· v5.3 · Base mainnet · ClaimBond Model

Insurance for the agents who never sleep — settled by oracles, burned by code.

Lumina is a parametric on-chain insurance protocol on Base L2. Every USDC premium routes through the AdaptiveFeeDistributor: 85% buys and burns $LUMINA on Uniswap V3. Every triggered policy mints a fixed-USD bond, redeemable in 24 months. Built for autonomous AI agents that need a sub-minute payout.

Launch app →Read full whitepaper

Burn feed · live

14:32:08

$0.24

→ 0.184 LUMINA

0xab4d…

14:31:47

$1.12

→ 0.861 LUMINA

0x9f2e…

14:31:22

$0.48

→ 0.369 LUMINA

0x71c3…

14:30:59

$2.04

→ 1.568 LUMINA

0x4d18…

02 / 10 · The gap

Existing crypto insurance was never built for autonomous agents.

Nexus Mutual, InsurAce, Sherlock — every general-purpose crypto insurance protocol uses discretionary claims. An event happens, a committee meets, a payout is issued days or weeks later. That cadence is incompatible with bots that liquidate, rebalance, and hedge inside a single block.

An autonomous agent can't fill out a claim form. It can't argue with a committee. It can't survive a 7-day vote on whether the depeg "really" happened. It needs an objective trigger, signed by an oracle, and a payout that fires inside the same transaction that confirms the loss.

2024-08-05BTC

Flash crashed −7% in 12 min — every leveraged bot got margin-called

2023-03-11USDC

Lost peg to $0.87 — yield bots couldn't unwind in time

2022-06-13stETH

Liquidity drained — Aave borrowers liquidated en masse

03 / 10 · Three steps from premium to payoff

From premium to payoff in three on-chain steps.

◇01

Buy

purchasePolicy(productId, coverage)

An agent picks one of the 6 V5.3 flash shields and pays a USDC premium. The relayer wallet pays gas; the agent only pays the premium.

◆02

Trigger

submitTrigger(policyId, oracleProof)

Anyone — agent, keeper, MEV bot — can submit a signed EIP-712 PriceProof. If the parametric condition is met, the payout fires in the same transaction.

◈03

Redeem

BondVault.redeemBond(epochId, usdAmount)

The triggered policy mints ERC-1155 ClaimBonds at $1 face value each. Hold to maturity (730 days), or sell early on the secondary marketplace at a discount.

CLAIMBOND

ERC-1155 · 730d maturity

→ ClaimBond · $1 face · 730d maturity

04 / 10 · Lifecycle

From premium to payout: six steps, two endings.

Every Lumina position walks the same six-step path. The premium is paid in USDC and burns $LUMINA on the way in. If the trigger fires, a ClaimBond is minted. From there the holder picks one of two endings — wait 730 days for $LUMINA at maturity, or sell now on the secondary marketplace for USDC.

Buy policy (USDC)

Pay a small premium in USDC. Routed through the AdaptiveFeeDistributor: 85% reaches the TWAPBurner — buy & burn $LUMINA on Uniswap V3 — and 8/2/5% fund buyback/ops/maintenance. Supply shrinks immediately.

Trigger fires

Oracle observes the covered asset. If the trigger condition is met inside the policy window, the policy is triggered and a ClaimBond becomes mintable.

ClaimBond minted (ERC-1155)

Minted to the holder, indexed by epoch. $1 face value per unit. Maturity: 730 days.

Choose: wait OR sell

Hold the bond to maturity for $LUMINA, or list it on the secondary marketplace today for USDC.

Wait 730d → $LUMINA

redeemBond() reads the oracle and mints luminaAmount = usdAmount / LUMINA_price to the holder. Captures the upside if $LUMINA appreciates.

OR sell now → USDC

List on the secondary marketplace at a discount. Buyer pays USDC. 3% marketplace fee (1.5% seller + 1.5% buyer) — routed through the AdaptiveFeeDistributor on the same 85/8/2/5 split.

Worked example

$3 USDC premium covers $800 — Flash BTC 1h. Trigger fires. An 800-unit ClaimBond is minted to the wallet (ERC-1155, $1 face, 730d maturity).

Path A · wait 730d (LUMINA = $0.50)1,600 LUMINA

Path B · sell now (~70% of face)~$560 USDC

Premium = USDC · Marketplace trade = USDC · Bond redeem at maturity = $LUMINA

05 / 10 · Six parametric flash shields

Specific triggers. Specific assets. Specific time windows.

Each V5.3 flash shield is BaseFlashShield + a FlashShieldAdapter UUPS-upgradeable proxy that validates a drop from the purchase price within a fixed window. The on-chain product registry uses canonical names of the form FLASHBTC1H-001 — the productId a caller passes is the keccak256 of that string.

₿1h

Flash BTC 1h

BTC −2.5% / 1h

FLASHBTC1H-001

bytes32 "BTC"

₿24h

Flash BTC 24h

BTC −6% / 24h

FLASHBTC24-001

bytes32 "BTC"

₿48h

Flash BTC 48h

BTC −10% / 48h

FLASHBTC48-001

bytes32 "BTC"

Ξ1h

Flash ETH 1h

ETH −4% / 1h

FLASHETH1H-001

bytes32 "ETH"

Ξ24h

Flash ETH 24h

ETH −8.5% / 24h

FLASHETH24-001

bytes32 "ETH"

Ξ48h

Flash ETH 48h

ETH −14% / 48h

FLASHETH48-001

bytes32 "ETH"

06 / 10 · Tokenomics

100 million $LUMINA. Fixed forever. Always shrinking.

LuminaTokenV2 is an ERC-20 + ERC-20Burnable token. There is no mint function. The constructor enforces totalSupply() == MAX_SUPPLY immediately after the genesis distribution. From that moment on, supply only decreases.

100,000,000

LUMINA · Fixed

Bond Reserve70 M70%
Liquidity14 M14%
Founder8 M8%
LBP5 M5%
Treasury3 M3%

Deflationary flow

Premium paid

USDC

AdaptiveFeeDistributor

85/8/2/5 split

TWAPBurner → Uniswap V3

USDC → LUMINA

0xdead

permanent burn

07 / 10 · Adaptive burn

Sixteen burn regimes. The matrix decides where every premium goes.

The AdaptiveFeeDistributor sits in front of the burner. Before any LUMINA is bought, the router consults a 4×4 matrix indexed on solvency × momentum, with 16 pre-tuned cells. HEALTHY × STABLE is the V5.3 default and applies an 85/8/2/5 split (Burn / Buyback / Operations / Maintenance); CRISIS × CRASH halts burn entirely and stages 96 % of incoming USDC for a defensive buyback.

SOLVENCYMOMENTUM →

RALLY

STABLE

DECLINE

CRASH

ULTRA

HEALTHY

STRESSED

CRISIS

Click any cell to inspect the 4-channel split.

HEALTHY×STABLE

burn

8500

85%

buyback

800

ops

200

maint

500

Sepolia status (V5.3)

Momentum is held neutral (10000 bps) on Sepolia until a deep LUMINA/USDC pool deploys. The 16-cell matrix runs on its solvency axis only — at runtime it collapses to the STABLE column with the 85/8/2/5 default split. Full 16-quadrant behavior activates once the pool, the momentum oracle, and the BuybackSpender ship together pre-mainnet.

08 / 10 · Built for autonomous integration

One HTTP call. The relayer pays the gas. The agent only holds USDC.

The same contracts that power the human-facing app expose a thin REST API. POST /api/v1/policies signs purchasePolicyFor on-chain on the agent's behalf. No gas wallet, no popup, no KYC. Same bond mechanics. Same oracle resolution.

agent.ts

01import { LuminaClient } from '@lumina-org/sdk'
02 
03const lumina = new LuminaClient({ apiKey: process.env.LUMINA_API_KEY })
04 
05const policy = await lumina.policies.purchase({
06  productName:    'FLASHBTC1H-001',
07  buyer:          '0xYourAgentWallet',
08  coverageAmount: '100000000',  // $100, 6-dec USDC (on-chain min)
09})
10 
11console.log(policy.policyId, policy.txHash)
12// → '0x9f2e…', '0xab4d…'

lumina-cli · receipt

policyId:0x9f2e6c...

txHash:0xab4d1d...

productName:FLASHBTC1H-001

asset:BTC (auto-resolved)

premium:$0.24 USDC

relayerPaid:true← agent paid 0 gas

gasHeld:false

bondEpochId:202805 (May 2028)

✕gas wallet

✕MetaMask popup

✕KYC form

09 / 10 · Live state

Everything in this whitepaper is on-chain right now.

These are the contracts the live API and the live frontend talk to today. Always verify against /health before integrating — a redeploy will quietly invalidate yesterday's .env.

BLOCK HEIGHT

41,159,517

RELAYER BALANCE

0.0199 ETH

TOTAL LUMINA BURNED

1,284,503

CONTRACTS VERIFIED

6 / 6

Contract

Address

CoverRouter

Awaiting redeploy post-Sprint Z.2Awaiting r…rint Z.2