Errors

Every fallible entrypoint fails by panicking with a numeric contract error. Soroban surfaces that number to the caller (Error(Contract, #<code>) in the RPC response), so the code is all an integrator gets back — there is no message. Codes are stable: they are explicit discriminants and are never renumbered, so gaps in the sequence are expected and deliberate. Match numeric codes, not variant display text.

Groups

Enum	Code range	Domain
`GenericError`	1–55	Contract setup, registry, accounts, timelock, roles, arithmetic
`CollateralError`	100–135	Collateral, positions, rate curves, liquidation
`OracleError`	201–235	Oracle configuration, feeds, staleness, sanity bounds
`SpokeError`	300–318	Spoke registration and per-spoke asset listings
`FlashLoanError`	400–412	Flash-loan execution and repayment
`StrategyError`	500–505	Strategy conversion, swap routing, flash-position

Generic errors

Code	Name	Meaning
`2`	`AssetAlreadySupported`	A market already exists for this hub asset.
`5`	`PoolAlreadyDeployed`	The singleton pool, controller, or price aggregator is already recorded.
`6`	`InvalidAsset`	The token reports no decimals or symbol, or declared decimals do not match.
`7`	`AssetsAreTheSame`	Source and destination of a swap or leverage leg are the same address.
`8`	`WrongToken`	`params.asset_id` does not equal the asset the market is created for.
`10`	`InvalidWasmHash`	The supplied Wasm hash is all zero bytes.
`13`	`AccountNotInMarket`	The caller does not hold the account’s position NFT, or the account has no metadata record.
`14`	`AmountMustBePositive`	An amount argument is zero or negative, or a measured transfer delta is not positive.
`16`	`InvalidPayments`	A payments or route list is empty where one is required, non-empty where forbidden, or longer than the view limit.
`18`	`NotSmartContract`	The supplied address is not a deployed contract.
`24`	`AccountNotFound`	The account id has no stored state, or its NFT owner cannot be resolved.
`25`	`AccountModeMismatch`	The account’s position mode differs from the mode the call requires.
`27`	`AggregatorNotSet`	The swap or price aggregator address has not been configured.
`29`	`PositionLimitsNotSet`	No position limits are stored.
`30`	`PoolNotInitialized`	The pool or controller address is unset, or the market’s params/state record does not exist.
`32`	`OwnerNotSet`	Contract ownership has never been assigned.
`33`	`MathOverflow`	Checked arithmetic overflowed, or a narrowing conversion failed.
`34`	`InternalError`	An internal invariant failed. Report it.
`36`	`InvalidPositionLimits`	A supply or borrow position limit is zero or above `POSITION_LIMIT_MAX` (5).
`38`	`SpotOnlyNotProductionSafe`	Every configured oracle source reads an unsmoothed spot market.
`39`	`InvalidTimelockDelay`	The delay is zero, below the minimum, or above the maximum.
`40`	`TimelockOperationExpired`	The scheduled operation’s grace period has elapsed.
`41`	`InvalidRole`	Unknown governance role, an executor/canceller combination, or the role is not held on revoke.
`42`	`BlendPoolNotApproved`	The target Blend pool is not on the approved list.
`43`	`HubNotActive`	The hub id does not exist or has been deactivated.
`44`	`NotAuthorized`	The caller is neither the account owner nor an active delegate.
`45`	`RegistryCapReached`	The account already has `MAX_DELEGATES` (16) delegates.
`46`	`OperationNotCancellable`	The operation is a recovery operation, or the canceller is its own target.
`47`	`BorrowRoundsToZeroShares`	A positive borrow mints zero scaled debt shares. Borrow more.
`48`	`CannotRemoveLastProposer`	Revoking would leave the proposer role with no holders.
`49`	`WithdrawRoundsToZeroShares`	A positive withdrawal burns zero scaled supply shares.
`50`	`NetSettleRoundsToZeroShares`	A positive net settlement burns zero shares.
`51`	`SupplyRoundsToZeroShares`	A positive supply mints zero scaled shares.
`52`	`RepayRoundsToZeroShares`	A positive net repayment burns zero scaled debt shares.
`53`	`PositionNftNotSet`	The position-NFT contract address is unset.
`54`	`PositionNftAlreadyDeployed`	A position-NFT address is already recorded.
`55`	`DivisionByZero`	A fixed-point multiply-divide received a zero denominator. Distinct from `MathOverflow`.

Codes 1 (AssetNotSupported), 3 (InvalidTicker), 11 (InvalidExchangeSrc), and 12 (PairNotActive) are declared but never constructed in contract code. They are reserved so existing codes never shift; a deployed contract will not surface them.

Collateral and pool errors

Code	Name	Meaning
`100`	`InsufficientCollateral`	After the operation, LTV-weighted collateral falls below total debt, or health factor drops below 1 WAD.
`101`	`HealthFactorTooHigh`	The target has no debt, or health factor is at least 1 WAD — not liquidatable.
`102`	`HealthFactorTooLow`	Refreshing thresholds would leave health factor below the accept minimum (1.05 WAD). Raised only by `update_account_threshold`.
`104`	`NotCollateral`	The spoke listing does not allow the asset as collateral.
`107`	`AssetNotBorrowable`	The spoke listing does not allow the asset to be borrowed.
`109`	`PositionLimitExceeded`	The new position would push the account past its configured position count.
`111`	`InvalidPositionMode`	The requested mode is not Multiply, Long, or Short.
`112`	`InsufficientLiquidity`	Market cash is below the requested draw, or the draw would break the liquidation buffer.
`113`	`InvalidLiqThreshold`	Risk bounds fail validation: fee at or above BPS, threshold at or below LTV or above BPS, or `threshold × (BPS + bonus) > BPS²`.
`114`	`CannotCleanBadDebt`	The account does not pass the bad-debt gate.
`115`	`WithdrawLessThanFee`	The liquidation protocol fee is larger than the gross amount withdrawn.
`116`	`InvalidBorrowParams`	A cap or floor is negative, a cap exceeds the asset’s decimal domain, or the flash-loan fee exceeds the maximum (500 bps).
`117`	`InvalidUtilRange`	Utilization breakpoints are out of order.
`118`	`OptUtilTooHigh`	Optimal utilization is at or above 100%.
`119`	`InvalidReserveFactor`	The reserve factor is at or above 100%.
`120`	`DebtPositionNotFound`	The account has no debt position for that hub asset.
`121`	`CollateralPositionNotFound`	The account has no supply position for that hub asset.
`122`	`CannotCloseWithRemainingDebt`	`close_position` requested while borrow positions remain open.
`123`	`PoolInsolvent`	Supplier claims exceed cash plus outstanding debt, or supply is zero while debt remains.
`126`	`MinBorrowCollateralNotMet`	LTV-weighted collateral is below the configured USD floor while debt remains.
`127`	`UtilizationAboveMax`	Post-operation utilization exceeds the market’s `max_utilization`.
`128`	`BaseRateNegative`	The base borrow rate is negative.
`129`	`SlopeNonMonotonic`	Rate slopes do not increase monotonically.
`130`	`MaxRateBelowBase`	The max borrow rate is not strictly above the base rate.
`131`	`MaxBorrowRateTooHigh`	The max borrow rate exceeds `MAX_BORROW_RATE_RAY` (200% APR).
`132`	`AssetDecimalsTooHigh`	The asset’s decimals exceed the WAD/RAY decimal domain.
`133`	`SelfLiquidationNotAllowed`	The `SeizeMode::Credit` receiver account is the account being liquidated.
`134`	`InvalidLiquidationCurve`	Curve bounds fail validation.
`135`	`FullCloseRequired`	A partial repayment stays below the ideal amount while the health-factor-preserving bonus cap binds. Repay the full debt instead.

Code 110 (PositionNotFound) is reserved and never constructed by a contract.

Self-liquidation of an account is allowed. liquidate is fully permissionless, including by the account owner. #133 fires only when SeizeMode::Credit(id) names the liquidated account itself, which would hand its own collateral straight back.

Spoke errors

Code	Name	Meaning
`300`	`SpokeNotFound`	The spoke id is zero, or no configuration is stored for it.
`301`	`SpokeDeprecated`	The spoke is flagged deprecated.
`307`	`AssetNotInSpoke`	The hub asset is not listed on that spoke.
`308`	`AssetAlreadyInSpoke`	The hub asset is already listed; use `edit_asset_in_spoke`.
`309`	`SpokeAssetInUse`	The listing still has non-zero supplied or borrowed usage; it cannot be removed.
`310`	`SpokeMismatch`	The account’s spoke id differs from the spoke the call targets.
`311`	`SpokeSupplyCapReached`	The supply would push tracked spoke supply above its cap.
`312`	`SpokeBorrowCapReached`	The borrow would push tracked spoke borrows above its cap.
`315`	`SpokeAssetPaused`	The listing’s `paused` flag is set; this blocks both entry and exit.
`316`	`SpokeAssetFrozen`	The listing’s `frozen` flag is set; this blocks only entry. `withdraw` and `repay` still work.
`317`	`SpokeAssetFlagRelaxation`	The immediate guardian call tried to clear `paused`, `frozen`, or `no_seize`. Clear flags through timelocked `edit_asset_in_spoke`.
`318`	`SpokeAssetSeizureHalted`	The listing’s `no_seize` flag is set, so the asset cannot be taken as liquidation collateral.

Oracle errors

Price failures reach users indirectly: price-aggregator prices and price_spread panic on an unusable price, and so does every controller entrypoint that values an account. quotes never panics — it returns a PriceStatus with valid: false instead.

Code	Name	Meaning
`201`	`InvalidAggregator`	The proposed swap or price aggregator address is not a deployed contract.
`204`	`InvalidOracleTokenType`	A Reflector feed references its asset by string; Reflector accepts only an address or symbol.
`205`	`UnsafePriceNotAllowed`	The two oracle legs disagree beyond the configured tolerance, or only one of two legs produced a reading.
`206`	`PriceFeedStale`	The feed timestamp is older than `max_stale_seconds`. A future-dated timestamp does not raise this; the observation is dropped and the read fails as `#210` or `#205`.
`208`	`BadLastTolerance`	The tolerance is outside `MIN_TOLERANCE`..`MAX_TOLERANCE` (150..2500 bps), or the lower ratio is not the exact reciprocal of the upper.
`210`	`NoLastPrice`	An Aquarius LP read failed: wrong pool type, key is not a token, decimals mismatch, or reserves/shares unreadable.
`211`	`NoAccumulator`	No revenue accumulator is configured on the controller.
`212`	`ReflectorHistoryEmpty`	Reflector returns no price history for the asset.
`216`	`OracleNotConfigured`	No oracle is registered for the price key, or the response omits a requested asset.
`217`	`InvalidPrice`	The resolved price is zero or negative, or LP fair-value math is non-representable.
`218`	`InvalidStalenessConfig`	`max_stale_seconds` is out of range or shorter than the source’s own guaranteed freshness.
`219`	`TwapInsufficientObservations`	The record count is zero or below the smoothing minimum, or the returned history is too short, too long, or spaced closer than the feed resolution.
`220`	`InvalidOracleBase`	A Reflector feed is not quoted in USD, or an LP source’s keys and tokens do not match the pool.
`221`	`InvalidOracleDecimals`	Declared decimals do not match the provider, or fall outside the allowed range.
`222`	`InvalidOracleResolution`	The Reflector resolution is below the minimum, above `max_stale_seconds`, or implies a TWAP span exceeding it.
`223`	`SanityBoundViolated`	The resolved price falls outside the oracle’s stored min/max sanity band.
`224`	`InvalidSanityBounds`	Bounds are non-positive, inverted, above the maximum reasonable price, or narrower than `MIN_SANITY_BAND_BPS` (50).
`225`	`OracleCycleDetected`	The price key is already being resolved higher up the composition chain.
`226`	`SanityBandTooWideForSingleSource`	A single-source or LP oracle’s sanity band exceeds its tighter limit.
`227`	`SanityBandMustTighten`	The immediate `set_sanity_band` call would widen the stored band. Widen through the timelocked `ConfigureAssetOracle` operation.
`228`	`TwapRecordsOutOfRange`	The requested record count is above `MAX_TWAP_RECORDS` (12).
`229`	`OracleDepthExceeded`	The composition nests deeper than `MAX_RESOLUTION_DEPTH` (3).
`230`	`FactorOutOfBounds`	A scaled source’s factor price falls outside its configured min/max factor.
`231`	`SourceCountOutOfRange`	The oracle has zero or more than two sources, or an Aquarius LP source is combined with any other source.
`232`	`IndependenceNotDeclared`	Two sources share a provider contract while the policy requires disjoint sources.
`234`	`UnsupportedAquariusPool`	The Aquarius pool is not the expected type, or has a zero reserve or zero total shares.
`235`	`InsufficientAquariusLiquidity`	The pool’s total value is below the source’s `min_pool_value_wad` floor.

Flash loan and strategy errors

Code	Name	Meaning
`400`	`FlashLoanOngoing`	A flash loan is already in progress; re-entrant protocol calls are refused.
`401`	`FlashloanNotEnabled`	The market’s `is_flashloanable` parameter is false.
`402`	`InvalidFlashloanRepay`	The receiver’s allowance to the pool is below principal plus fee, or the pool balance after the callback is not the expected amount.
`409`	`StrategyFeeExceeds`	The computed strategy fee is larger than the borrowed amount.
`412`	`InvalidFlashloanReceiver`	The receiver is not a deployed Wasm contract.
`500`	`ConvertStepsRequired`	`multiply`’s initial payment is neither the collateral nor the debt asset and no `convert_swap` was supplied.
`501`	`RouterOverspend`	The controller’s input-token balance rose during the swap, or the router spent more than `amount_in`.
`502`	`NoSwapOutput`	The swap increased the controller’s output-token balance by zero.
`503`	`CollateralRequired`	`flash_position`’s declared collateral list is empty, or every declared minimum is zero.
`504`	`CollateralMinimumNotMet`	The measured collateral push is below the caller-declared minimum.
`505`	`FlashPositionClosed`	The `flash_position` callback finished debt-free or without a supply position.

DeFindex strategy adapter errors

The reference vault adapter uses its own enum, independent of the codes above.

Code	Name
`401`	`NotInitialized`
`460`	`AmountNotPositive`
`461`	`InsufficientBalance`
`462`	`ArithmeticError`
`463`	`AccountLookupFailed`

Integration handling

Treat oracle errors as retryable only after source recovery or configuration change. See the oracle disruption runbook.
Treat cap, liquidity, and utilization errors (#112, #127, #311, #312) as amount/headroom problems.
Treat auth and spoke-listing errors as request-construction problems.
Treat the five *RoundsToZeroShares codes as “amount too small for this market’s current index” — increase the amount.
Use controller views to preflight, but treat mutation results as authoritative.

Start here

Concepts

Integration guides

Reference

Operations

Groups

Generic errors

Collateral and pool errors

Spoke errors

Oracle errors

Flash loan and strategy errors

DeFindex strategy adapter errors

Integration handling

​Groups

​Generic errors

​Collateral and pool errors

​Spoke errors

​Oracle errors

​Flash loan and strategy errors

​DeFindex strategy adapter errors

​Integration handling

Groups

Generic errors

Collateral and pool errors

Spoke errors

Oracle errors

Flash loan and strategy errors

DeFindex strategy adapter errors

Integration handling