Roles and permissions
User roles
The app has two views, Hedger and Underwriter, which you switch at the top. They are views, not separate accounts: the same wallet can buy protection and provide liquidity.
| Role | Can |
|---|---|
| Business (hedger) | Request quotes, buy protection, receive its own payouts |
| Underwriter | Add liquidity, set backing preferences, request and complete its own withdrawals |
| Pool creator | Everything an underwriter can, plus: change the pool's tenors, offers, structures and limits, and withdraw creator earnings |
Nobody can move another user's funds or change another user's contract.
Business account roles
A business account is shared by a team. Each member is an admin, operator or viewer: admins can do everything, operators can buy cover and manage liquidity but not send money out, and viewers can only see. See Business accounts.
Protocol roles
| Role | Held by | Can | Cannot |
|---|---|---|---|
| Protocol owner | BlockFinaX | Upgrade contract code; pause new pools, deposits and purchases; set fees within the caps; enable pairs; set the pricing key; withdraw protocol fees; transfer ownership | Settle a contract at a rate of its choosing through any contract function |
| Oracle operators | Registered by the oracle owner | Submit rates after expiry | Settle alone: at least 2 must agree |
| Pricing service | BlockFinaX | Sign quotes | Change a contract once bought |
| Administrators | BlockFinaX staff, with a separate sign-in | Review verification submissions and run operations | Control user wallets or contract funds |
While the protocol is paused, withdrawals, settlement and payouts continue.
Upgrading contract code is the most powerful of these roles. See Privileged controls.