# Risk Controls

| Control              | Detail                                                                           |
| -------------------- | -------------------------------------------------------------------------------- |
| Oracle safety        | Staleness, round completeness, and optional deviation checks on every redemption |
| Slippage protection  | Users specify a minimum output amount; the transaction reverts if not met        |
| Rate limiting        | Configurable per-transaction cap prevents large single-transaction drains        |
| Global pause         | Redemptions can be frozen instantly by the vault owner or operator               |
| Emergency withdrawal | All yield-layer funds can be pulled in one call                                  |
| Non-upgradeable      | The subaccount contract cannot be modified after deployment                      |
| Reentrancy guard     | Industry-standard protection on all state-changing functions                     |

#### Pause Controls

An operator can pause redemptions in an emergency, but only the vault owner can unpause. This ensures fast incident response without giving operators unilateral control to resume operations after an issue.

***

### Supported Asset Requirements

| Requirement        | Detail                                                                   |
| ------------------ | ------------------------------------------------------------------------ |
| Standard ERC-20    | Must follow standard transfer semantics                                  |
| No fee-on-transfer | Tokens that apply a tax on transfer are not supported                    |
| No rebasing        | Tokens that change balance automatically (e.g., stETH) are not supported |
| Oracle Feed        | A reliable price feed must exist for the asset                           |

***


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.upshift.finance/core-products/upshift-rwa-clear/risk-controls.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.