Lulo primary sources — 2026-04-30

Project status in this pass

  • No canonical standalone whitepaper or litepaper surfaced.
  • The clearest current source of truth is the official docs suite, the API/integration pages, and the main site.

Primary-source snapshots

1) Main site

  • URL: https://www.lulo.fi/
  • Key excerpt:
    • Markets Lulo Protected as “Stablecoin yield with built-in protection.”
    • Says deposits are spread across top protocols and covered automatically, with capital “fully available” after a single-protocol loss event.
    • Names five audit firms, 50+ live integrations, and $100M+ TVL in the current marketing surface.

2) Docs landing page

  • URL: https://www.lulo.fi/docs
  • Key excerpt:
    • Defines Lulo as “a stablecoin yield product” with diversified exposure to leading lending protocols and “built-in protection.”
    • Frames the allocation method as systematic and informed by TVL and rate.
    • Splits the product into Protected and Boost.

3) How it works

  • URL: https://www.lulo.fi/docs/how-it-works
  • Key excerpt:
    • Describes an “index-fund approach to stablecoin yield.”
    • Says deposits are routed through audited smart contracts to underlying protocols, rebalanced systematically as market conditions change.
    • Says Protected deposits are withdrawable anytime, while Boost deposits have a lockup because they underwrite the coverage system.

4) Protected

  • URL: https://www.lulo.fi/docs/protected
  • Key excerpt:
    • Says Protected sits in the senior tier of a two-sided system, with Boost serving as the coverage layer.
    • States that if a covered protocol experiences a loss event, Boost absorbs the impact before Protected capital.
    • Says compensation is executed automatically by smart contracts with no claims process or offchain approval.
    • Defines covered events as protocol-level exploits, oracle manipulation, and bad debt, while excluding network outages, stablecoin depegs, and vulnerabilities in Lulo’s own contracts.

5) Boost

  • URL: https://www.lulo.fi/docs/boost
  • Key excerpt:
    • Defines Boost as the first-loss side of the structure.
    • Says Boost yield comes from both lending yield and protection premiums paid from Protected deposits.
    • Explains that the premium scales inversely with the Boost-to-Protected ratio.

6) Integrated protocols

  • URL: https://www.lulo.fi/docs/integrated-protocols
  • Key excerpt:
    • Says eligible protocols must have open-source contracts, external audits, experienced teams, and substantial TVL with no fund-loss history.
    • Names current integrated protocols across Ethereum and Solana: Morpho, Pendle, Kamino, Maple, Jupiter, Manifest, and Neutrl.

7) Risk framework

  • URL: https://www.lulo.fi/docs/risk-framework
  • Key excerpt:
    • Explains protocol risk, Lulo smart-contract risk, and systemic risk separately.
    • Says Lulo contracts are limited to depositing into and withdrawing from a whitelisted set of protocols and cannot send funds to arbitrary addresses.
    • Says contracts were audited five times, including formal verification by Certora.

8) Audits

  • URL: https://www.lulo.fi/docs/audits
  • Key excerpt:
    • Says Lulo’s smart contracts have been independently audited five times.
    • Says funds spend minimal time in Lulo’s own contracts because deposits are routed directly to underlying protocols.

9) API reference

  • URL: https://www.lulo.fi/docs/api-reference
  • Key excerpt:
    • Documents API operations for generating deposit and withdrawal transactions, fetching rates, and fetching pool metadata.
    • Shows example calls against https://api.lulo.fi/ using API keys.

10) Integration guide

  • URL: https://www.lulo.fi/docs/integration-guide
  • Key excerpt:
    • Says wallets and apps can add Protected yield “in days” with a single API call.
    • Names 50+ live integrations, including Solflare, Fuse, and Decaf.
    • Says user funds are deployed directly to underlying protocols and remain verifiable on-chain.

Working conclusion

Lulo is best cataloged as API-first stablecoin-yield and risk-management infrastructure: a rules-based cross-protocol allocator with an embedded senior/junior protection structure, rather than a generic DeFi vault frontend.