendable.
Four stages, one direction
Value only ever travels outward: capital to harvest, harvest to core or ring, ring to card. Nothing travels back.
Deposit
Supply USDG once and receive vault shares. The vault supplies it to a single named lending market. That balance becomes your core.
Harvest
Every four hours a permissionless keeper sweeps accrued interest out of the market. If the oracle is more than fifteen minutes stale, the cycle is skipped rather than guessed.
Split
The harvest divides at your dial setting. The compound leg mints new shares into the core. The spend leg credits the ring.
Spend or exit
Swipe against the ring, or redeem your shares and take the core out. Neither action is gated by the other, ever.
Turn the dial, watch the trade
More to the ring means more to spend now. More to the core means more to spend later, because the base itself grows. Neither setting puts the core at risk.
Yield lives on Robinhood Chain.
Halo runs on the USDG-native L2, an Arbitrum Orbit rollup, chain id 4663, fully EVM. No validator staking, no emissions: the yield is lending interest from an on-chain money market, and nothing else.
Ordinary machinery, unusual wiring
Nothing exotic is holding this together. The interesting part is the ledger split, not the infrastructure underneath it.
ERC-4626
Shares are a plain tokenised vault position, readable by any wallet or explorer.
Every 4 hours
Triggered by a permissionless keeper network, not by a privileged address.
Skip the cycle
If the oracle is over 15 minutes old the harvest does not run. It never estimates.
One lending market
Named on your statement. No routing, no stacked strategies, no leverage beneath.
None
Redeem shares whenever. Spending history never gates the exit.
Robinhood Chain
USDG-native Arbitrum Orbit rollup, chain id 4663, EVM equivalent.
Six things that stay true at every dial setting
Properties of how the account is built, including the inconvenient ones.
Two ledgers, never merged
Core and ring settle apart. No authorization path debits the core, at any split.
Uncertainty means decline
Stale oracle, unreachable market, ambiguous state: the answer is no. Doubt never resolves toward spending.
One market, named
Yield comes from a single lending market you can look up and check against your statement.
Whole charge or none
A $60 charge against $58 of ring declines in full. Partial authorization is not supported, deliberately.
Redemption is unconditional
No lockup, no minimum spend, no cooldown tied to card use. Shares redeem when you say so.
The dial is forward-only
Changing the split applies from the next harvest. It cannot claw back yield already credited to either side.
The token never funds a swipe
It routes protocol fees and votes on which market the vault draws from. It is not collateral, not a backstop, and not a balance the authorizer can see.
No transfer tax
Untaxed in both directions, permanently.
LP burned at deploy
Launch liquidity tokens go to a dead address, verifiable on chain.
No admin keys on vaults
Nothing in the token contract can pause, drain, or reassign a core balance.
Market selection
Holders vote which single lending market the vault draws from next epoch.
Fee share
Protocol fees route to stakers rather than to a discretionary treasury.
Liquidity opens on Uniswap
$HALO launches into a single Uniswap v4 pool. The position tokens are burned at deploy, so the pool cannot be pulled by anyone, including us. Nothing about the pool touches a vault balance.
Contract address
One address, published here. Check anything you are sent against this page before you buy.
Four phases, no dates
Each phase ships when the one before it has been live long enough to be boring.
Distribution
- Fair launch, no presale
- Liquidity burned at deploy
- Testnet vaults open
- Invariants published in full
Live orbits
- Mainnet vault and harvests
- Public keeper network
- Harvest and authorization explorer
- Physical card issuance
Depth
- Holder-voted market selection
- Staking fee share
- Mobile orbit dashboard
- Per-merchant ring rules
Openness
- Cross-chain deposits
- Third-party authorizers
- Full parameter governance
- Contracts frozen
The ones people actually ask
Including the ones with answers you may not like.
What happens if the supply rate goes to zero?
Both legs go to zero. The core stops growing and the ring stops filling, so once you have spent what already landed, every charge declines. Halo does not bridge the gap with your core, with credit, or with a treasury subsidy. Your core stays whole and redeemable the entire time.
If I set the dial to 100% core, is the card useless?
Yes, and that is a legitimate setting. Nothing reaches the ring, so nothing is spendable, and the whole harvest compounds. People switch to it when they want a pure vault for a while, then dial back when they want to spend again.
Can I spend the core if I decide I want to?
Not through the card. Redeem your shares to your own wallet and it is ordinary money again. The restriction is on the card reaching it, not on you reaching it.
Why decline the whole charge instead of authorizing part of it?
Partial authorization is how principal starts getting touched everywhere else. As soon as something is allowed to cover a shortfall, the thing covering it is always principal. Declining in full keeps the boundary sharp.
Why one lending market instead of routing for the best rate?
Routing makes your spendable balance depend on a strategy you cannot audit. One named market means you can check the published rate against your statement yourself.
What does the keeper network actually do?
Anyone can call the harvest function once the four-hour window has elapsed, and the caller is reimbursed gas from protocol fees. It means harvests do not depend on us being online, and no privileged address can hold them back.
Is this a deposit, and is it insured?
No to both. Capital supplied to an on-chain lending market carries smart contract and market risk. There is no bank behind it, no deposit guarantee, and no insurance scheme.
Why Robinhood Chain?
It is USDG-native, so the unit the vault is denominated in is the unit the chain settles in, with no wrapping step. It is an Arbitrum Orbit rollup and EVM equivalent, so the contracts are ordinary contracts on ordinary tooling.
Keep the core. Spend the light around it.
Leave an address and we will send your batch invite, the market the vault draws from, and the ceiling your orbit opens at.