Navy: Technical Specification

Abstract

Navy is a specialized L1 blockchain (AppChain) for trading high yield income assets: BDCs, REITs, and CEFs. The protocol uses a Layered Liquidity Vault (LLV) with Junior/Senior tranching, Validator Native Oracles with NBBO Midpoint pricing, and Full Return Synthetics that settle both price and dividends. One pool. One counterparty. The same tools that prime brokers charge seven figures for, without the minimums.

1. The Problem

Banks gatekeep credit trust and instant liquidity. Retail investors are stuck with 2:1 margin, Hard to Borrow lists, T+2 dividend settlement, accredited investor requirements. The best tools (total return swaps, cross collateralized repo, synthetic shorts) require prime brokerage agreements and seven figure minimums.

DeFi has perpetual futures for crypto but nothing for the $2T+ universe of NAV anchored yield bearing assets. No synthetic BDCs. No leveraged REIT exposure with dividend pass through. No way to short a CEF trading at an unsustainable premium.

That is the gap Navy fills.

2. The Layered Liquidity Vault (LLV)

Unlike traditional DEXs with fragmented pools, Navy uses a Single Pool Counterparty model. All USDC sits in one unified vault. Ownership is divided into two Virtual Tranches.

2.1 Senior Tranche ($nSAFE)

Target: family offices, DAO treasuries, risk averse retail.

Yield: fixed priority claim on the first 8 to 10% APY of protocol revenue. Junior capital absorbs losses first. Senior principal is only touched if Junior hits $0.

Exit: instant liquidity with Quadratic Exit Fee during stress.

Exit fees flow to the Junior pool for recapitalization.

2.2 Junior Tranche ($nRISK)

Target: hedge funds, aggressive yield farmers, "insurance sellers."

Yield: 100% of residual revenue (spreads, liquidation penalties, excess interest after Seniors are paid). Target 30 to 60% APY.

Risk: first loss capital. All pool losses are deducted from Junior balance first.

Exit: 30 day notice via Withdrawal NFT.

On requestWithdrawal(), $nRISK tokens are burned and a Withdrawal Ticket NFT is issued. The NFT stores principal amount, maturity date (current block + 30 days), and loss share cap. The NFT remains at risk during the 30 day window (in flight loss assignment). It can be sold on secondary markets for early exit at a discount.

The $nRISK exchange rate against USDC increases as fees accrue. Not token quantity. The share price goes up.

2.3 Yield Waterfall

Revenue flows: Trading Fees + Funding Rates + Liquidation Penalties.

Senior gets first claim on 8% APY pro rata daily via the "Navy Heartbeat" at randomized block height. If fees fall below the 8% APY target, the remaining gap is deducted from Junior principal. Juniors pay Seniors. If Junior Pool hits $0, Senior yield drops to organic fee level. No protocol reserve subsidy. All remaining revenue goes to the Junior pool.

2.4 Genesis Sizing

2.5 Worked Example: Where the Money Comes From

Using the Genesis parameters above. $5M open interest cap. $3.75M Senior deposits. $1.25M Junior deposits. One asset: ARCC.

Revenue streams.

Trading fees: 0.10% per trade. If $400K in daily volume rotates (8% of OI), that is $400/day or $146,000/year.

Funding rate: longs pay shorts every 8 hours. BDC markets skew long because people want the dividend. At an average annualized funding rate of 10% on $5M OI, that is $500,000/year. This is the largest revenue source. It fluctuates. When skew is 80% long, funding might hit 15 to 20%. When the market is balanced, funding drops to 2 to 3%.

Liquidation penalties: leveraged positions that hit the danger zone pay a 5% penalty on seized margin. At $80K of liquidated margin per month, that is $48,000/year.

Total annual revenue estimate: $694,000.

Payout waterfall.

Senior gets first claim on 8% APY. $3.75M at 8% = $300,000/year. This comes off the top.

Remainder to Junior: $694,000 minus $300,000 = $394,000. On $1.25M of Junior deposits, that is 31.5% APY.

Three scenarios.

In the bear case, revenue barely covers the Senior payout. Junior earns 2.4% while taking first loss risk on a $5M book. Bad deal. If revenue drops below $300K, the gap is deducted from Junior principal. Juniors subsidize Seniors.

The bull case depends on persistent long skew. BDC markets have a structural long bias because the dividends attract buy and hold capital. Shorts only show up when funding pays them enough. This skew is what generates the funding revenue.

Why each party shows up.

Traders pay fees and funding because they want 10x leverage on a 10% yielder. At a brokerage, they get 2x and pay 8 to 12% margin interest. On Navy, 5x on ARCC at 10% funding costs less than Schwab margin and gives more exposure.

Senior depositors accept 8% because they sit behind $1.25M of Junior capital. For Senior to lose principal, ARCC has to move enough to wipe out the entire Junior pool first. At 4:1 OI to Junior ratio, that is a 25% drawdown absorbed before Senior is touched.

Junior depositors accept first loss because the residual revenue is large. They earn on the full $5M book while only depositing $1.25M. The 4:1 ratio between Senior and Junior capital creates the leverage on returns. When revenue is strong, Junior earns 30 to 60%. When revenue is weak, Junior earns little and risks principal. That is the tradeoff.

3. The Trading Engine: Full Return Synthetics

3.1 Synthetic Assets (xTokens)

Users mint synthetic tokens (xARCC, xO, xPDI) that track price AND dividends of the underlying. Nobody owns the actual stock. The pool takes the other side of every trade. These tokens exist only within the protocol and settle in USDC. The synthetic is a contract between the user and the pool.

3.2 The Validator Native Oracle

Prices are not pulled from a third party. L1 validators must agree on the asset price before a block is finalized.

Market Hours (9:30 AM to 4:00 PM EST). Canonical price is the NBBO (National Best Bid and Offer) Midpoint from high fidelity feeds (IEX/Nasdaq). Midpoint prevents fat finger or single print manipulation. Validators run a "Sidecar" process pulling from multiple institutional APIs (LMAX, Jane Street). A validator only gets block reward if its price submission is within 0.5% deviation of the median.

Dark Hours (After Market/Weekends). Trading continues but transitions to "Price Discovery" mode. The vAMM Skew becomes the dominant price driver. At Monday open: "Convergence Block." If NYSE open is 5% away from weekend on chain price, all weekend positions settle against NYSE open.

NAV Oracle. When a BDC files 10-Q/10-K, top 10 validators independently pull Total Assets and Total Liabilities from SEC EDGAR. 8 of 10 must agree for NAV update. Validators posting fraudulent NAV data are slashed.

Confidence Intervals. Oracles report price and confidence (via Pyth). Wide confidence triggers "Protect Mode": liquidations throttled (not stopped), new leverage disabled. This prevents liquidation cascades from illiquidity in the underlying NYSE market.

3.3 Skew Scale Pricing (vAMM)

When the pool is imbalanced, the vAMM quotes a price for the dominant side that is artificially worse than oracle price. At 90% long skew, buy price moves to premium above oracle and sell price moves to discount. This creates immediate arbitrage incentive beyond just funding rates. Market makers can buy cheap and sell expensive to collect the spread.

3.4 Commit Reveal Execution

All trades use a commit reveal pattern. User commits an encrypted hash. After a 3 block delay the order is revealed and executed at the current oracle price. Eliminates front running and MEV.

4. Funding Rates and Market Balance

4.1 Exponential Funding

Every 8 hours:

F = baseRate * e^(k * skew)

Where skew is the ratio of long to short open interest. Funding grows exponentially as imbalance increases.

Self correcting. Elevated funding attracts market makers to take the short side.

4.2 Market Maker Incentives

Market makers short the synthetic, collect funding, hedge by holding actual stock in a brokerage. Delta neutral yield.

net_carry = funding_received - dividend_cost - hedging_cost

The market balances itself without anyone needing to recruit market makers.

4.3 Auto Deleveraging (ADL)

When skew exceeds 95% despite elevated funding:

Public ADL Queue. Top profitable positions ranked by PnL% multiplied by Leverage.

ADL Warning Light. When Junior Pool drops below 5% health, the top 10% of at risk traders see a red alert.

60 Second Grace Period. Voluntary close within 60 seconds means zero ADL penalty. Force closure costs a 1% ADL fee paid to the Junior pool.

This converts forced liquidations into voluntary exits.

4.4 Crisis Response Triggers

When NAVs drop 20%+, the protocol automatically:

1. Halts new leveraged longs above 3x (1x "stabilizer" longs stay open, fees waived)
2. Increases funding rates to 200%+
3. Aggressively auctions seized positions to Junior tranche at discount

5. The Repo Engine (Leverage)

5.1 Dynamic LTV

Margin based on volatility, not flat rate.

initial_margin = base_margin * (1 + vol_multiplier * realized_vol / target_vol)

5.2 Health Factor

HF = (Collateral * LTV) / (Debt + Unrealized Loss)

Three zones. Green (HF > 1.5): healthy. Yellow (HF 1.0 to 1.5): warnings, restricted new positions. Red (HF < 1.0): liquidation eligible.

Cross margin: portfolio level calculation. Profitable positions offset losing positions within the same account. This prevents unnecessary liquidations.

5.3 Oracle Failsafe

If the price feed goes stale (no update for 60 seconds during market hours) or returns data outside expected bounds, new liquidations pause for that asset. Trading continues using the last known good price. The feed must recover and deliver two consecutive valid ticks before liquidations resume.

The Security Council (5/9 multisig) can manually intervene to freeze or unfreeze liquidations for a specific asset if the oracle is compromised.

5.4 Discount Credit

When an asset trades below NAV:

Discount_Credit = max(0, (NAV - Spot_Price) / NAV) * credit_factor

Reduces maintenance margin for discounted assets. No credit for premium assets. A BDC at $16 with $20 NAV is over collateralized by the real world loan portfolio. The discount credit accounts for this.

6. The Dividend Engine

6.1 Atomic Settlement

On ex dividend date, the chain performs simultaneous calculation:

(Current Margin - Dividend Liability) / Position Size

Slash first, but within the same atomic execution. If the slash pushes an account into liquidation zone, the position is seized immediately before any other trades in that block. Prevents shorts from front running their own insolvency.

6.2 Settlement Mechanics

Longs. Auto DRIP (mint more xTokens) or USDC to Available Funds.

Shorts. Collateral atomically slashed by dividend amount.

Shorts fund longs. Elevated funding pre collects dividend costs when the market is skewed.

6.3 Accrued Dividend Pricing

Navy uses the same "dirty price" model that bond markets and TRS desks use. The dividend is not a quarterly surprise. It accrues into the price every block.

The accrual. If ARCC pays $0.48 per quarter (90 days), the protocol adds approximately $0.0053 to the Accrued Dividend value every day. When a trader opens a position, they pay (or receive) the Market Price plus the Accrued Dividend. This is the "dirty price."

Dirty_Price = Market_Price + Accrued_Dividend

Accrued_Dividend = (Declared_Dividend / Days_In_Period) * Days_Since_Last_Ex_Date

The reality bump. When the 8 K confirms the actual dividend, the accrual adjusts in one block. If the system estimated $0.45 but the filing says $0.50, the Dirty Price moves from $20.45 to $20.50. An insider buying at $20.49 captures $0.01 of edge, which does not cover trading fees.

The reset. On ex dividend date, the Accrued Dividend resets to zero. The oracle price adjusts downward. Longs are credited. Shorts are slashed. The balance is flat because the accrual was priced in gradually over the entire period.

The falling sawtooth. The accrual keeps climbing even if the market price drops. If ARCC falls from $20.00 to $18.00 while $0.25 has accrued, the Dirty Price is $18.25. The dividend does not protect against price risk. At 10x leverage, a 10% price drop wipes out the position before the next ex date. The Live Breakeven shows exactly how far the price can fall before yield runs out.

Same block exclusion. Positions opened in the same block as an ex dividend event do not receive the DRIP credit. Single block protection against same transaction gaming.

This replaces the need for tenure rules, exit taxes, or TWAP entry pricing. Same approach bond desks have used for decades on interest bearing instruments.

6.4 Dividends on Leverage

Dividends apply to the full notional position. A 5x long on a 12% yielding REIT effectively earns 60% gross yield on collateral, minus funding costs. Full Return Synthetics make this possible.

6.5 Dividend Source and Flow

Dividends in a synthetic system are collateral transfers between counterparties. No cash comes from the actual company. The protocol mirrors the declared dollar amount per share from the real world ex dividend event.

Primary source: Short collateral. When a stock goes ex dividend at $0.48 per share, the protocol slashes $0.48 from every short position and credits $0.48 to every long position. The stock price drops by the dividend amount on the exchange. The short gains $0.48 from the price drop but loses $0.48 from the slash. Net zero on the event itself.

Secondary source: Junior pool. When longs outnumber shorts, the Junior tranche covers the gap. If the protocol owes $100K in dividends but only collects $60K from shorts, the remaining $40K is deducted from Junior principal. Juniors accept this because they also collect 100% of funding rates paid by those same long traders.

Tertiary source: Protocol hedge (V3). At scale, the CME hedge on credit indices generates profit during sector wide ex dividend drops, refilling the Junior buffer.

6.6 Yield Metrics

Two yield numbers exist for every asset. Both are displayed on the trading terminal.

Current Yield (Yield on Price). Annual Dividend / Market Price. This is the standard metric on Yahoo Finance, CNBC, and trading terminals. A stock at $0.60 paying $0.06 annually shows 10%. This is the yield a trader earns on capital deployed today.

NAV Coverage (Yield on NAV). Annual Dividend / NAV. This measures dividend sustainability. The same stock with $1.00 NAV shows 6%. If NAV Coverage exceeds 12%, the dividend is at risk of a cut. Senior depositors and risk engines monitor this number.

6.7 Live Breakeven Price

The protocol calculates a real time breakeven price for every open position. This is the price at which the trader's total return (price P&L plus accrued dividends minus funding costs) equals zero.

Long breakeven formula:

Breakeven = Entry_Price - (Accrued_Dividend + Funding_Rebate - Funding_Paid) / Leverage

Short breakeven formula:

Breakeven = Entry_Price + (Accrued_Dividend + Funding_Paid - Funding_Rebate) / Leverage

The breakeven shifts every block as dividends accrue and funding settles. For longs on high yield assets, the breakeven drops over time. The position becomes profitable even if the price stays flat or dips slightly.

Worked example: 5x long on ARCC at $20.00, quarterly $0.48 dividend.

At 5x leverage, the breakeven shifts by Net_Credit / 5 per period. At 10x, the shift is halved per unit but the notional dividend is doubled. The trading terminal displays the breakeven as a line on the price chart. Green zone above breakeven, red zone below.

Short breakeven (burn price). For shorts, the breakeven rises over time. Every day a short is open on a dividend paying asset, the cost basis increases. The trading terminal labels this the Burn Price. A short on a 10% yielder at $20.00 sees their burn price rise by approximately $0.005 per day. The UI warns: the dividend clock is working against you.

7. The Safety Stack

7.1 Layered Backstop

Five layers of protection, in order:

1. Junior Tranche ($nRISK): First loss capital (25% of total vault)
2. Insurance Fund: 20% of all protocol revenue
3. Delta Neutral Protocol Hedge (V3): CME short on HYG/IWM via regulated FCM
4. Auto Deleveraging: Force close winners if all else fails
5. Senior principal: Absolute last resort

7.2 Dynamic Redemption Fees

Senior exit fees scale with utilization on a quadratic curve. The fee stays in the pool to recapitalize Junior. Small withdrawals are cheap. Large withdrawals during stress cost more.

7.3 Global Open Interest Cap

Per sector OI cap sized so the backstop can cover the worst historical drawdown. Cap grows proportionally with Junior pool growth.

8. Launch Assets

10 assets at launch across three categories. One pool. The protocol supports any publicly traded company with an audited NAV and regular dividends. Hundreds of BDCs, REITs, and CEFs qualify. New listings are added through governance votes.

BDCs. ARCC (Ares Capital, 9.2%), MAIN (Main Street Capital, 6.4%), HTGC (Hercules Capital, 10.1%). Middle market lending. Quarterly dividends. Deep floats.

REITs. O (Realty Income, 5.6%), STWD (Starwood Property, 9.8%), NLY (Annaly Capital, 13.1%), AGNC (AGNC Investment, 14.8%). Real estate and mortgage exposure.

CEFs. PDI (PIMCO Dynamic Income, 13.5%), UTG (Reaves Utility, 6.9%), GOF (Guggenheim Strategic, 15.2%). Bond and utility portfolios. Structural discount/premium dynamics.

Single global Junior pool (not per asset) to capture cross asset diversification benefit. Risk weighted allocation: each asset draws from the pool proportional to its OI and volatility.

9. Governance: The Prime Council

9.1 The Council (Fast Action)

7 seat council of Validators + Foundation members. Can adjust OI caps, trigger circuit breakers with 5/7 vote. Instant execution.

9.2 The DAO (Strategic Action)

$NAVY token holders vote on new asset listings and fee split changes. 7 day voting period.

9.3 Veto Power

Validators can collectively veto a DAO vote if it mathematically threatens $nSAFE principal. The safety of Senior depositors is non negotiable.

10. Validator Network

10.1 Admission Requirements

The validator set is reputation gated. The cost of lying must exceed the profit from cheating.

Stake bond. $100,000 equivalent in $NAVY plus 1M Navy Points. This is slashing collateral. The bond sits in a protocol controlled escrow contract.

Tier 1 data access. Proof of redundant, low latency connections to IEX, Nasdaq, and SEC EDGAR. Each validator runs a proprietary sidecar process that pulls NBBO midpoint data every 400ms.

Hardware standard. Dedicated NVMe storage and high speed CPU. Consumer hardware cannot meet the 400ms NBBO calculation requirement.

10.2 Committee Assignment

For every listed asset, the L1 randomly assigns a sub committee of 10 validators from the global pool each epoch.

Dividends and NAV (80% supermajority). 8 of 10 must submit identical data extracted from the 8 K or 10 Q filing. If fewer than 8 agree, Oracle Lock remains active and the Prime Council is alerted to a data conflict. No trades settle until resolution.

Spot price (66% threshold). 7 of 10 must agree on the NBBO midpoint within 0.5% deviation. Outliers are discarded and the submitting validator is flagged.

Accrued dividend duty. Validators must update the accrued dividend value every 24 hours. Failure to update for two consecutive days triggers an automatic Strike 1.

10.3 Proof of Filing

Validators must prove they read the filing, not just submit a number.

Hash rule. Every submission includes a cryptographic hash of the specific SEC filing document. The chain can verify the data source.

Timing rule. Submissions must arrive within 3 blocks of the filing appearing on EDGAR. Late validators forfeit their reward. Incorrect validators are flagged for slashing.

10.4 Slashing Ladder

Three strike system. Escalating penalties.

Strike 1: Reward nullification. Price deviation greater than 0.5% or missed accrual update. The validator loses all fees and block rewards for that epoch.

Strike 2: Point slashing. Inconsistent data or minor 8 K entry error. 10% of staked Navy Points are burned. Governance power reduced.

Strike 3: Full slash. Collusion or deliberately false data. 100% of $NAVY stake is slashed. Funds move directly into the Junior pool ($nRISK) as reparation. Validator removed from the network.

10.5 Whistleblower Bounty

Junior ($nRISK) holders can challenge any validator submission via the Challenge Data mechanism.

Bond. Challenger posts $500 USDC to prevent spam.

Proof. Link to the SEC filing or timestamped NBBO feed screenshot that contradicts the validator consensus.

Resolution. Prime Council reviews within 4 hours.

Outcome if correct. Whistleblower receives 50% of the slashed validator bond. Remainder goes to Junior pool.

Outcome if incorrect. The $500 bond is burned.

This creates a secondary enforcement layer. Every Junior holder is economically incentivized to audit validator output. A validator feeding a fake dividend to help an insider loses $100,000 to catch a $5,000 trade.

10.6 Validator Rule Summary

11. Fee Structure

Revenue split:

Dynamic: when Insurance Fund reaches 25% of Total OI, the 20% redirects to the Junior pool.

12. Navy Points

Use the protocol, earn points. Non transferable. Earned through trading volume, LLV deposits, and vault participation. When Navy launches its token, points convert. Anti spam: daily action limit proportional to points balance.

13. Technical Stack

Navy L1. Custom high performance chain. Sub second finality, zero gas fees, 100k+ TPS.

Oracle. Validator native with NBBO Midpoint + Pyth confidence intervals.

Smart contracts. Open source, audited, bug bounty.

Bridge. pUSDC sovereign bridge from Ethereum/Solana. Escrowed 1:1. Validators bonded and slashable.

14. Risk Factors

Smart contract risk. Bugs or exploits in protocol contracts could cause bad pricing, failed settlements, or loss of funds.

Oracle risk. NAV staleness, feed failures. Validator native model mitigates but does not eliminate.

Credit correlation. BDCs are correlated during macro stress. Single Junior pool means losses from one asset affect all depositors.

Imbalance risk. If funding is insufficient to attract market makers, the pool absorbs directional risk.

Dividend cascading. Large unexpected dividends on thin short positions could trigger liquidation chains.

Regulatory risk. Synthetic assets and DeFi face evolving regulation. May affect availability in certain jurisdictions.

Reflexivity. Liquidations cause price drops cause more liquidations. Mitigated by progressive liquidation, Insurance Fund, and ADL.

15. Legal Structure

Navy Labs Inc. Delaware C Corp. Builds web interface, risk engine, tooling.

Navy Foundation. Cayman Islands entity under VASP framework. Protocol governance.

All smart contracts open source. Risk methodology public.

16. Roadmap

V1. Junior/Senior Tranche launch with 10 assets (BDCs, REITs, CEFs). 1x stabilizer longs during stress. ADL with grace period.

V2. Counter cyclical assets (inverse bond ETFs, treasury synths). Internal diversification against sector risk.

V3. CME Delta Neutral Reserve via regulated FCM. Protocol level systemic hedge.

System Comparison