About

Who is behind GBLIN

GBLIN is an index token on Base: each token is a share of a basket of cbBTC, WETH and USDC held by the token contract, minted and redeemed at net asset value.

GBLIN is built and operated by Roberto Parise, an independent builder who publishes under the onchain name gblin.base.eth. The name resolves to 0x9FFa…a9ee, the address that deployed the contracts, signs the multisig that proposes changes to the timelock and receives the protocol fee, so the identity behind the project and the powers it holds can be checked on chain. Engineering and operations are AI-assisted and carried out in public; see Operated by AI.

Who can do what

Every role below is read from the contracts on Base, not stated by us.

Owner of the vault and of the sequencer sentinel

Timelock (48 hours) · 0x6aBe…e5Dd

The only address that can change parameters within the bounds written in the contract (including the post-mint redemption cooldown, at most one hour), set base weights, list, delist or relist an asset, replace a price feed, set the sequencer feed, the fee recipient and the auction fill agent, and transfer ownership. Its strongest power: abandoning a delisted asset whose price feed has been silent for at least 7 days, which removes that asset from the net asset value and from redemption. Every change is scheduled in public and can be executed only after 48 hours.

Schedules changes on the timelock; two of its three signers must approve each one. A scheduled change is visible on chain for 48 hours before it can take effect.

Timelock executor

Anyone · 0x6aBe…e5Dd

Once the delay has passed, any address can execute a scheduled change. Nobody can execute one early.

Can cancel a scheduled change during the delay, with two of its three signers.

Sequencer sentinel guardian

Project guardian key · 0x3059…6dcA

Can report the Base sequencer as down. While it reports down, the vault refuses mints and auction fills; redemptions are not affected. Pauses are budgeted: one stretch of at most 30 days, then a rest. The owner can replace the guardian.

Receives the protocol and management fees, minted as shares. It has no other power over the vault. The owner can change it.

What no one can do

Not the operator, not the timelock, not the guardian.

  • Transfer holders' assets or shares to itself or to anyone else.
  • Mint shares without a deposit, other than the protocol and management fees within the caps written in the contract.
  • Set a parameter outside the bounds written in the contract.
  • Pause redemptions: redemption in kind reads no price feed, charges no fee and has no pause function. A cooldown of at most one hour applies after the holder's own mint, and an abandoned asset is excluded.
  • Upgrade the code: the contracts are not proxies.
  • Act without the timelock's 48-hour delay.

Contact

Contracts on Base

Every contract the protocol runs on. Each source is verified on Sourcify and on Basescan. No proxies: what is deployed is what is verified.

The vault and the token. Mints at net asset value, redeems in kind, runs the rebalancing auction. Owned by the timelock.

Read-only views and quotes over the vault (basket rows, auction state, fee and shield parameters, mint and redemption quotes).

Periphery: buy with any token routed through Uniswap, and redeem for ETH in one transaction. Holds nothing between calls.

Wraps the Chainlink sequencer-uptime feed; the guardian can report the sequencer as down for a budgeted stretch. Owned by the timelock.

The swap adapter the vault and the zap use for internal swaps, with a TWAP band that rejects manipulated prices.

Fill agent for the rebalancing auction: lets CoW Protocol solvers fill an open auction through a conditional order (ComposableCoW).

Conditional-order handler that turns the open auction into a CoW Protocol order at the auction price.

Owner of the vault and of the sentinel. 48-hour delay on every change, 14-day grace period, public schedule.

Uniswap V3 pool WETH/GBLIN (0.30%)

0x779C4260022bf7493d303Ff016C3C63215ee9B19

The secondary market. The vault itself is the primary market: minting has no cap and no price impact.

Superseded contracts, kept for holders who have not migrated: 0x36C8…52f0 (superseded. holders redeem in kind or migrate from the account page) · 0x38Dc…6345 (superseded).

Documents