Storage

Storage keys below are the ControllerKey and PoolKey variants used on-chain.

Controller instance keys

Singleton protocol wiring and counters. Instance storage shares the contract’s own TTL, so it is renewed whenever the contract is touched.

Key	Holds
`Pool`	Deployed central pool address.
`SwapAggregator`	Configured swap aggregator.
`PriceAggregator`	Configured price aggregator.
`PositionNft`	Deployed position-NFT contract.
`Accumulator`	Recipient of claimed protocol revenue.
`PositionLimits`	`{ max_supply_positions, max_borrow_positions }`.
`AppVersion`	Migration version.
`MinBorrowCollateralUsd`	WAD floor for opening a borrow.
`LastSpokeId`	Spoke id counter.
`LastHubId`	Hub id counter.

There is no PoolTemplate key. Pool deployment and upgrade take the Wasm hash as an argument (DeployPool(hash), UpgradePool(hash)); there is no separate template-registration step.

Controller persistent keys

Split into two TTL tiers. Shared keys are protocol-, hub-, and spoke-wide; user keys are per-account.

Key	Tier	Holds
`Hub(u32)`	shared	`HubConfig { is_active }`.
`Spoke(u32)`	shared	`SpokeConfig` — deprecation flag and liquidation curve.
`SpokeAsset(u32, HubAssetKey)`	shared	`SpokeAssetConfig` — risk parameters, halt flags, caps.
`SpokeUsage(u32, HubAssetKey)`	shared	RAY-scaled supply and borrow usage against the caps.
`PositionManager(Address)`	shared	Whether a delegate-eligible manager is active.
`BlendPoolAllowed(Address)`	shared	Blend migration allowlist entry.
`AccountMeta(u64)`	user	`{ spoke_id, mode }`. Not the owner — see below.
`Delegates(u64)`	user	`DelegateGrant { granted_by, delegates }`.
`SupplyPositions(u64)`	user	`Map<HubAssetKey, AccountPositionRaw>`.
`BorrowPositions(u64)`	user	`Map<HubAssetKey, DebtPositionRaw>`.

Account ownership is not controller storage. The account_id is the position NFT’s token_id; the controller calls owner_of(account_id) on the NFT contract for every authority check. Transferring the token transfers the position.

Oracle configuration is not controller storage either. It lives on the price aggregator, keyed by PriceKey::Token(address) or PriceKey::Ref(symbol).

Pool persistent keys

Key	Holds
`Params(HubAssetKey)`	`MarketParamsRaw` — rate curve, reserve factor, flash-loan settings, decimals.
`State(HubAssetKey)`	`PoolStateRaw` — indexes, scaled supply and debt totals, cash, revenue, last timestamp.

TTL

Contracts renew active keys in-band on every read and write. The tiers:

Tier	Renews when live-until falls below	Extends to
Instance	5 days	180 days
Shared persistent	5 days	180 days
User persistent	30 days	120 days

A dormant account is the one case in-band renewal cannot cover, because nothing touches it. renew_account(caller, account_id) extends both the account’s storage keys and the NFT Owner entry, and stays callable while the protocol is paused. The off-chain keeper renews and restores the configured surface:

controller, governance, pool, and price-aggregator instances and Wasm code;
Spoke(id), SpokeAsset(...), Hub(id);
pool Params/State(HubAssetKey);
price-aggregator oracle entries;
access-control keys.

Archived entries are restorable via RestoreFootprint, not lost. Keeper config keys markets by hub and asset together:

contracts:
  markets:
    - hub_id: 1
      asset: C...

Do not key pool rows by token address alone; pool rows use HubAssetKey, and the same token under two hubs is two independent markets.

Start here

Concepts

Integration guides

Reference

Operations

Controller instance keys

Controller persistent keys

Pool persistent keys

TTL

​Controller instance keys

​Controller persistent keys

​Pool persistent keys

​TTL

Controller instance keys

Controller persistent keys

Pool persistent keys

TTL