44 events, every one with a reason.

AvailableCredited(address indexed account, uint256 amount, uint8 kind)

Emitted by

creditAvailable

When

A realized gain is paid to free collateral (kind RealizedPnl). The PnL pool falls by the same amount, which is how the vault equation stays balanced.

Indexer tables

• collateral_events (available_credited)
• account_balances

BadDebtRecorded(address indexed account, uint256 amount, uint256 total)

Emitted by

coverFromInsurance

When

The part of a shortfall the insurance fund could not pay. total is cumulative bad debt. The risk engine halts the market in the same transaction (MarketStatusChanged, reason BadDebt).

Indexer tables

• collateral_events (bad_debt_recorded)
• insurance_fund_events (bad_debt)

Deposited(address indexed account, uint256 tokenAmount, uint256 amount)

Emitted by

deposit(tokenAmount)

When

A trader's tokens enter the vault. tokenAmount is in token units; amount is the WAD ledger amount credited to available.

Indexer tables

• collateral_events (deposited)
• account_balances

FeeCharged(address indexed account, uint256 amount, uint256 toInsurance, uint256 toProtocol)

Emitted by

chargeFee, called by the risk engine on every fill

When

A trading fee leaves the trader's available collateral and is split between the insurance fund and protocol fees by the market's insuranceShareBps.

Indexer tables

• collateral_events (fee_charged)
• account_balances
• insurance_fund_events (fee_share, when toInsurance > 0)

InsuranceCovered(address indexed account, uint256 requested, uint256 covered, uint256 shortfall)

Emitted by

coverFromInsurance, called by the risk engine when a loss exceeds a position's margin

When

requested is the shortfall, covered what the fund paid into the PnL pool, shortfall what it could not.

Indexer tables

• collateral_events (insurance_covered)
• insurance_fund_events (cover)

InsuranceFunded(address indexed from, uint256 amount, uint256 balance)

Emitted by

fundInsurance (anyone), lockedToInsurance (risk engine)

When

The insurance fund grows by a voluntary contribution or by its share of a liquidation penalty. balance is the fund after the change.

Indexer tables

• collateral_events (insurance_funded)
• insurance_fund_events (funded)

LockedCredited(address indexed account, uint256 amount, uint8 kind)

Emitted by

creditLocked

When

Funding received is added to a position's margin (kind Funding); on liquidation, a gain on the liquidated quantity is added to margin before the penalty (kind RealizedPnl).

Indexer tables

• collateral_events (locked_credited)
• account_balances

LockedDebited(address indexed account, uint256 amount, uint8 kind)

Emitted by

debitLocked, and lockedToInsurance

When

A loss or a funding payment is taken from margin (kinds RealizedPnl, Funding). lockedToInsurance also emits it with kind LiquidationPenalty for the insurance fund's share of a penalty, followed by InsuranceFunded.

Indexer tables

• collateral_events (locked_debited)
• account_balances

LockedTransferred(address indexed from, address indexed to, uint256 amount, uint8 kind)

Emitted by

lockedToAvailable

When

The liquidator's incentive moves from the liquidated position's margin to the liquidator's free collateral (kind LiquidatorIncentive).

Indexer tables

• collateral_events (locked_transferred)
• account_balances (both accounts)

MarginLocked(address indexed account, uint256 amount, bool fromReserved)

Emitted by

lockFromAvailable (a fill that opens or increases a position; addMargin) or lockFromReserved

When

Isolated margin is locked for a position. The current risk engine releases the reservation first and locks from available, so fromReserved is false in practice.

Indexer tables

• collateral_events (margin_locked)
• account_balances

MarginUnlocked(address indexed account, uint256 amount)

Emitted by

unlockToAvailable

When

Margin returns to available: proportionally on a partial close, entirely on a close, whatever remains after loss and penalty on a full liquidation, or on removeMargin.

Indexer tables

• collateral_events (margin_unlocked)
• account_balances

ProtocolFeesSwept(address indexed to, uint256 amount)

Emitted by

sweepProtocolFees (TREASURY_ROLE)

When

Accrued protocol fees are transferred out. Sub-token dust stays in the fee balance so the ledger never exceeds the token balance.

Indexer tables

• collateral_events (protocol_fees_swept)

Released(address indexed account, uint256 amount)

Emitted by

release, called by the risk engine on cancel, expiry, and for the share of a filled quantity

When

A reservation, or part of one, returns to available.

Indexer tables

• collateral_events (released)
• account_balances

Reserved(address indexed account, uint256 amount)

Emitted by

reserve, called by the risk engine from reserveForOrder during placeOrder

When

Collateral is set aside for an order: initial margin plus taker fee for its full quantity at its limit price. Reduce-only orders reserve nothing.

Indexer tables

• collateral_events (reserved)
• account_balances

WithdrawalsPausedUntil(uint64 until)

Emitted by

pauseWithdrawals (PAUSER_ROLE)

When

Withdrawals are paused until the given time, at most MAX_WITHDRAWAL_PAUSE (3 days) ahead.

Indexer tables

• protocol_state (withdrawals_paused_until)

Withdrawn(address indexed account, uint256 tokenAmount, uint256 amount)

Emitted by

withdraw(tokenAmount)

When

Free collateral leaves the vault. Reverts during a withdrawal pause or when available is short.

Indexer tables

• collateral_events (withdrawn)
• account_balances

Paused(address account)

Emitted by

pause (PAUSER_ROLE)

When

Vault: deposits paused. Order book: new orders and matching paused; cancellation keeps working.

Indexer tables

• protocol_events (archive only)

RoleAdminChanged(bytes32 indexed role, bytes32 indexed previousAdminRole, bytes32 indexed newAdminRole)

Emitted by

_setRoleAdmin (not called by any Elysta function)

When

Would record a change of which role administers another; Elysta never changes it from DEFAULT_ADMIN_ROLE.

Indexer tables

• protocol_events (archive only)

RoleGranted(bytes32 indexed role, address indexed account, address indexed sender)

Emitted by

grantRole (the role's admin), and the constructor and setOrderEngine for the initial grants

When

An account receives a role.

Indexer tables

• protocol_events (archive only)

RoleRevoked(bytes32 indexed role, address indexed account, address indexed sender)

Emitted by

revokeRole (the role's admin) or renounceRole (the holder)

When

An account loses a role. The deploy script's hand-over renounces every deployer role this way.

Indexer tables

• protocol_events (archive only)

Unpaused(address account)

Emitted by

unpause (PAUSER_ROLE)

When

The pause above is lifted.

Indexer tables

• protocol_events (archive only)

DeviationConfirmed(uint32 indexed marketId, uint256 price)

Emitted by

refreshIndex, clearOracleHalt(acceptPending)

When

A pending price was adopted as the new index, either because it persisted or because an oracle manager accepted it after review.

Indexer tables

• protocol_events (archive only)

DeviationPending(uint32 indexed marketId, uint256 pendingPrice, uint256 lastValidPrice)

Emitted by

refreshIndex

When

A deviating price is being held as pending; if later observations stay consistent with it for deviationConfirmSeconds it will be adopted.

Indexer tables

• protocol_events (archive only)

ExecutionParamsUpdated(uint32 indexed marketId, (uint128 tickSize, uint128 lotSize, uint128 minOrderQty, uint128 maxOrderQty, uint32 priceBandBps, uint32 maxImpactBps, uint32 markBandBps) params)

Emitted by

addMarket, setExecutionParams

When

Tick, lot, order size limits, price band, impact cap and mark band are set.

Indexer tables

• markets

FeeParamsUpdated(uint32 indexed marketId, (uint64 makerFee, uint64 takerFee, uint32 insuranceShareBps) params)

Emitted by

addMarket, setFeeParams

When

Maker fee, taker fee and the insurance share are set.

Indexer tables

• markets

HolidaySet(uint32 indexed marketId, uint32 indexed day, bool closed)

Emitted by

setHoliday

When

A UTC day (unix time / 86400) is marked closed or reopened for a scheduled market.

Indexer tables

• market_holidays

IndexPriceUpdated(uint32 indexed marketId, uint256 price, uint64 publishedAt, address adapter, bool fromSecondary)

Emitted by

refreshIndex (permissionless; the keeper calls it through postAndRefresh), clearOracleHalt(acceptPending)

When

An adapter observation passed validation and became the index. adapter says which adapter; fromSecondary whether the fallback was used.

Indexer tables

• oracle_observations
• market_index_state

MarketAdded(uint32 indexed marketId, string symbol, string underlying, uint8 assetClass)

Emitted by

addMarket (MARKET_MANAGER_ROLE)

When

A market is listed in status Inactive. The five parameter events follow in the same transaction; the indexer reads getMarket for the full configuration.

Indexer tables

• markets

MarketStatusChanged(uint32 indexed marketId, uint8 previous, uint8 current, uint8 reason)

Emitted by

setMarketStatus (market manager, pauser or risk engine), refreshIndex (oracle halt and recovery), clearOracleHalt

When

The status moves, with the reason: Admin, OracleStale, OracleDeviation, OracleRecovered, BadDebt or Listing. Not emitted when the status does not change.

Indexer tables

• market_status_events
• markets (status)

OracleParamsUpdated(uint32 indexed marketId, (address primaryAdapter, bytes32 primaryFeedId, address secondaryAdapter, bytes32 secondaryFeedId, uint32 heartbeatSeconds, uint32 maxDeviationBps, uint32 reopenDeviationBps, uint32 reopenGapSeconds, uint32 deviationConfirmSeconds) params)

Emitted by

addMarket, setOracleParams (ORACLE_MANAGER_ROLE)

When

Adapters, feed ids, heartbeat, deviation and reopening thresholds are set. The indexer re-reads the adapter's feed source string.

Indexer tables

• markets (incl. feed_source)

PriceRejected(uint32 indexed marketId, uint256 price, uint64 publishedAt, uint8 reason)

Emitted by

refreshIndex

When

An observation was refused: NoPrice (adapter returned zero or reverted), Stale (older than heartbeatSeconds), or Deviation (moved more than allowed from the last valid price).

Indexer tables

• oracle_rejections

RiskParamsUpdated(uint32 indexed marketId, (uint64 initialMarginFraction, uint64 maintenanceMarginFraction, uint128 maxOpenInterest, uint128 maxPositionQty, uint32 fundingIntervalSeconds, uint64 maxFundingRatePerInterval, uint32 liquidationFeeBps, uint32 liquidatorShareBps) params)

Emitted by

addMarket, setRiskParams

When

Margin fractions, position and open-interest caps, funding interval and cap, liquidation fee and liquidator share are set.

Indexer tables

• markets

SessionUpdated(uint32 indexed marketId, uint8 policy, (uint16[7] openMinute, uint16[7] closeMinute) session)

Emitted by

addMarket, setSession

When

The session policy (Continuous or Scheduled) and the weekly UTC schedule are set.

Indexer tables

• markets (session_policy, session)

RoleAdminChanged(bytes32 indexed role, bytes32 indexed previousAdminRole, bytes32 indexed newAdminRole)

Emitted by

_setRoleAdmin (not called by any Elysta function)

When

Would record a change of which role administers another; Elysta never changes it from DEFAULT_ADMIN_ROLE.

Indexer tables

• protocol_events (archive only)

RoleGranted(bytes32 indexed role, address indexed account, address indexed sender)

Emitted by

grantRole (the role's admin), and the constructor and setOrderEngine for the initial grants

When

An account receives a role.

Indexer tables

• protocol_events (archive only)

RoleRevoked(bytes32 indexed role, address indexed account, address indexed sender)

Emitted by

revokeRole (the role's admin) or renounceRole (the holder)

When

An account loses a role. The deploy script's hand-over renounces every deployer role this way.

Indexer tables

• protocol_events (archive only)

Fill(uint32 indexed marketId, uint64 indexed makerOrderId, uint64 indexed takerOrderId, address maker, address taker, uint8 takerSide, uint128 price, uint128 qty, uint256 makerFee, uint256 takerFee, uint64 seq)

Emitted by

placeOrder and replaceOrder, once per matched maker order

When

A fill settled by the risk engine in the same transaction. price is the maker's price; fees are what each side paid. seq shares the counter with OrderPlaced, so fills and placements are totally ordered.

Indexer tables

• fills
• orders (filled, remaining of both orders)
• candles (every interval)

MatchingLimitsUpdated((uint16 maxFillsPerTx, uint16 maxLevelsPerTx, uint16 maxOpenOrdersPerAccount) limits)

Emitted by

constructor, setMatchingLimits (DEFAULT_ADMIN_ROLE)

When

The per-transaction fill and level budgets and the open-order cap are set.

Indexer tables

• protocol_state (matching_limits)

OrderCancelled(uint64 indexed orderId, address indexed trader, uint128 remaining, uint8 reason)

Emitted by

cancelOrder, cancelOrders, replaceOrder (the old order), cancelExpired, and matching itself

When

reason says why: User, Expired, RiskRejected (the maker's constraints refused a fill), SelfTrade (a resting order of the taker's own), Remainder (an IOC or market remainder, or a GTC remainder that still crossed when the budget ran out), Admin.

Indexer tables

• orders (status, cancel_reason, remaining)

OrderFilled(uint64 indexed orderId)

Emitted by

matching, when an order's remaining quantity reaches zero

When

The order is complete; any leftover reservation was released.

Indexer tables

• orders (status Filled)

OrderPlaced(uint64 indexed orderId, address indexed trader, uint32 indexed marketId, uint8 side, uint8 kind, uint8 tif, uint128 price, uint128 qty, bool reduceOnly, uint64 expiresAt, uint64 seq)

Emitted by

placeOrder; replaceOrder for the replacement order

When

An order passed validation and reservation and is about to match. For market orders price is the protective limit the engine computed. seq is the order's position in the market's single sequence.

Indexer tables

• orders

OrderRested(uint64 indexed orderId, uint128 remaining, uint128 reserved)

Emitted by

placeOrder

When

A GTC or post-only limit remainder entered the book, with its remaining quantity and reservation. Orders that fill at once never rest.

Indexer tables

• orders (rested, remaining, reserved)

Paused(address account)

Emitted by

pause (PAUSER_ROLE)

When

Vault: deposits paused. Order book: new orders and matching paused; cancellation keeps working.

Indexer tables

• protocol_events (archive only)

RoleAdminChanged(bytes32 indexed role, bytes32 indexed previousAdminRole, bytes32 indexed newAdminRole)

Emitted by

_setRoleAdmin (not called by any Elysta function)

When

Would record a change of which role administers another; Elysta never changes it from DEFAULT_ADMIN_ROLE.

Indexer tables

• protocol_events (archive only)

RoleGranted(bytes32 indexed role, address indexed account, address indexed sender)

Emitted by

grantRole (the role's admin), and the constructor and setOrderEngine for the initial grants

When

An account receives a role.

Indexer tables

• protocol_events (archive only)

RoleRevoked(bytes32 indexed role, address indexed account, address indexed sender)

Emitted by

revokeRole (the role's admin) or renounceRole (the holder)

When

An account loses a role. The deploy script's hand-over renounces every deployer role this way.

Indexer tables

• protocol_events (archive only)

Unpaused(address account)

Emitted by

unpause (PAUSER_ROLE)

When

The pause above is lifted.

Indexer tables

• protocol_events (archive only)

FundingApplied(address indexed account, uint32 indexed marketId, int256 payment, int256 fundingIndex)

Emitted by

any function that touches a position: applyFill, liquidate, removeMargin

When

The position settled funding owed or received since its last settlement. Positive payment: the account paid. fundingIndex is the market's cumulative index it is now settled to.

Indexer tables

• funding_payments
• positions (funding_paid)

FundingSettled(uint32 indexed marketId, int256 rate, int256 cumulativeIndex, uint256 markPrice, uint256 indexPrice, int256 premiumTwap, uint64 timestamp)

Emitted by

settleFunding (permissionless; the keeper calls it at each interval boundary)

When

The interval's time-weighted premium became a capped rate and rate × mark was added to the cumulative funding index.

Indexer tables

• funding_settlements

Liquidated(address indexed account, address indexed liquidator, uint32 indexed marketId, uint128 qty, uint128 markPrice, uint256 penalty, uint256 liquidatorIncentive, uint256 insuranceContribution, uint256 badDebt, bool full)

Emitted by

liquidate (permissionless)

When

qty was taken over at markPrice. penalty is the fee charged, split into liquidatorIncentive and insuranceContribution; badDebt is any shortfall the insurance fund could not cover; full says whether the position was closed entirely.

Indexer tables

• liquidations

MarginAdjusted(address indexed account, uint32 indexed marketId, int256 delta, uint128 margin)

Emitted by

addMargin, removeMargin (the position's owner)

When

Margin was added from, or returned to, free collateral. delta is signed; margin is the position's margin after.

Indexer tables

• margin_adjustments
• positions (margin)

OrderEngineSet(address indexed orderEngine)

Emitted by

setOrderEngine (DEFAULT_ADMIN_ROLE), once

When

The order book engine was bound and granted ORDER_ENGINE_ROLE. The binding cannot be changed.

Indexer tables

• protocol_state (order_engine)

PositionChanged(address indexed account, uint32 indexed marketId, int128 qty, uint128 avgEntryPrice, uint128 margin, int256 realizedPnl, uint256 fee, uint128 fillPrice, uint128 fillQty, uint8 reason)

Emitted by

applyFill (both sides), liquidate (the liquidated account and the liquidator)

When

A position's quantity, entry price or margin changed. reason: 0 fill, 1 this account was liquidated, 2 liquidator takeover. (3, margin adjustment, is reserved; addMargin and removeMargin emit MarginAdjusted.) realizedPnl and fee are what this change settled; fillPrice and fillQty what executed.

Indexer tables

• position_events
• positions

PremiumAccrued(uint32 indexed marketId, int256 premium, uint64 elapsed)

Emitted by

every state change and accruePremium (permissionless)

When

The premium (mark − index) / index was accrued for the elapsed seconds. Not emitted while the index is invalid: a halted market accrues no premium.

Indexer tables

• protocol_events (archive only)

RoleAdminChanged(bytes32 indexed role, bytes32 indexed previousAdminRole, bytes32 indexed newAdminRole)

Emitted by

_setRoleAdmin (not called by any Elysta function)

When

Would record a change of which role administers another; Elysta never changes it from DEFAULT_ADMIN_ROLE.

Indexer tables

• protocol_events (archive only)

RoleGranted(bytes32 indexed role, address indexed account, address indexed sender)

Emitted by

grantRole (the role's admin), and the constructor and setOrderEngine for the initial grants

When

An account receives a role.

Indexer tables

• protocol_events (archive only)

RoleRevoked(bytes32 indexed role, address indexed account, address indexed sender)

Emitted by

revokeRole (the role's admin) or renounceRole (the holder)

When

An account loses a role. The deploy script's hand-over renounces every deployer role this way.

Indexer tables

• protocol_events (archive only)

FeedConfigured(bytes32 indexed feedId, string source)

Emitted by

configureFeed (DEFAULT_ADMIN_ROLE)

When

A feed id (keccak256 of its source string, e.g. hypercore:BTC) is declared with that string.

Indexer tables

• protocol_events (archive only)

PricePosted(bytes32 indexed feedId, uint128 price, uint64 publishedAt, address updater)

Emitted by

post, postAndRefresh (UPDATER_ROLE, the keeper)

When

An observation was stored for a feed. It becomes an index price only if the registry's refreshIndex accepts it.

Indexer tables

• protocol_events (archive only)

RegistrySet(address registry)

Emitted by

setRegistry (DEFAULT_ADMIN_ROLE)

When

The registry that postAndRefresh calls was set.

Indexer tables

• protocol_events (archive only)

RoleAdminChanged(bytes32 indexed role, bytes32 indexed previousAdminRole, bytes32 indexed newAdminRole)

Emitted by

_setRoleAdmin (not called by any Elysta function)

When

Would record a change of which role administers another; Elysta never changes it from DEFAULT_ADMIN_ROLE.

Indexer tables

• protocol_events (archive only)

RoleGranted(bytes32 indexed role, address indexed account, address indexed sender)

Emitted by

grantRole (the role's admin), and the constructor and setOrderEngine for the initial grants

When

An account receives a role.

Indexer tables

• protocol_events (archive only)

RoleRevoked(bytes32 indexed role, address indexed account, address indexed sender)

Emitted by

revokeRole (the role's admin) or renounceRole (the holder)

When

An account loses a role. The deploy script's hand-over renounces every deployer role this way.

Indexer tables

• protocol_events (archive only)