Native DeFi Integrations

This page describes the qualified native profiles, not live mainnet availability. The sandbox has a wider demo asset set; see the canonical support table.

Ethereum and Base use one Aave V3 vault per configured lending asset. USDC and USDT retain separate accounting; deposits never convert one into the other.

Base USDT and WBTC are not configured. Adding an asset requires qualifying its actual chain specific reserve and connecting it to the approved route graph. Generic idle custody is available for non-lending assets; it is not a second lending allocation. Native wstETH earns Aave supply yield in addition to its embedded staking exposure. Displayed Aave APR excludes embedded staking yield and incentive rewards.

Deposits, fees and exits

Deposits require capacity under Aave's current reserve limits. Paused/frozen reserves or failed supply revert the complete deposit. An estimate cannot reserve future capacity: the app simulates the complete transaction immediately before submission and failures preserve the private state.

All SEAL protocol fees launch at zero. After sufficient volume and fourteen days of notice, the planned defaults are 0.01% for swaps between registered stablecoins, 0.05% for other swaps and 0.05% on private-margin closing collateral. Public margin, deposits and withdrawals remain free under the planned policy. Yield fees are capped at 10%, with no nonzero default selected. The volume trigger must be published before scheduling. See Fees for fee bases, caps and activation rules.

Private transfers and claims change note ownership without moving Aave backing. Pending payments can be claimed by the recipient or reclaimed by the sender after seven days; both branches consume the same nullifier. Batches consume at most eight notes. Combine notes when a swap would exceed that bound.

The guardian cannot activate forced recovery or pause pool assets. User exits depend on the registered vault's redemption path, upstream liquidity and token restrictions.

Supported swap routes

The client enumerates simple paths through approved canonical Uniswap V3 pools, with at most three hops. Ethereum includes USDC→WBTC and WBTC→wstETH through WETH. Base includes USDC→wstETH through WETH. Quotes compare received value after estimated DEX execution gas when reliable USD prices are available; otherwise they rank output and show separate network costs. This is not an exhaustive optimizer or a guaranteed final Base fee.

The standard adapter redeems the source once, authenticates each pool callback, executes the proof bound path, and funds the final Aave output and any input refund. Destination funding, output minima, route identity and the one-time protocol fee are atomic. Failure reverses note spends and all transfers.

External execution scope

SEAL includes dedicated Uniswap V3 swaps and does not deploy the generic external executor. The vault and pool expose no Aave borrow or credit delegation action. A withdrawal recipient remains free to use its own withdrawn assets outside SEAL; this does not authorize debt against pool or vault collateral.

The optional margin extension uses separate user-controlled accounts to borrow against their own collateral. Public accounts use wallet funding; private accounts use proof-bound SEAL withdrawals and return private notes. Shared markets have one account health factor and one account-level P&L.

The Shielded Swap page accepts the input asset, output asset and amount. After one second without editing, it displays an estimated output from the configured DEX routes. Changing the amount or pair clears the old estimate. Sandbox fallback prices are labelled as demo estimates. Review swap opens the detailed quote, minimum received, slippage, fees and submission controls. Editing or reversing a pair requires a fresh review.

Recovery and deployment boundaries

Keep a current encrypted account export, verify fresh-device restore, and retain a direct-wallet exit with an alternate RPC. Archive data is needed to recover private openings; public logs alone are insufficient. Direct wallet submission needs native gas and publicly links the submitting address to execution. DEX amounts, target calldata, deposits and funded output events remain public.

Margin integration

The margin extension composes separate Aave account collateral and borrowing with public Uniswap execution. It does not borrow against the privacy pool or saver vaults. See Margin Architecture for collateral/debt accounting, leverage, settlement and the privacy boundary.