Deployments

Addresses come from contracts/deployments/<chainId>.json, written by Deploy.s.sol and copied to web/src/config/deployment.json by script/sync-deployment.sh <chainId>.

{ "schemaVersion": 3, "chainId": 31337,
  "aqua": "0x…", "weth": "0x…", "usdc": "0x…", "feed": "0x…",
  "router": "0x…", "routerSourceCommit": "…", "routerBytecodeHash": "0x…",
  "seriesFactory": "0x…", "marketEngine": "0x…", "accumulator": "0x…",
  "seriesDeployer": "0x…", "programs": "0x…", "lens": "0x…", "oracle": "0x…",
  "portfolioMarket": "0x…", "portfolioAccumulator": "0x…",
  "deploymentBlock": 51021223, "writer": "0x…", "buyer": "0x…" }

The manifest is versioned. Schema 3 adds portfolioMarket and portfolioAccumulator for the v3 HIGH/CALM risk groups. The backend rejects any schemaVersion it does not understand at startup rather than mis-decoding an older manifest, and it also refuses zero addresses. routerSourceCommit and routerBytecodeHash pin exactly which official AquaSwapVMRouter source this deployment runs — see Running on the official router.

On the public Base Sepolia deployment routerSourceCommit reads unknown: the vendored contracts/lib/swap-vm carries no .git directory, so the upstream commit cannot be recovered. routerBytecodeHash is still pinned and verifiable, and the deployed router's runtime bytecode reproduces the vendored official source byte-for-byte outside its immutable slots.

This build — Base Sepolia (84532), deployed

Env for this build: NEXT_PUBLIC_RPC_URL=https://sepolia.base.org, NEXT_PUBLIC_API_URL=https://tremor-api.fly.dev.

Chains

The Base Sepolia quote token is not USDC. It is Tremor's own MockUSDC at 0x13a058bE25Da579e0858d689F5982eDaCE8356B7 — freely mintable by anyone and worth nothing. Its ERC-20 symbol() returns the string "USDC", so wallets and explorers will display it as USDC. It has no relationship to Circle's USDC. Every amount shown in the app on chain 84532 is denominated in this test token.

Note the router. Tremor deploys the official AquaSwapVMRouter source, unmodified, rather than using the router deployed at the canonical SwapVM address, because that address exposes a different SwapVM revision's swap ABI. The compatibility gate documents the observation and the fallback.

Reference fork deployment (deployments/31337.json, deploymentBlock 51021223)

A fresh demo.sh run on a fresh fork reproduces the same addresses when deployed from the same account and nonce.

Writer vaults and receipts are not in the manifest, because they do not need to be: a vault address is CREATE2 from keccak256(writer, quoteToken) and lens.writerVault(writer) returns it whether or not it exists yet.

Build settings and sizes

Solidity 0.8.30, via-IR, optimizer 200 runs — size-tuned, because the controller embeds its children's creation code and therefore has to fit EIP-3860's 49,152-byte initcode limit as well as EIP-170's 24,576-byte runtime limit.

The binding constraint is the controller's initcode: 46,484 of 49,152, a margin of 2,668 bytes. That is why the read models live in separate contracts (TremorLens, TremorPrograms) rather than on the controller itself.