Verifiable asset management · on Sui

Most vaults ask you to trust their numbers. Floe proves them.

Curator-run vaults that allocate across every Sui yield venue and prove their redeemable floor with hardware attestation — not a self-reported oracle. Every figure is verifiable on-chain.

Enter the app See the proof

The trust inversion

Everyone else reports. Floe proves — or refuses.

The whole category mints and redeems against a NAV someone asserts. That single assumption is behind the largest losses in onchain asset management. Floe removes it.

The category

Reported NAV

Strategy runs on a private server
Results are posted on-chain
You trust the number is real
Oracle/NAV manipulation is the #1 failure mode

$8.8B lost to asserted-NAV failures in 2025 alone.

Floe

Proven floor

NAV computed inside a hardware enclave
Signed by code measured on-chain
Verified by the contract before it's accepted
Refused if it can't be proven — you exit at the floor

nav_lower_bound — the redeemable floor a curator can never inflate.

How a number becomes provable

Four steps from a figure to a fact.

Every NAV update — across every venue a vault touches — runs this path before the chain will act on it.

Compute

The strategy runs and the multi-venue NAV is computed inside a Nautilus TEE — a sealed enclave, not a private server you have to trust.

Sign

The enclave signs the figure with hardware whose exact code measurement (PCR0) is registered on-chain. The signature can't be forged off that code.

Verify

The Move contract verifies the signature and its intent on-chain before it accepts the number. No verification, no acceptance.

Refuse

If a figure can't be verified, the vault refuses it: deposits fail closed, withdrawals fall to the proven floor. You're never trapped, never overpaid.

One primitive, a whole suite

Verifiable valuation, composed into products.

Register an enclave once; attest any typed value; verify it on-chain. Everything Floe ships is a consumer of that one primitive.

Floe Vaults

Provable NAV, not reported.

The issuance + curation core. Tokenized composable shares, attested NAV, hybrid-instant withdrawal, role-based access.

Flagship

Floe Stratos

Premium harvesting on DeepBook Predict.

The flagship strategy: PLP base yield, a 1σ vertical-range ladder priced off the SVI surface, and a Margin delta hedge.

Floe Attest

Verifiable valuation as a service.

The attestation primitive (floe_nav). Any vault or app can prove its NAV, volatility, collateral, or risk — a reusable Sui primitive.

Floe Index

An attested volatility feed.

A verifiable implied-vol number the ecosystem can compose against — signed in the enclave, checked on-chain.

Floe Guard

Provable safety.

Circuit breaker + guardian + attested risk: NAV that can't be inflated, halts that can't be faked, a posture you can verify.

Floe Lend

The market that removed the oracle.

An attested-collateral money market — collateral is valued at the enclave-signed floor, so a borrower can't forge what their shares are worth.

Resilience by composition

One vault spans every venue — so no single one can sink it.

A product that's a skin over one protocol dies when that protocol does. Floe allocates across venues through a uniform interface. If one pauses, the vault still holds its other positions and its idle reserve — and still redeems at the proven floor.

Explore the vaults