Errors

A contract failure returns a numeric code, such as Error(Contract, #<code>). The number has meaning only within the emitting contract’s error enum.

Identify the error source

Use the contract address associated with the final error diagnostic to select the decoder. Follow nested calls when a pool, token, router, or oracle fails. The address called at the top level is not enough. An earlier diagnostic can also describe a caught failure that is not the final error. Keep the final error domain, code, emitter address, and diagnostic trace. If the trace does not identify the emitter, report the numeric code as unresolved. Do not infer a contract from the number alone. For example, lending #401 means FlashloanNotEnabled; the DeFindex adapter’s #401 means NotInitialized. The enums have explicit discriminants. Gaps are expected. Recheck decoders after an upgrade. Host, authorization, dependency, and token failures need their own decoders. The swap aggregator and XOXNO oracle have separate enums.

Groups

Enum	Code range	Domain
`GenericError`	1–55	Contract setup, registry, accounts, timelock, roles, arithmetic
`CollateralError`	100–135	Collateral, positions, rate curves, liquidation
`OracleError`	201–235	Oracle configuration, feeds, staleness, sanity bounds
`SpokeError`	300–319	Spoke registration and per-spoke asset listings
`FlashLoanError`	400–412	Flash-loan execution and repayment
`StrategyError`	500–505	Strategy conversion, swap routing, flash-position

Generic errors

Code	Name	Meaning
`2`	`AssetAlreadySupported`	A market already exists for this hub asset.
`5`	`PoolAlreadyDeployed`	The singleton pool, controller, or price aggregator is already recorded.
`6`	`InvalidAsset`	The token reports no decimals or symbol, or declared decimals do not match.
`7`	`AssetsAreTheSame`	Source and destination are the same market where distinct `HubAssetKey`s are required, or the same token where distinct underlying assets are required.
`8`	`WrongToken`	`params.asset_id` does not equal the asset the market is created for.
`10`	`InvalidWasmHash`	The supplied Wasm hash is all zero bytes.
`13`	`AccountNotInMarket`	The caller does not hold the account’s position NFT, or the account has no metadata record.
`14`	`AmountMustBePositive`	An amount argument is zero or negative, or a measured transfer delta is not positive.
`16`	`InvalidPayments`	A payments or route list is empty where one is required, non-empty where forbidden, or longer than the view limit.
`18`	`NotSmartContract`	The supplied address is not a deployed contract.
`24`	`AccountNotFound`	The account id has no stored state, or its NFT owner cannot be resolved.
`25`	`AccountModeMismatch`	The account’s position mode differs from the mode the call requires.
`27`	`AggregatorNotSet`	The swap or price aggregator address has not been configured.
`29`	`PositionLimitsNotSet`	No position limits are stored.
`30`	`PoolNotInitialized`	The pool or controller address is unset, or the market’s params/state record does not exist.
`32`	`OwnerNotSet`	Contract ownership has never been assigned.
`33`	`MathOverflow`	Checked arithmetic overflowed, or a narrowing conversion failed.
`34`	`InternalError`	An internal invariant failed. Report it.
`36`	`InvalidPositionLimits`	A supply or borrow position limit is zero or above `POSITION_LIMIT_MAX` (5).
`38`	`SpotOnlyNotProductionSafe`	Every configured oracle source reads an unsmoothed spot market.
`39`	`InvalidTimelockDelay`	The constructor delay is zero, or a delay update is zero, below the current delay, or above the maximum.
`40`	`TimelockOperationExpired`	The scheduled operation’s grace period has elapsed.
`41`	`InvalidRole`	Unknown governance role, an executor/canceller combination, or the role is not held on revoke.
`42`	`BlendPoolNotApproved`	The target Blend pool is not on the approved list.
`43`	`HubNotActive`	The hub id does not exist or has been deactivated.
`44`	`NotAuthorized`	An account-owner/delegate check fails, an owner-required proposal has a different proposer, or governance tries to revoke the owner or the proposer’s own role.
`45`	`RegistryCapReached`	The account already has `MAX_DELEGATES` (16) delegates.
`46`	`OperationNotCancellable`	The operation is a recovery operation, or the canceller is its own target.
`47`	`BorrowRoundsToZeroShares`	A positive borrow mints zero scaled debt shares. Borrow more.
`48`	`CannotRemoveLastProposer`	Revoking would leave the proposer role with no holders.
`49`	`WithdrawRoundsToZeroShares`	A positive withdrawal burns zero scaled supply shares.
`50`	`NetSettleRoundsToZeroShares`	A positive net settlement burns zero shares.
`51`	`SupplyRoundsToZeroShares`	A positive supply mints zero scaled shares.
`52`	`RepayRoundsToZeroShares`	A positive net repayment burns zero scaled debt shares.
`53`	`PositionNftNotSet`	A path requiring configured NFT wiring, such as account creation, found no address. Ownership lookup can instead return #24.
`54`	`PositionNftAlreadyDeployed`	A position-NFT address is already recorded.
`55`	`DivisionByZero`	A fixed-point multiply-divide received a zero denominator. Distinct from `MathOverflow`.

Codes 1 (AssetNotSupported), 3 (InvalidTicker), 11 (InvalidExchangeSrc), and 12 (PairNotActive) are declared but have no error sites in the lending contract source.

Collateral and pool errors

Code	Name	Meaning
`100`	`InsufficientCollateral`	After the operation, LTV-weighted collateral falls below total debt, or health factor drops below 1 WAD.
`101`	`HealthFactorTooHigh`	The target has no debt, or health factor is at least 1 WAD — not liquidatable.
`102`	`HealthFactorTooLow`	`update_account_threshold` with `has_risks = true` ends below 1.05 WAD. A gated liquidation-tuple refresh skips a tuple that fails its hypothetical health-factor check.
`104`	`NotCollateral`	The spoke listing does not allow the asset as collateral.
`107`	`AssetNotBorrowable`	The spoke listing does not allow the asset to be borrowed.
`109`	`PositionLimitExceeded`	A new slot exceeds the position limit, or a supply leg with fewer than 3 decimals would coexist with another supply slot.
`111`	`InvalidPositionMode`	The requested mode is not Multiply, Long, or Short.
`112`	`InsufficientLiquidity`	Market cash is below the requested draw, or the draw would break the liquidation buffer.
`113`	`InvalidLiqThreshold`	Risk bounds fail validation: fee at or above BPS, threshold at or below LTV or above BPS, or `threshold × (BPS + bonus) > BPS²`.
`114`	`CannotCleanBadDebt`	The account does not pass the bad-debt gate.
`115`	`WithdrawLessThanFee`	The liquidation protocol fee is larger than the gross amount withdrawn.
`116`	`InvalidBorrowParams`	A cap or floor is negative, a cap exceeds the asset’s decimal domain, or the flash-loan fee exceeds the maximum (500 bps).
`117`	`InvalidUtilRange`	Utilization breakpoints are out of order.
`118`	`OptUtilTooHigh`	Optimal utilization is at or above 100%.
`119`	`InvalidReserveFactor`	The reserve factor is at or above 100%.
`120`	`DebtPositionNotFound`	The account has no debt position for that hub asset.
`121`	`CollateralPositionNotFound`	The account has no supply position for that hub asset.
`122`	`CannotCloseWithRemainingDebt`	`close_position` requested while borrow positions remain open.
`123`	`PoolInsolvent`	Supplier claims exceed cash plus outstanding debt, or supply is zero while debt remains.
`126`	`MinBorrowCollateralNotMet`	While debt remains, LTV-weighted collateral is below the USD floor, or a supply leg with fewer than 3 decimals has fewer than 2 raw units after floor conversion.
`127`	`UtilizationAboveMax`	Post-operation utilization exceeds the market’s `max_utilization`.
`128`	`BaseRateNegative`	The base borrow rate is negative.
`129`	`SlopeNonMonotonic`	Rate slopes do not increase monotonically.
`130`	`MaxRateBelowBase`	The max borrow rate is not strictly above the base rate.
`131`	`MaxBorrowRateTooHigh`	The max borrow rate exceeds `MAX_BORROW_RATE_RAY` (200% APR).
`132`	`AssetDecimalsTooHigh`	The asset’s decimals exceed the WAD/RAY decimal domain.
`133`	`SelfLiquidationNotAllowed`	The `SeizeMode::Credit` receiver account is the account being liquidated.
`134`	`InvalidLiquidationCurve`	Curve bounds fail validation.
`135`	`FullCloseRequired`	Reserved retired code. No error site in the verified lending source.

Code 110 (PositionNotFound) is declared but has no error site in the lending contract source. An account owner may call liquidate on that account. #133 only rejects using the same account as the SeizeMode::Credit(id) receiver.

Spoke errors

Code	Name	Meaning
`300`	`SpokeNotFound`	The spoke id is zero, or no configuration is stored for it.
`301`	`SpokeDeprecated`	The spoke is flagged deprecated.
`307`	`AssetNotInSpoke`	The hub asset is not listed on that spoke.
`308`	`AssetAlreadyInSpoke`	The hub asset is already listed; use `edit_asset_in_spoke`.
`309`	`SpokeAssetInUse`	The listing still has non-zero supplied or borrowed usage; it cannot be removed.
`310`	`SpokeMismatch`	The account’s spoke id differs from the spoke the call targets.
`311`	`SpokeSupplyCapReached`	The supply would push tracked spoke supply above its cap.
`312`	`SpokeBorrowCapReached`	The borrow would push tracked spoke borrows above its cap.
`315`	`SpokeAssetPaused`	The listing’s `paused` flag blocks ordinary entry and exit. Liquidation seizure checks `no_seize` instead.
`316`	`SpokeAssetFrozen`	The listing’s `frozen` flag blocks entry. This flag alone does not block `withdraw` or `repay`.
`317`	`SpokeAssetFlagRelaxation`	`set_spoke_asset_flags` or `edit_asset_in_spoke` tried to clear a set halt flag. Use timelocked `RelaxSpokeAssetFlags` with the current flags epoch.
`318`	`SpokeAssetSeizureHalted`	The listing’s `no_seize` flag blocks collateral seizure.
`319`	`SpokeFlagsEpochMismatch`	`RelaxSpokeAssetFlags` names an old or incorrect epoch. Read `get_spoke_asset_flags_epoch` and create a new proposal. Proposal and execution both check the epoch.

Oracle errors

Price failures reach users indirectly: price-aggregator prices and price_spread panic on an unusable price, as do controller paths requiring that valuation. quotes reports per-key resolution failures as PriceStatus { valid: false, error_code: Some(...) }; this does not suppress host failures such as exhausted resources.

Code	Name	Meaning
`201`	`InvalidAggregator`	The proposed swap or price aggregator address is not a deployed contract.
`204`	`InvalidOracleTokenType`	A Reflector feed references its asset by string; Reflector accepts only an address or symbol.
`205`	`UnsafePriceNotAllowed`	The two oracle legs disagree beyond the configured tolerance, or only one of two legs produced a reading.
`206`	`PriceFeedStale`	An available observation exceeds its staleness budget. Timestamps up to 60 seconds ahead are accepted; observations further ahead are dropped, with the resulting error depending on the remaining sources.
`208`	`BadLastTolerance`	The upper ratio’s excess over BPS is outside 150..2500 bps (upper ratio must be 10150..12500), or the lower ratio differs from the required rounded reciprocal.
`210`	`NoLastPrice`	No readable source remains, or an Aquarius LP read failed (for example, unreadable reserves or shares).
`211`	`NoAccumulator`	No revenue accumulator is configured on the controller.
`212`	`ReflectorHistoryEmpty`	Reflector returns no price history for the asset.
`216`	`OracleNotConfigured`	No oracle is registered for the price key, or the response omits a requested asset.
`217`	`InvalidPrice`	The resolved price is zero or negative, or LP fair-value math is non-representable.
`218`	`InvalidStalenessConfig`	`max_stale_seconds` is out of range or shorter than the source’s own guaranteed freshness.
`219`	`TwapInsufficientObservations`	The record count is zero or below the smoothing minimum, or the returned history is too short, too long, or spaced closer than the feed resolution.
`220`	`InvalidOracleBase`	A direct Reflector feed is not USD-quoted, a Scaled Reflector factor is not quoted in its declared token, or LP keys/tokens do not match the pool.
`221`	`InvalidOracleDecimals`	Declared decimals do not match the provider, or fall outside the allowed range.
`222`	`InvalidOracleResolution`	The Reflector resolution is below the minimum, above `max_stale_seconds`, or implies a TWAP span exceeding it.
`223`	`SanityBoundViolated`	The resolved price falls outside the oracle’s stored min/max sanity band.
`224`	`InvalidSanityBounds`	Bounds are non-positive, inverted, above the maximum reasonable price, or narrower than `MIN_SANITY_BAND_BPS` (50).
`225`	`OracleCycleDetected`	The price key is already being resolved higher up the composition chain.
`226`	`SanityBandTooWideForSingleSource`	A single-source, LP, or dual-source oracle with identical provider trust sets exceeds its tighter sanity-band limit.
`227`	`SanityBandMustTighten`	The immediate `set_sanity_band` call would widen the stored band. Widen through the timelocked `ConfigureAssetOracle` operation.
`228`	`TwapRecordsOutOfRange`	The requested record count is above `MAX_TWAP_RECORDS` (12).
`229`	`OracleDepthExceeded`	The composition nests deeper than `MAX_RESOLUTION_DEPTH` (3).
`230`	`FactorOutOfBounds`	A scaled source’s factor price falls outside its configured min/max factor.
`231`	`SourceCountOutOfRange`	The oracle has zero or more than two sources, or an Aquarius LP source is combined with any other source.
`232`	`IndependenceNotDeclared`	Sources violate `RequireDisjoint`, or `AllowShared` is empty or differs from the exact set of shared provider addresses.
`234`	`UnsupportedAquariusPool`	The Aquarius pool is not the expected type, or has a zero reserve or zero total shares.
`235`	`InsufficientAquariusLiquidity`	The pool’s total value is below the source’s `min_pool_value_wad` floor.

Flash loan and strategy errors

Code	Name	Meaning
`400`	`FlashLoanOngoing`	A flash loan is already in progress; re-entrant protocol calls are refused.
`401`	`FlashloanNotEnabled`	The market’s `is_flashloanable` parameter is false.
`402`	`InvalidFlashloanRepay`	Allowance is below principal plus fee, or a pool token-balance check after payout, callback, or repayment fails.
`409`	`StrategyFeeExceeds`	The computed strategy fee is larger than the borrowed amount.
`412`	`InvalidFlashloanReceiver`	A flash receiver is not a deployed Wasm contract, or a controller payout names the controller or pool as recipient.
`500`	`ConvertStepsRequired`	`multiply`’s initial payment is neither the collateral nor the debt asset and no `convert_swap` was supplied.
`501`	`RouterOverspend`	The controller’s input-token balance rose during the swap, or the router spent more than `amount_in`.
`502`	`NoSwapOutput`	The swap produced no positive measured output-token balance increase.
`503`	`CollateralRequired`	`flash_position` has a nonempty collateral list with no positive minimum. An empty list raises #16.
`504`	`CollateralMinimumNotMet`	A measured collateral deposit is below its declared minimum, or no deposit is positive.
`505`	`FlashPositionClosed`	`flash_position` finished without supply or without positive debt in its declared debt market.

DeFindex strategy adapter errors

The reference vault adapter uses its own enum, independent of the codes above.

Code	Name
`401`	`NotInitialized`
`460`	`AmountNotPositive`
`461`	`InsufficientBalance`
`462`	`ArithmeticError`
`463`	`AccountLookupFailed`

Integration handling

Treat oracle errors as retryable only after source recovery or configuration change. See the oracle disruption runbook.
Treat cap, liquidity, and utilization errors (#112, #127, #311, #312) as amount/headroom problems.
For authorization and listing errors, check the caller, account owner, delegate status, full market key, and current listing flags.
For #319, read the current epoch and schedule a new recovery operation. Do not retry the stale operation unchanged.
Treat the five *RoundsToZeroShares codes as “amount too small for this market’s current index” — increase the amount.
Use views to check the request. Simulate the exact call with the same addresses, amounts, and arguments. The execution result is authoritative.

Start here

Core concepts

Lending actions

Strategies and integrations

System behavior

Reference

Operations

Identify the error source

Groups

Generic errors

Collateral and pool errors

Spoke errors

Oracle errors

Flash loan and strategy errors

DeFindex strategy adapter errors

Integration handling

​Identify the error source

​Groups

​Generic errors

​Collateral and pool errors

​Spoke errors

​Oracle errors

​Flash loan and strategy errors

​DeFindex strategy adapter errors

​Integration handling

Identify the error source

Groups

Generic errors

Collateral and pool errors

Spoke errors

Oracle errors

Flash loan and strategy errors

DeFindex strategy adapter errors

Integration handling