Surplus Whitepaper v0.8 · 16 min read
Research draft. This is a plain-language guide to Surplus v0.8. The full rules live in the specification and the smart contracts. Numbers marked "research" may change before launch.
Whitepaper v0.8

A stable dollar, issued against a protocol-owned treasury of real assets.

Borrow USDx against your PLUS, or stake USDx to earn from borrower interest and liquidations. Bond tokenized stocks, bitcoin, or ether into the treasury for USDx and PLUS. Launch tokens with liquidity that stays in place for good.

Built on Robinhood Chain · 1 min TL;DR · 16 min full read

THE TREASURY protocol-owned real assets sets the USDx ceiling USDx dollar token PLUS governance and collateral BORROWERS lock PLUS, mint USDx DEPOSITORS deposit assets, get vPLUS sized by governs borrow room assets in
12treasury assets at launch, from Nasdaq stocks to BTC and ETH
45%max LTV on PLUS in the research model
75%of protocol fees buy back and burn PLUS
0.30%of every graduated launchpad swap added to permanent liquidity
TL;DR

What you can do with Surplus

01

What is Surplus

Two tokens and one treasury. Real assets set how many dollars can exist, and your PLUS sets how many you can borrow.

USDx is the dollar. It is built to trade at $1, and every USDx is minted against assets in the treasury.

PLUS is the governance token and the collateral. Lock it to borrow USDx, or use it to vote.

The treasury belongs to the protocol. It holds tokenized stocks and funds, cbBTC, WETH, and USDG. Its value sets how much USDx can be minted, and it keeps what it earns.

sUSDx is USDx staked in the stability vault. Stakers earn a share of borrower interest and absorb liquidations in exchange for discounted PLUS.

DEPOSITORS bring stocks, crypto, stablecoins THE TREASURY protocol-owned, risk-adjusted = USDx ceiling MARKETS USDx/USDG · PLUS/USDx pools BORROWERS lock PLUS, mint USDx AUCTIONS bidders pay USDx, it burns assets in USDx / vPLUS out locked PLUS new USDx liquidity, buybacks settles bad loans bidders bring USDx Outside assets flow in. USDx is minted against them, and burned when it comes back.
DEPOSITORS stocks, crypto, USDG MARKETS USDx and PLUS pools THE TREASURY protocol-owned assets = USDx ceiling BORROWERS lock PLUS, mint USDx AUCTIONS bidders pay USDx assets in USDx / vPLUS out liquidity buybacks bidders bring USDx locked PLUS new USDx settles bad loans
Assets flow into the treasury. USDx is minted against them and burned when it comes back.

Coming from other DeFi protocols?

If you've used Liquity or Maker, borrowing will feel familiar: lock collateral, mint a dollar. Surplus adds a second limit. Total USDx supply also has to fit inside the treasury's assets.

You know it asSurplus calls itWhat's different
CDP or vaultCredit accountOne per wallet. USDx is minted straight to you.
Max LTVBorrow FactorAdjusts to market stress on every borrow.
Liquidation LTVLiquidation thresholdAlways above max LTV, capped at 85%.
Debt ceilingHeadroomSet by treasury assets and shared by every borrower.
BondingBonds for vPLUSTake USDx, vesting PLUS, or both for one deposit.
Stability poolsUSDx stability vaultAbsorbs liquidations at the auction floor price and earns a share of borrower interest.
Buyback and burnFee split75% of protocol fees buy PLUS and burn it by default.
POLTreasury positions and launchpad poolsLiquidity the protocol owns and keeps in place.
Walk through every flow
  • Depositors → treasury. Anyone can bond an approved asset and choose USDx, a vPLUS grant, or some of each in return.
  • Borrowers → credit account. A PLUS holder locks PLUS and mints USDx directly to their own wallet.
  • Borrowers → burn. Repaid principal is burned. Interest and penalties go to sUSDx stakers and the fee split.
  • Stakers → vault. USDx holders stake into the stability vault, which absorbs liquidations first.
  • Auctions → burn. Whatever the vault doesn't absorb goes to a public auction. The USDx paid toward principal is burned.
  • Fees → buybacks. Protocol fees are split between direct USDx burns and PLUS buybacks that burn the PLUS.
  • Treasury → markets. The treasury adds liquidity and, when USDx trades below a set price, buys USDx back and burns it.
  • USDx → vPLUS. USDx holders can burn USDx for a vPLUS grant.
02

Borrow USDx against PLUS

Lock PLUS and mint USDx to your wallet. You can borrow up to the smaller of two limits: your collateral limit and the shared headroom.

Key 1 · your collateral

Locked PLUS × safe price × max LTV

Minus what you already owe. A higher PLUS price raises your limit.

smaller of the two
Key 2 · the whole system

Treasury headroom

Treasury assets over the coverage ratio, minus USDx supply. A bigger treasury raises it for everyone.

= the most USDx you can borrow right now
Example

You lock 10,000 PLUS at $1.00, so your collateral is worth $10,000.

  • At a 45% max LTV you can borrow up to $4,500 USDx.
  • Say you borrow $3,000. Your LTV is 30%.
  • Liquidation starts at 60% LTV. You reach it if PLUS falls to $0.50, a 50% drop.
  • Borrow the full $4,500 and liquidation starts at $0.75, a 25% drop.

Research settings. Real limits also apply a small safe-price haircut.

Try it · borrow calculator
Collateral value$10,000
Max you can borrow$4,500
Your LTV30.0%
Liquidation price$0.500
PLUS can fall 50.0% before liquidation

Defaults use the research settings. Your real limit also depends on shared headroom and a small safe-price haircut. The smallest loan is 10 USDx.

Max LTV adjusts to the market

On every borrow, the protocol compares the short-term and long-term PLUS prices. When they agree, you get the full max LTV. When they pull apart, max LTV shrinks toward a floor for new borrowing. As soon as prices settle, the full max LTV is back. Existing loans keep their own liquidation line, so a stress cut never liquidates anyone.

Loan details

Interest

Interest is charged on principal only, and it never compounds. The rate follows a kinked curve: low while total borrowing is light, rising quickly past the kink. Repaid principal is burned. Interest goes to sUSDx stakers and the fee split, which burns USDx and buys back PLUS.

How the safe price and limits are worked out

The safe price is the lowest of the short-term average, the long-term average, and the current PLUS price, minus a small haircut. The haircut is at most 25% and is set when the contracts are deployed.

Governance sets the max LTV ceiling between 40% and 80%. The 80% cap is written into the code. Under stress, the live max LTV is the ceiling times a multiplier that falls from 1 toward a floor as the two averages pull apart.

While a loan is open, payments go to interest first, then any penalty, then principal. Once a loan is in liquidation or recovery, payments go to principal first.

03

Liquidations

When a loan passes its liquidation line, the stability vault absorbs it first. A public auction settles anything left, and the borrower gets back every PLUS that isn't needed.

01 · Trigger

Loan crosses the line

The liquidation line is always above max LTV and at most 85%. Research settings: 45% to borrow, 60% to liquidate.

02 · Vault

sUSDx absorbs it

The vault burns its USDx against the debt and takes PLUS at the auction floor price, in one transaction.

03 · Auction

Bidders take the rest

Any remaining debt goes to a public auction. The price starts near the safe PLUS price and drops steadily.

04 · Settle

Borrower gets the rest

Once the debt is covered, the leftover PLUS goes back to the borrower.

auction price over time start ≈ safe PLUS price floor (research: 12.5% below start) a bidder steps in here pays USDx, which is burned open window ends
The price can only fall so far, so PLUS sells close to market value.

For bidders

Auctions are open to any wallet, and bids can be any size. You get PLUS at the current auction price. Bids don't need a price feed, so auctions keep running even if an oracle is down. The maximum drop and window length are fixed when the contracts are deployed.

Auctions pause while the PLUS/USDx pool holds less USDx than half the remaining debt, so liquidations never dump PLUS into a thin market.

If an auction runs out of time

If the window ends with debt left, the account moves to recovery and its PLUS stays locked. Anyone can then repay the debt or start a salvage auction for the remaining PLUS. Debt only goes down when real USDx is paid.

04In development

The sUSDx stability vault

Stake USDx to earn a share of borrower interest and penalties, plus PLUS from the liquidations the vault absorbs at a discount.

Stake

USDx in, sUSDx out

Deposit USDx and receive a sUSDx position. Positions stay with the wallet that staked.

Earn

Interest and PLUS

A governed share of borrower interest and penalties, proposed at 50%, plus the PLUS the vault takes in liquidations.

Withdraw

7-day delay

Request a withdrawal and collect after the delay. Governance can adjust the delay. Rewards stop during the wait.

How absorption works

When a loan passes its liquidation line, the vault burns its USDx against the debt and takes the loan's PLUS at the auction floor price, all in one transaction. The floor sits below the safe price, so the vault receives more PLUS than the USDx it burns would buy at the safe price. The PLUS is shared among stakers pro rata, and the vault never sells it.

Example

A loan owes 10,000 USDx and crosses its liquidation line. The safe PLUS price is $1.00, and the floor is 12.5% lower at $0.875.

  • The vault burns 10,000 USDx against the debt.
  • It takes about 11,430 PLUS, worth about $11,430 at the safe price.
  • The borrower gets back any PLUS the vault didn't need.

Illustrative, using research settings.

The vault is sized to hold 5% to 10% of USDx supply. Borrowers keep their surplus collateral just as they do in an auction.

05

Bond assets into the treasury

Deposit an approved asset and choose your payout: USDx now, PLUS that vests over time, or a mix.

Every approved asset has a standing bond market. Governance approves the asset and sets its terms, and the market stays open with no vote needed for each purchase. On every bond, the contracts check the price, the custody, and how much of that asset the treasury already holds.

Your bond, after a small fee100%
40% as USDx now · 60% as vesting PLUSyour mix
USDx, checked against headroomvPLUS, from the lifetime PLUS budget
Example

You bond $1,000 of SPY. You take $400 as USDx. The other $600 buys vesting PLUS. With PLUS at $1.00 and a 5% discount, that's about 631 PLUS, released over the vesting period.

Illustrative numbers, before fees.

How the bond price moves

Every vPLUS grant adds to a shared pressure counter, which raises the PLUS price for the next bond. Pressure drains at a steady rate, so the price comes back down in quiet periods.

bond price pressure over time grant more grants quiet time: pressure drains time →
Each grant pushes the price up, and quiet time brings it back down.

A discount can also apply, up to a maximum set by governance. Discounts switch on when PLUS trades above its treasury reference, and they grow:

Bond pricing details
  • The USDx part is priced at $1 or the USDx market price, whichever is higher.
  • Each market caps its USDx share, and that share shrinks if USDx trades below $1.
  • Every vPLUS grant is charged to a lifetime PLUS budget the moment it is made. The budget only goes down.
  • Splitting a big bond into small ones saves only rounding dust.
06

Burn USDx for PLUS

Burn USDx for vesting PLUS at the shared bond price. When USDx trades under $1, a peg discount applies and grows with the gap.

There is no fee to burn. Holders get a reason to take USDx out of circulation exactly when the peg needs support. Burns are capped each month, at 2% of supply in the research plan.

Example

USDx trades at $0.97. You burn 1,000 USDx. It counts as $970 toward vesting PLUS, and a peg discount applies because USDx is 3% under $1. The further below $1 USDx trades, the bigger that discount gets.

The peg discount reads the time-weighted USDx price, so a quick price push can't open it.

07

The treasury

A protocol-owned basket of tokenized stocks, crypto, and USDG. Its value sets how much USDx can exist.

QQQNasdaq-100 fund
SPYS&P 500 fund
NVDANvidia
AAPLApple
GOOGLAlphabet
MSFTMicrosoft
AMZNAmazon
TSLATesla
USOOil fund
cbBTCBitcoin
WETHEther, plain ETH wrapped for you
USDGDollar stablecoin

All 12 launch assets are priced by Chainlink. Governance adds each asset by vote after checking its custody and pricing. In the research plan, USDG makes up about 40% of the treasury and doubles as its cash reserve, and USDx supply at launch starts at about half the treasury's value.

How much USDx can exist

Each asset gets a risk factor that reflects how easy it is to price, sell, and hold safely. The discounted values add up to the risk-adjusted treasury. Divide by the coverage ratio, which is at least 1, and you get the most USDx the treasury can support. What's left after current supply is the headroom.

Treasury at market value100%
After risk factorsdiscounted
USDx the treasury can support÷ coverage ratio
Split between supply and headroomtoday
USDx in circulationHeadroom for new loans and bonds

Each asset has its own dollar cap. Assets are also grouped by issuer, by custodian, and by how closely their prices move together, and each group has a cap. The PLUS price never enters this calculation.

The formula
risk-adjusted treasury = sum of (asset value × risk factor) capacity = risk-adjusted treasury ÷ coverage ratio headroom = capacity − USDx supply

Run by rules any keeper can execute

Governance writes standing rules with set ranges and triggers. When a rule's conditions are met, any keeper can run it. Every action checks prices, slippage, cooldowns, and budgets before it settles.

Rebalancing

Each asset has a target share with a range around it. When one drifts above and another below, a keeper swaps between them.

USDx buybacks

When USDx trades below $1, the treasury buys USDx and burns it, up to 2% of treasury value per month in the research plan.

Liquidity positions

Uniswap v4 positions pair approved assets with USDG. Fees in outside tokens stay in the treasury. Fees in USDx go to the fee split.

5%of treasury value in liquidity positions at launch
10%maximum, unlocked with a track record
1 day+delay before any increase takes effect

A risk council posts the target share, and increases need governance approval. An incident report drops the target to zero. Required reserves always stay outside these positions.

A built-in recovery plan

If treasury assets fall far enough that USDx supply sits above capacity, a ladder of responses takes over:

Step 1

Minting pauses

Headroom drops to zero, so no new USDx is minted until capacity recovers.

Step 2

Buybacks below $1

The treasury buys and burns USDx, up to 2% of treasury value per month.

Step 3

Burn for PLUS

Holders burn USDx for PLUS at a peg discount, up to 2% of supply per month.

Step 4

Emergency sales

As a last resort, treasury assets are sold for USDG to buy and burn USDx.

Emergency sales are armed by governance in advance and run automatically. They only fire when a shortfall lasts three months after risk factors recover and USDx trades below $0.97, and they sell at most 5% of treasury value per month. Research settings.

08

Why USDx holds $1

Supply is capped by the treasury, demand comes from borrowers and the launchpad, and three stabilizers switch on below $1.

Supply

Capped and shrinking

New USDx only mints inside the treasury's headroom. Repaid principal is burned, and a quarter of protocol fees burn USDx directly.

Demand

Built-in buyers

Borrowers need USDx to repay, and stakers hold it in the stability vault. Every launchpad token trades against USDx, and launchpad fees are paid in USDx.

Below $1

Three stabilizers

Treasury buybacks burn USDx. Burning for PLUS earns a peg discount. The USDx share of new bonds shrinks.

Prices you can trust

A custom Uniswap v4 hook reads the USDx/USDG and PLUS/USDx pools using short and long time-weighted averages. Chainlink prices the outside assets and USDG against the dollar. For lending and capacity the protocol uses the lower reading, and for spending it uses the higher one. Each reading needs a minimum of pool liquidity, and the treasury keeps a permanent PLUS/USDx position so that liquidity is always there.

09

Protocol fees buy back PLUS

Protocol fees are collected in USDx. By default, 25% is burned as USDx and 75% buys PLUS from the market and burns it.

Every USDx of protocol feesdefault split
25% burned as USDx75% buys PLUS, and that PLUS is burned

Where the fees come from

Example

The protocol collects 100 USDx in fees. 25 USDx is burned. The other 75 USDx buys PLUS from the PLUS/USDx pool, and every PLUS it buys is burned.

How buybacks run

Anyone can trigger a buyback, at most once an hour. Each one buys from the main PLUS/USDx pool, the same one the price oracle reads, within tight price limits, and a failed buyback rolls back both the burn and the purchase. Fees are collected even when the pool or an oracle is down, and they wait until a buyback can run. Governance sets the split anywhere from 0% to 100% direct burn, and buybacks start paused until governance sets a budget that matches pool depth.

10

Launchpad

Launch a fixed-supply token priced in USDx. It graduates into a permanent Uniswap v4 pool where fees fall as market cap grows.

01 · Create

5 USDx

Name, logo, and socials are stored onchain for good. Add a creator fee at creation for 50 USDx.

02 · Fair start

Optional sale

Buyers bid at a falling price. The curve then opens at the sale's average price.

03 · Curve

Trade on the curve

A 1% protocol fee plus any creator fee. 80% of the protocol share goes to USDx burns and PLUS buybacks.

04 · Graduate

Permanent pool

At a fixed USDx reserve target, anyone can graduate the token. Every pool opens with the same depth.

graduated pool fee by market cap 0.30% compounds into permanent liquidity 1.00% 0.50% 0.30% protocol share, 80% to buybacks 10M20M40M80M160M320M
The fee drops 0.10 points every time market cap doubles past 10M USDx, bottoming out at 0.50%. Creator fees, if any, are added on top.

Trading tools

One order system covers market, limit, and TWAP orders on Surplus curves and pools, and on Pons markets too. Orders name the assets and your minimum price, not a venue, so they keep working after a token graduates.

Limit orders

Escrow your input with a minimum price. Keepers fill it when the market gets there, in one fill or in parts you allow. Cancel anytime for a full refund of what's left.

TWAP orders

Split a big trade into equal slices over time, with a price floor on every slice. Cancel the rest anytime.

Your price, guaranteed

Every fill meets the minimum price you set, after all fees. Keepers earn 0.10% and the protocol 0.05% of the output, with no fee to place or cancel.

One-click trading

Approve a session key with an expiry and a spend cap, then trade without signing every swap. Your assets stay in your wallet, and you can revoke anytime.

Liquidity that compounds

0.30% of every graduated swap is added to the pool's permanent position, so pools get deeper as they trade.

Open to any keeper

Anyone can run a keeper and earn the fill fee. There is no whitelist, deposit, or gas budget.

Protocol share of launchpad feessplit
80% to USDx burns and PLUS buybacks20% operations
Launchpad price listCost
Create a token5 USDx
Add a creator fee (chosen at creation, can be switched off later)50 USDx
Enhanced token page250 USDx
11

Safety and governance

Core contracts are permanent. PLUS holders tune settings through a timelock, inside hard limits written into the code.

Ten rules the contracts enforce

RuleIn plain words
Protocol-owned treasuryThe treasury belongs to the protocol. USDx, PLUS, and vPLUS each keep a fixed role.
Capacity firstWhen USDx supply reaches the treasury's capacity, headroom is zero.
The limit holdsNo loan can be larger than the available headroom.
80% hard capNo account can borrow more than 80% of its collateral's safe value.
Borrower bufferThe liquidation line is always above max LTV and at most 85%.
Exact settlementAn auction collects exactly the debt owed and nothing more.
Collateral adds upEvery locked PLUS is always accounted for: sold, returned, still locked, or cleared from recovery.
Real repaymentDebt goes down only when real USDx is paid.
Bounded PLUSvPLUS grants stay within their market price and the lifetime PLUS budget.
Clean votesOnly free PLUS votes. PLUS locked in a loan or still vesting votes once it is released.

Each rule is covered by the Solidity test suites, including invariant tests that run long random sequences of actions.

Who controls what

Fixed forever

Written into the code

The 80% borrowing cap and 85% liquidation cap. The coverage ratio, safe-price haircut, auction settings, interest curve, and stress curve. Only outside assets count toward the USDx limit. The PLUS budget only goes down.

PLUS holders

Through a timelock

Max LTV ceiling (40% to 80%) and liquidation line (up to 85%). Asset admissions, risk factors, and caps. Oracle sources. Bond terms. Liquidity share up to 10%. Rebalancing and buyback rules. The fee split, from 0% to 100% direct burn.

Automatic

No vote needed

Max LTV under stress, worked out on every borrow. Headroom, recalculated every time. Standing treasury rules and fee buybacks, run by anyone within set limits. Auctions, started and settled by anyone.

Every governance change passes through a timelock, so everyone can see it before it takes effect. A risk council can pause new borrowing or treasury markets right away, and only governance can lift a pause. Repaying and bidding keep working during a pause.

FAQ

Questions people ask first

What keeps USDx at $1?

Supply is capped by the treasury and shrinks with every repayment. Borrowers and launchpad traders create steady demand. Below $1, treasury buybacks, the peg discount for burning USDx, and a smaller USDx share in new bonds all push the price back up. More on the peg.

What makes USDx different from other stablecoins?

USDx is minted against a protocol-owned basket of tokenized stocks, bitcoin, ether, and USDG. New USDx can only be minted while that basket's risk-adjusted value covers every USDx in circulation, counting the new one.

What happens if PLUS dumps?

Max LTV for new loans shrinks automatically as the short-term and long-term prices pull apart. Loans that cross their liquidation line go to a public auction. The treasury's headroom comes from outside assets, so a PLUS dump doesn't shrink it.

What happens to my PLUS if I get liquidated?

The stability vault or an auction takes only the PLUS needed to cover your debt, interest, and penalty. Every PLUS left over comes back to you.

How do sUSDx stakers earn?

Stakers get a governed share of borrower interest and penalties, proposed at 50%. They also get the PLUS the vault takes when it absorbs liquidations at the auction floor price. More on the vault.

Where do protocol fees go?

By default, 25% is burned as USDx and 75% buys PLUS from the market and burns it. Governance can change the split. More on buybacks.

Where do treasury earnings come from?

Bonds bring in new assets. Liquidity positions earn trading fees, and treasury assets can gain in value. All of it stays in the treasury and raises headroom. Borrower interest goes to sUSDx stakers and PLUS buybacks instead.

Is there a minimum or maximum loan?

The smallest loan is 10 USDx. The maximum is set by your collateral and the shared headroom. There are no per-wallet caps.

Who controls Surplus?

PLUS holders, through a timelock. Core contracts are permanent, and hard limits like the 80% borrowing cap are written into the code.

When does Surplus launch?

The contracts are built and tested. Calibration, audits, and legal review come next.

Appendix

Details for the curious

Launch parameters

ParameterPlanned value
ChainRobinhood Chain
Treasury assets12 assets: QQQ, SPY, NVDA, AAPL, GOOGL, MSFT, AMZN, TSLA, USO, cbBTC, WETH, and USDG
Max LTV ceiling45% in the research model. Governance range 40% to 80%. Shrinks automatically under price stress.
Borrowing hard cap80%, fixed in the code
Liquidation line60% research setting. Always above max LTV and at most 85%.
Auction discount12.5% research setting, fixed at deployment
Coverage ratioAt least 1, fixed at deployment
InterestKinked curve based on total borrowing, charged on principal only. Shared between sUSDx stakers and the fee split.
Fee split25% direct USDx burn, 75% PLUS buyback and burn. Governance range 0% to 100% direct burn.
sUSDx vaultProposed 50% of borrower interest and penalties. 7-day withdrawal delay. Sized at 5% to 10% of USDx supply.
Borrowing limitsYour collateral and the shared headroom. Smallest loan 10 USDx. No quotas or per-wallet caps.
Liquidity positions5% of treasury value at launch, 10% maximum, raised only with governance approval and a delay
Treasury mix and launch supplyAbout 40% USDG. USDx supply at launch about half of treasury value. Research settings.
Treasury buybacksBelow $1, up to 2% of treasury value per month
Emergency salesArmed in advance, automatic. Three-month shortfall, USDx below $0.97, at most 5% of treasury value per month.
Burning USDx for PLUSNo fee. Peg discount below $1. Up to 2% of supply per month in the research plan.
Launchpad fee1% on the curve. After graduation, 1.00% falling to 0.50% as market cap grows, with 0.30% compounding into liquidity. Protocol share: 80% to the fee split, 20% operations.
Order feesLimit and TWAP fills: 0.10% to the keeper, 0.05% to the protocol. Market orders: 0.05% to the protocol.
Launchpad pricesCreate 5 USDx. Creator fee 50 USDx. Enhanced page 250 USDx.
OracleCustom Uniswap v4 hook on USDx/USDG and PLUS/USDx. Chainlink for outside assets and USDG/USD.
GovernancePLUS voting through a timelock. A risk council can pause new borrowing.

Things to know before you use Surplus