Launch caps
Salvo ships mainnet with a targeted security review, not a full audit. Because of that, exposure is bounded in code: two caps limit how much can move through the curves while the system proves itself live.
The caps
- Per trade: no single buy or sell can exceed the per-trade cap.
- Total curve reserves: the sum of USDC sitting in all live curves cannot exceed the global cap. A buy that would push past it is rejected, and a graduation removes that curve's reserves from the total.
The starting values are $500 per trade and $150,000 in total curve reserves. The live cap and the current total are shown on the site.
Only up, never down
The caps live in a contract that can only ever raise them, never lower them, controlled by a hardware wallet or multisig. They are the only mutable parameters in the system.
The lifting ladder
Each step up is gated by a clearance event, never a date:
| Stage | Per trade | Global TVL | Clearance required |
|---|---|---|---|
| Launch | $500 | $150,000 | Review round 1 remediated, invariants green, caps proven to bite on testnet |
| +1 | $2,000 | $500k | Full review clean, no unresolved findings |
| +2 | $10,000 | $2M | Two weeks live, zero incidents, bounty running |
| Uncapped | none | none | Second independent review complete |
Every raise is announced before it happens, with the clearance event that justified it.