> For the complete documentation index, see [llms.txt](https://docs.pots.money/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.pots.money/how-ibs-works/smart-treasury.md).

# Smart Treasury

#### The Reserve Architecture

A monetary system is only as credible as its reserves. IBS maintains a four-component treasury, where the protocol-owned LP pool forms the base reserve layer, supported by three additional operational modules:

$$\mathcal{T} = {V\_{LP},\ T\_{RBS},\ T\_{ST},\ T\_{PBM}}$$

{% hint style="success" %}
📌 LP is treasury. The USDT and IBS permanently locked in the Blackhole LP pool are not separate from the treasury — they are the treasury's largest and most foundational reserve component. Every solvency formula in this protocol counts $$V\_{LP}$$ as the primary backing asset.
{% endhint %}

These components are not interchangeable. Each has dedicated inflows, defined purposes, and separate execution logic.

| Component                                  | Nature                                                 | Execution                   |
| ------------------------------------------ | ------------------------------------------------------ | --------------------------- |
| $$V\_{LP}$$ **— Protocol-Owned LP**        | Permanent base reserve; USDT + IBS locked in Blackhole | Immutable (cannot be moved) |
| $$T\_{RBS}$$ **— Range Bounded Stability** | Active stabilization reserve                           | Automated                   |
| $$T\_{ST}$$ **— Safety Treasury**          | Last-resort solvency reserve                           | Multi-sig governance        |
| $$T\_{PBM}$$ **— POTS Bid Pool**           | Governance token distribution                          | Automated + Multi-sig       |

<figure><img src="/files/YgPLmhMbfthguQWiJFqb" alt=""><figcaption></figcaption></figure>

#### Layer 1: RBS — Range Bounded Stability

The RBS module is the protocol's active market stabilizer. It operates within a defined price band around the IBS backing value:

$$\mathcal{B}*{RBS} = \[P*{RBS}^{-},\ P\_{RBS}^{+}] = \[B\_{IBS} \times 0.95,\ B\_{IBS} \times 1.10]$$

When $$P\_{market} > P\_{RBS}^{+}$$ (price above upper band):

The protocol mints new IBS into the LP pool, absorbing USDT into $$T\_{RBS}$$:

$$\Delta T\_{RBS} = +\Delta V\_{USDT,\ absorbed}When $P\_{market} < P\_{RBS}^{-}$$$ (price below lower band):

The protocol injects USDT from $T\_{RBS}$ into the LP pool to buy back and burn IBS:

$$\Delta T\_{RBS} = -\Delta V\_{USDT,\ deployed}$$

The RBS module is fully automated — no governance approval is required for routine stabilization operations. Its reserve capacity is bounded:

$$T\_{RBS} \geq T\_{RBS}^{min} = \gamma \cdot V\_{LP}$$

Where $$\gamma$$ is the minimum RBS reserve ratio (initial value: 0.20, i.e., 20% of LP value). If $$T\_{RBS}$$ falls below this threshold, bond issuance is paused until reserves are replenished.

#### Layer 2: Safety Treasury — The Solvency Guarantee

The Safety Treasury $$T\_{ST}$$ is the protocol's last-resort reserve. It exists for one purpose: ensuring that every IBS in circulation can be redeemed for at least $1 USDT, under any market condition.

The solvency condition is:

$$\frac{V\_{LP} + T\_{RBS} + T\_{ST}}{S\_{circ}} \geq 1 \quad \text{(always)}$$

$$T\_{ST}$$ is funded by a portion of protocol revenue (YRF flows) and grows monotonically under normal operation. It can only be deployed under a specific condition: when both $$T\_{RBS}$$ is exhausted and $$R < 1 + \epsilon$$.

Deployment of $$T\_{ST}$$ requires multi-signature governance approval — it cannot be triggered by any automated process alone. This two-layer protection (automation + governance) prevents both slow-moving crises and fast-moving exploits.

#### Layer 3: POTS Bid Pool — Governance Token Distribution

The POTS Bid Pool $$T\_{PBM}$$ is funded by two sources:

$$T\_{PBM}(t) = \int\_0^t \left\[\tau\_{slash}(s) \cdot V\_{unlock}(s) + \rho\_{YRF}(s)\right]ds$$

Where:

* &#x20;$$\tau\_{slash}$$ = Slashing Tax rate applied to each unlock (initial value: 10–30% depending on unlock speed)
* $$V\_{unlock}$$ = USDT value of each unlock event
* &#x20;$$\rho\_{YRF}$$ = YRF protocol revenue flow rate

&#x20;$$T\_{PBM}$$is used exclusively to bid for and redistribute $POTS governance tokens through the PBM auction mechanism. It is governed by multi-signature DAO approval for strategic allocations, while routine bid execution is automated.

#### The Treasury as a Game-Theoretic Commitment Device

The three-layer treasury architecture functions as a credible commitment device in the game-theoretic sense. A commitment is credible when it is costly to reverse — and the treasury architecture makes reversal structurally impossible for automated layers.

Consider the following: a rational attacker contemplating a bank-run attack on IBS must overcome three sequential barriers:

1. RBS: Automated buyback absorbs the first wave of sell pressure
2. Safety Treasury: Multi-sig governance must approve any deployment — introducing a time delay that allows community response
3. Permanent LP: Even if both reserves are depleted, the permanent liquidity floor remains — providing a non-zero redemption value

The cost of a successful attack is therefore:

$$C\_{attack} \geq T\_{RBS} + T\_{ST} + L\_{permanent}$$

For a rational attacker, the attack is only profitable if the expected gain exceeds this cost. As the treasury grows, the attack becomes progressively less viable — a property known as economic security scaling.

{% hint style="success" %}
🏛️ The Result

The Smart Treasury is not just a reserve fund. It is a game-theoretic deterrent — a system designed so that attacking the protocol is always more expensive than participating in it.
{% endhint %}

#### Governance: Automation + Multi-Sig

| Operation                     | Execution | Approval Required |
| ----------------------------- | --------- | ----------------- |
| RBS stabilization (routine)   | Automated | None              |
| Bond issuance / pause         | Automated | None              |
| Safety Treasury deployment    | Multi-sig | 25-of-50 signers  |
| Protocol parameter update     | Multi-sig | 25-of-50 signers  |
| Treasury strategic allocation | Multi-sig | 25-of-50 signers  |

The 25-of-50 multi-signature structure ensures that no single actor — including the founding team — can unilaterally access treasury funds. Any strategic decision requires consensus among a distributed set of keyholders.

#### Initial Parameters

| Parameter                 | Symbol                     | Initial Value       | Governance     |
| ------------------------- | -------------------------- | ------------------- | -------------- |
| RBS upper band multiplier | —                          | 1.10                | DAO-adjustable |
| RBS lower band multiplier | —                          | 0.95                | DAO-adjustable |
| Min RBS reserve ratio     | $$\gamma$$                 | 0.20 (20%)          | DAO-adjustable |
| Slashing Tax (immediate)  | $$\tau\_{slash}^{fast}$$   | 30%                 | DAO-adjustable |
| Slashing Tax (linear)     | $$\tau\_{slash}^{linear}$$ | 10%                 | DAO-adjustable |
| YRF revenue share to PBM  | $$\rho\_{YRF}$$            | 100% of CBT revenue | DAO-adjustable |
| Multi-sig threshold       | —                          | 25-of-50            | DAO-adjustable |

> All parameters are subject to DAO governance. See the Parameter Reference Table.