An autonomous AI agent you can hand stablecoins to.
Deposit USDT0. Aumo moves it into the best risk-adjusted real-world-asset yield on X Layer, rebalances on its own inside guardrails it cannot break, and proves every move on-chain.
Give a stablecoin a job.
aumo.finance · app.aumo.finance · @aumofinance
Live on X Layer (chainId 196) · AumoPool 0x8a98A4A868e5FBAc05B9d1dC0742BD008354114F
Idle stablecoins earn nothing, and managing them across on-chain RWA venues is constant manual work: compare yields, weigh peg and liquidity risk, move funds, watch for changes, repeat. Aumo is an agent that does that for you, inside limits you set on-chain, and leaves a verifiable receipt for every action. The agent reasons. The contract enforces. You can check both.
Every number below is read straight from the chain. The public view needs no wallet; only your own deposit does.
Total assets under management, what is idle versus deployed, blended live yield, the current allocation, and the exact guardrails in force. Real yield, executed on-chain, not a simulation.
- Deposit — fund the vault with USDT0 and set a risk band.
- Sense — the agent reads live vault state and market data across every allowlisted venue.
- Score — a risk engine haircuts each venue's yield by protocol, liquidity, peg, utilization, and concentration risk, then ranks on risk-adjusted yield, not headline APY.
- Reason — an LLM layer reads the market regime and can only make the plan more conservative. It can never loosen a guardrail, add a venue, or move funds itself.
- Act and prove — it rebalances through the vault within your caps, emits an on-chain receipt per move, and records the full reasoning trail bound to a fingerprint of the exact policy that governed it.
RWA liquidity needs more than a yield number. Every venue carries a trust profile the agent verifies on-chain before it allocates a dollar: allowlist status, peg deviation, exit liquidity against position size, protocol risk, custody model, and a depeg breaker armed on-chain. The agent reasons over the profile; the vault enforces the allowlist.
Aumo moves real funds, so control lives in the contract, not the agent. The agent can only ever act inside limits the owner sets on-chain:
- Allowlisted venues only, never an arbitrary address.
- Per-move, per-venue, and total-deployed caps.
- A rolling per-epoch loss budget and a per-epoch deploy budget, so a compromised or mispriced agent can churn only until the budget is spent, not until the treasury is empty. Both the entry swap and the exit round trip are metered through it.
- Owner-set risk band, pause, and kill-switch.
The agent can never exceed policy, touch a non-allowlisted venue, or withdraw to an arbitrary address. Remove the agent and the funds are still safe.
Two more properties make it auditable: every move carries a plain-language rationale, and every decision is stamped with a fingerprint of the exact guardrails in force, so the reasoning trail can be checked against the policy that governed it.
Every decision the agent ever made is recorded. Replay the full reasoning chain and follow each move to its transaction on-chain.
Aumo is built for real-world assets. Alongside the safe stablecoin pool it runs opt-in, at-risk exposure to tokenized US stocks on X Layer (NVIDIA, Apple, Microsoft, and Meta), each in its own isolated pool, priced by an on-chain oracle Aumo runs, with US market hours enforced by the contract so no one enters or exits at a stale price. You deposit USDT0; the pool holds the directional exposure you chose. This is not capital preservation.
On a single stock the agent buys and holds what you picked; it does not time or pick. We built a trend rule that de-risks on a break, backtested it over five years including the 2022 bear, and found it whipsaws and does not reliably cut drawdown on single names, so we removed it. The one thing that reliably reduces drawdown is diversification: over that window an equal-weight basket of the four cut maximum drawdown from about 43% on a single name to about 32%. So Aumo also runs a diversified basket: one deposit, equal weight across all four, the agent's only job being to keep the weights equal. Same guardrails, same provable receipts, no market-timing claim.
Newest is tokenized gold. Aumo runs an opt-in pool holding PAXGy, Paxos' yield-bearing tokenized gold: it tracks the gold price, and its gold entitlement grows over time, so a holder earns a yield denominated in gold. It is priced from PAXGy's on-chain gold rate combined with a gold price feed Aumo runs, in its own isolated pool with the same guardrails. Gold moves in dollar terms, so this too is not capital preservation.
Each equity and gold pool carries a small anti-dilution levy retained by the pool, so anyone joining or exiting bears the value their own action moves and never the holders who stay. The pools were security-audited and hardened before opening to deposits.
Live on X Layer mainnet: the four per-stock pools, the diversified basket pool
0xFe01b81F5D22Ac3647424904f7DC7ecC9EA0358d, the gold pool
0xf1833C4eAEb42df6D9eE33ea090055cf690cee56, and a shared equity oracle
0x1759B50019C988F3eF4Cc0F4879d80EdaD2Ec4D2, all verifiable on
OKLink. More in the docs.
| Package | What it is |
|---|---|
contracts/ |
AumoPool (ERC-4626) plus venue adapters (Solidity / Foundry). The pool holds funds and enforces every policy; each adapter is fork-tested against its live venue on X Layer mainnet. |
agent/ |
The reasoning brain (TypeScript / viem): sense, risk engine, planner, tighten-only LLM layer, on-chain executor, and the receipt trail. |
web/ |
The dashboard (Next.js): positions, the agent's reasoning, venue passports, and receipts. |
| Adapter | Venue | Yield source |
|---|---|---|
AaveV3Adapter |
Aave v3 | On-chain lending |
RwaUsdgAdapter |
USDG | Tokenized Treasuries (RWA) |
PendlePtAdapter |
Pendle PT-USDG | Tokenized fixed yield (RWA) |
UniV3LpAdapter |
USDG/USDT0 Uniswap v3 (full range) | RWA liquidity provision |
Every adapter is verified end to end on a fork of live X Layer mainnet (chainId 196): deposit, value, and full exit round-trip against the real venue. Three are live on the mainnet pool today; the USDG/USDT0 LP adapter is the newest and is pending allowlisting on the live pool.
cd contracts
forge build
forge test # offline unit tests + invariants
RUN_FORK=1 XLAYER_MAINNET_RPC=<rpc> forge test --match-path 'test/fork/*'# agent
cd agent
npm install
cp .env.example .env # RPC_URL, VAULT_ADDRESS, AGENT_PRIVATE_KEY (testnet throwaway)
npm run identity # the agent's identity card
npm run plan # sense, score, reason — never sends a transaction
npm test # risk engine, planner caps, and the tighten-only safety kernelDeploy the pool and adapters to X Layer mainnet (config in contracts/.env.example, real capital):
forge script script/DeployPoolMainnet.s.sol \
--rpc-url $XLAYER_MAINNET_RPC --private-key $PRIVATE_KEY --broadcastFunds are guarded by the contract, not the agent. Secrets never live in the repo. Testnet before mainnet, fork tests before deploy, review before shipping money-code. See SECURITY.md.
Solidity · Foundry · TypeScript · viem · Next.js · X Layer · USDT0 · Aave · USDG · Pendle · Uniswap v3 · xStocks · PAXGy · Turnkey TEE
MIT — see LICENSE.