Error catalog

Every custom error code of the six programs, generated from the published IDLs, with causes checked against the program source.

Anchor numbers each program’s custom errors from 6000, so one code means different things in different programs. Always read a code together with the program ID that raised it. Wallets and RPC errors often show the code in hex: custom program error: 0x177c is 6012.

The tables are generated from the published IDLs, so the codes match the deployed programs. The Message column is the program’s own text, as it appears in transaction logs. A cause is given where it was checked against the program source.

mint-redeem

Program ID (devnet): 5MBjhNUUguLTPNR5WG6YBUUw7vUcxQ14ARw3NsS3rKu4

Codes 6029 and 6030 are reserved placeholders: the γ rate caps they reported were removed, and the codes stay so that later codes keep their numbers. Codes 6048 to 6052 belonged to the unified vault, which the upgrade of 11 Oct 2026 removed. They are no longer returned and stay for the same reason.

Code	Hex	Name	Message	Cause and fix
6000	0x1770	MarketNotActive	Market is not active	Market.is_active is false. Wait for the operator to reactivate the market.
6001	0x1771	InvalidAmount	Invalid amount	A zero amount, a redeem with l_amount or s_amount at 0, a redeem whose balanced pair has a zero leg (for example one atom of L worth less than one base unit of S), more than the outstanding supply, or a token account whose mint doesn’t match the market. Keeper price writes also raise it for a move over 25% or a Stress exit that skips Recovery. It also covers a rebalance_collateral from a market to itself or between two markets that share a vault, and a wrong vault account on the collateral instructions.
6002	0x1772	InsufficientCollateral	Insufficient collateral in vault	A keeper single-side redeem would leave the market under 100%, or a withdrawal would take it below its target ratio. rebalance_collateral raises it when the source has nothing above its target, and deploy_collateral_to_yield when the vault holds less than the amount. User mint and redeem don’t raise it.
6003	0x1773	InvalidOracle	Invalid oracle account	At setup or on a Normal-state read: the oracle account isn’t the market’s OracleConfig PDA (Continuum) or doesn’t parse as a Pyth feed. A wrong oracle on mint or redeem fails Anchor’s address check (2012) instead.
6004	0x1774	UnsupportedOracleType	Unsupported oracle type	oracle_type is Switchboard. Only Pyth and Continuum are accepted.
6005	0x1775	OraclePriceUnavailable	Oracle price unavailable	No usable price: a Normal-state oracle read failed (Pyth older than 60 s, or confidence over 2% of price), the confidence band is as wide as the price, or a keeper write carried a rejected source timestamp.
6006	0x1776	MathOverflow	Math overflow	Arithmetic overflow. Not expected in normal use.
6007	0x1777	SymbolTooLong	Asset symbol too long	initialize_market symbol over 10 bytes, or create_token_metadata name over 32, symbol over 10 or URI over 200 bytes.
6008	0x1778	FeeTooHigh	Fee too high (max 10%)	A mint or redeem fee above 1,000 bps, or dev_tax_pct above 25.
6009	0x1779	MintNotAllowedInStress	Minting not allowed during Stress mode	The market is in Stress and allow_mint_in_stress is false (the default, and the setting on every live market). Use the bin book.
6010	0x177a	RedeemNotAllowedInStress	Redeeming not allowed during Stress mode	The market is in Stress and allow_redeem_in_stress is false (the default, and the setting on every live market). Use the bin book.
6011	0x177b	ExceedsStressMintCap	Amount exceeds stress mode mint cap	Stress only, when minting is allowed and stress_mint_cap is non-zero: the deposit is above the cap. Live markets block mint in Stress, so this can’t fire today.
6012	0x177c	TwapNotAvailable	TWAP price not available - keeper has not updated	The market price is 0 or more than 300 s old. The keeper stops pushing while the underlying market is closed, so mint and redeem revert until it reopens. Trade on the bin book meanwhile.
6013	0x177d	AlreadyEnabled	Multi-collateral mode already enabled	enable_multi_collateral on a market where it is already on.
6014	0x177e	MultiCollateralNotEnabled	Multi-collateral mode not enabled	add_collateral_vault before enable_multi_collateral.
6015	0x177f	MaxCollateralTypesExceeded	Maximum number of collateral types exceeded	A sixth collateral_vaults entry. The limit is 5.
6016	0x1780	InvalidWeight	Invalid weight - must be between 1 and 10000	A collateral weight of 0 or above 10,000 bps.
6017	0x1781	CollateralAlreadyExists	Collateral type already exists	add_collateral_vault with a mint that is already listed.
6018	0x1782	CollateralNotFound	Collateral type not found	update_collateral_vault with a mint that isn’t listed.
6019	0x1783	BelowMinimum	Amount below minimum ($10)	A mint deposit under 10 cUSDC (10_000_000 base units), or a redeem whose balanced pair is worth under 10 cUSDC at the quoted NAV.
6020	0x1784	UnauthorizedKeeper	Unauthorized keeper	The signer isn’t market.keeper_authority, redeem_single_for_vault wasn’t signed by the market’s CLP PDA, or realloc_market wasn’t signed by market.authority.
6021	0x1785	Unauthorized	Unauthorized: not the market authority	devTokenAccount isn’t owned by market.feeRecipient, or permissionless_burn isn’t signed by the account owner. fund_collateral and fund_collateral_from raise it for a signer other than market.authority, and fund_collateral_from also when funder doesn’t own funder_collateral. Other admin calls with the wrong signer usually fail with Anchor’s ConstraintHasOne (2001) instead.
6022	0x1786	InsufficientLiquidCollateral	Insufficient liquid collateral; recall yield deployment first	The payout is larger than this market’s liquid share (total_collateral - deployed_to_yield) or the vault balance. rebalance_collateral raises it when the source has no liquid collateral. For a redeem, queue it with request_redemption (see Redeem) or retry after the keeper recalls from lending.
6023	0x1787	ExceedsYieldCeiling	Deployment would exceed yield ceiling	A yield deployment above yield_ceiling_bps of total_collateral, or a ceiling above 10,000 bps.
6024	0x1788	YieldManagementDisabled	Collateral yield management is disabled for this market	Yield deployment or harvest while yield_enabled is false. It is true on every live market as of 11 Oct 2026, and initialize_market sets it to true on new markets.
6025	0x1789	RecallExceedsDeployed	Recall amount exceeds deployed_to_yield balance	A recall or impairment larger than deployed_to_yield.
6026	0x178a	SingleSideMintStressFloor	Single-side mint would leave the vault under-collateralized under an adverse NAV shock	keeper_mint_single would leave the market’s collateral ratio below the lower of its pre-trade ratio and 100%.
6027	0x178b	GammaMustRatchetDown	s_gamma_index may only ratchet down; raising the short decay scalar is rejected	set_s_gamma_index with a value above the current γ.
6028	0x178c	GammaOutOfRange	s_gamma_index is outside [GAMMA_FLOOR, GAMMA_ONE]; out-of-range writes are rejected, not clamped	set_s_gamma_index outside 0.5 to 1.0 (500_000_000 to 1_000_000_000). Out-of-range values are rejected, not clamped.
6029	0x178d	GammaStepTooLarge	unused (γ per-transaction rate cap removed)	Reserved placeholder. The per-transaction γ cap was removed and this code is never raised; it stays so later codes don’t shift.
6030	0x178e	GammaDailyCapExceeded	unused (γ per-day rate cap removed)	Reserved placeholder. The per-day γ cap was removed and this code is never raised; it stays so later codes don’t shift.
6031	0x178f	Retired6031	Retired error code	Retired. Nothing returns it. The code stays so later codes keep their numbers.
6032	0x1790	Retired6032	Retired error code	Retired. Nothing returns it. The code stays so later codes keep their numbers.
6033	0x1791	ReanchorNoDecay	Nothing to re-anchor: γ is already 1.0 (or unset)	reanchor_gamma while γ is already 1.0 (or unset).
6034	0x1792	InvalidPosition	Account does not match the expected CLP-owned account	A wrong market, token account or mint passed to clp_burn_excess.
6035	0x1793	ReanchorPrecisionFloor	Re-anchor would leave the short anchor without enough precision to price against	The folded initial_s_price would drop below 1,000 (0.001 cUSDC) or below 1/10,000 of its genesis value.
6036	0x1794	ReanchorNotValueConserving	Re-anchor failed its value-conservation invariant and was rejected	The fold would change initial_l_price × initial_s_price × γ by more than rounding.
6037	0x1795	ReanchorBadState	Market is in a degenerate state (zero anchor) and cannot be re-anchored	initial_l_price or initial_s_price is 0.
6038	0x1796	MarketNotEmpty	Cannot close a market that still has outstanding supply or collateral	close_market_admin while L or S supply, total_collateral or deployed_to_yield is non-zero.
6039	0x1797	CorporateActionBadRatio	Corporate-action ratio has a zero term	ratio_num or ratio_den is 0.
6040	0x1798	CorporateActionNoOp	Corporate-action ratio is 1:1; nothing to apply	ratio_num equals ratio_den.
6041	0x1799	CorporateActionRatioOutOfRange	Corporate-action ratio is implausibly large (fat-finger guard)	A ratio beyond 1,000:1 in either direction.
6042	0x179a	CorporateActionPrecisionExhausted	Cumulative corporate-action ratio would exceed its precision budget (cash dividends are deliberately out of scope)	The reduced cumulative ratio would have a term above 1,000,000,000.
6043	0x179b	PriceAdjustOverflow	Oracle price could not be mapped into genesis share units (corporate-action adjustment overflowed)	Applying price_adjust_num / price_adjust_den to a price overflowed or truncated it to 0.
6044	0x179c	CorporateActionEffectiveTooFarAhead	Corporate-action effective_ts is implausibly far ahead; check the unit (seconds, not milliseconds)	effective_ts more than 400 days ahead, usually milliseconds passed as seconds.
6045	0x179d	CorporateActionPendingExists	A future corporate action is already pending; wait until it takes effect	Another action is armed and hasn’t taken effect yet.
6046	0x179e	UnauthorizedInitializer	Market initialization requires the program upgrade authority	initialize_market signed by anyone other than the mint-redeem program’s upgrade authority. Only the admin can list a market.
6047	0x179f	InvalidProgramData	Market initialization requires this program's ProgramData account	initialize_market passed a program_data account that is not this program’s ProgramData.
6048	0x17a0	UnifiedVaultRetired	The unified vault is retired; migrate_to_unified_vault is disabled	No longer returned. migrate_to_unified_vault was removed on 11 Oct 2026.
6049	0x17a1	NotOnUnifiedVault	Market collateral is not held in the unified vault	No longer returned. exit_unified_vault and sweep_unified_surplus were removed on 11 Oct 2026.
6050	0x17a2	MixedVaultRebalance	Cannot rebalance between the unified vault and a per-market vault; exit the unified vault first	No longer returned. A rebalance_collateral between two markets that share a vault now fails with InvalidAmount (6001).
6051	0x17a3	UnauthorizedSweep	Sweeping the unified vault requires the program upgrade authority	No longer returned. sweep_unified_surplus was removed on 11 Oct 2026.
6052	0x17a4	SweepExceedsSurplus	Sweep would take collateral still attributed to a market on the unified vault	No longer returned. sweep_unified_surplus was removed on 11 Oct 2026.
6053	0x17a5	NothingToSettle	No part of this redemption request fits in the vault's cash now	settle_redemption on a request with nothing left, or when the vault’s cash pays out nothing for any part of it. The request stays open; the keeper retries as cash arrives, and the owner can cancel_redemption.
6054	0x17a6	AdvanceCapExceeded	Advance would exceed this market's advance cap	receive_advance (or the CLP’s advance_to_market) would push the outstanding advance above max_advance_bps of total_collateral.
6055	0x17a7	AdvanceRepayExceedsOutstanding	Repayment exceeds the outstanding advance	repay_advance or write_off_advance for more than is outstanding.
6056	0x17a8	AdvanceWouldTakeOwnLiquidity	Repayment would take the market's own liquid collateral	repay_advance would leave the vault with less than the market’s own liquid collateral. Only the advance’s own cash can be repaid.
6057	0x17a9	AdvanceLenderLocked	The advance lender can change only while nothing is outstanding	configure_market_advance with a new lender while an advance is outstanding.
6058	0x17aa	AdvanceOutstanding	A treasury advance is outstanding: write it off or repay it first	mark_yield_impairment or close_market_admin while an advance is outstanding.
6059	0x17ab	InvalidAdvanceLender	The advance lender must be the CLP treasury vault (GlobalClp's cUSDC account)	configure_market_advance with a lender that isn’t the GlobalClp PDA’s cUSDC account.
6060	0x17ac	ExposureCapExceeded	This would push the market's net exposure past its cap	No longer raised by redeem_paired or request_redemption since 14 Oct 2026, because they burn a balanced pair that moves traders’ net position by less than $1. The check stays in the code as a guard. The swap-path cap error is CLP 6045.
6061	0x17ad	ExposureAccountMismatch	An exposure account is not the market's CLP, pool synth vault or CLP token account	No longer raised by redemptions since 14 Oct 2026, which take no exposure remaining accounts. Kept as a guard. It meant one of them had the wrong address, owner or mint. Pass the market’s Clp account, then the pool long and short synth vaults, then the CLP’s long and short token accounts.
6062	0x17ae	ExposureAccountsMissing	A lopsided redemption must pass the exposure accounts: CLP, pool vaults, CLP token accounts	No longer raised by redemptions since 14 Oct 2026, which take no exposure remaining accounts (balanced burn). Kept as a guard. The swap-path missing-account error is CLP 6046.

clp

Program ID (devnet): 8xauDRjw9XRyk4FE3hW1JKjD8nC87gfr59Xig1dJqLES

Codes 6003 to 6016 and 6044 to 6052 are swap errors from pool_swap and the committed-order instructions, including claim. clp_swap, retired on 11 Oct 2026, always fails with 6003. 6031 and 6032 are retired and nothing returns them.

Code	Hex	Name	Message	Cause and fix
6000	0x1770	Unauthorized	Unauthorized	The signer isn’t the required authority (clp.authority, pool.authority, GlobalClp.authority or the treasury guardian), or deposit_profit’s admin token account isn’t owned by GlobalClp.admin_wallet.
6001	0x1771	WithdrawalLocked	Withdrawal locked for 7 days after deposit	Never raised.
6002	0x1772	InvalidAmount	Invalid amount	A zero amount, or out-of-range pool or book parameters.
6003	0x1773	SwapDisabled	Swap path disabled (configure_swap enabled=true)	Every clp_swap: the instant oracle swap was retired on 11 Oct 2026, and the instruction now only returns this error. Also pool_swap on a book that isn’t enabled or is frozen, and commit_swap on a market whose swap guards are off in configure_swap. Since 11 Oct 2026 the guards are on for every live market.
6004	0x1774	SwapFrozen	Swaps frozen (circuit breaker)	commit_swap or a settlement while the market’s swap guards are frozen.
6005	0x1775	InvalidSide	Invalid swap side/direction	side or direction isn’t 0 or 1.
6006	0x1776	SwapAccountMismatch	Swap account mismatch (mint/owner)	A token account’s mint or owner doesn’t match the pool, market or order, or the pool or CLP account belongs to another market.
6007	0x1777	MarketInactive	Market inactive	commit_swap on a market with is_active false.
6008	0x1778	SlippageExceeded	Slippage exceeded (output below min_out)	The fill is below min_out (pool_swap). A committed order that misses min_out is refunded at settlement instead.
6009	0x1779	OrderExpired	Order expired; use cancel_swap to refund	settle_swap after the 180 s TTL. The keeper refunds the order about 5 s after expiry, and anyone can send cancel_swap to return the escrow to its owner.
6010	0x177a	OrderNotExpired	Order not yet expired; wait for settlement or the TTL	cancel_swap before the 180 s TTL has passed. Nobody can cancel an order before it expires.
6011	0x177b	NoFreshOraclePush	No oracle push strictly newer than the commit yet	settle_swap before a keeper price push newer than the commit. Retry after the next push.
6012	0x177c	OracleStale	Oracle/TWAP stale	pool_swap on a book with no posted price, or settle_swap with a price older than the market’s max_staleness_secs. A committed order stays pending for a later push.
6013	0x177d	OracleConfidenceTooWide	Oracle confidence too wide	settle_swap with confidence wider than max_confidence_bps of the price. The limit is 5,000 bps on every market with guards on, so in practice it doesn’t fire.
6014	0x177e	OracleDeviationTooLarge	Oracle deviation too large	settle_swap with a price more than max_deviation_bps from the last accepted price. The limit is 10,000 bps on every market with guards on, which turns the check off; the price write itself refuses a move of more than 25%.
6015	0x177f	WindowCapExceeded	Swap window notional cap exceeded	A pool_swap would push the market’s rolling notional total past window_cap_usd for the current window_secs. Committed fills don’t count.
6016	0x1780	CollateralFloorBreach	Collateral floor breach	settle_swap while the market’s collateral is below collateral_floor_bps of its liability at NAV, 100% on every market with guards on. The order stays pending and fills at a later push once the keeper has topped the market up from the treasury.
6017	0x1781	InsufficientShares	Insufficient LP shares	Never raised.
6018	0x1782	InsufficientFunds	Insufficient clp funds	The book or CLP inventory can’t fill the order (zero output or a short balance), or an operator transfer exceeds a vault balance.
6019	0x1783	InsufficientLiquidFunds	Insufficient liquid funds in vault. Wait for keeper to rebalance or perform forced DEX liquidation.	admin_withdraw or backstop_market above the global vault’s balance.
6020	0x1784	OICapExceeded	OI cap exceeded	Raised only by update_oi, which nothing calls. It has nothing to do with the exposure cap, which reports through 6045 and 6046.
6021	0x1785	MathOverflow	Math overflow	Arithmetic overflow. Not expected in normal use.
6022	0x1786	InsufficientBuffer	Insufficient protocol buffer	absorb_loss larger than the protocol buffer.
6023	0x1787	HardBoundBreach	Hard inventory bound breached - operations restricted	Never raised.
6024	0x1788	YieldStrategyDisabled	Yield strategy is disabled	record_deployment while the market’s yield strategy is disabled.
6025	0x1789	ExceedsMaxDeployment	Deployment exceeds maximum allowed for current risk state	record_deployment above the deployment share allowed in the current risk state.
6026	0x178a	MaxDeploymentsExceeded	Maximum number of yield deployments reached	allocate_to_market when GlobalClp.market_allocations already holds 10 markets, or record_deployment with a full deployment list.
6027	0x178b	DeploymentNotFound	Deployment not found	record_harvest or record_withdrawal for a protocol with no recorded deployment.
6028	0x178c	InsufficientDeployment	Insufficient deployment balance	A withdrawal or recall larger than the recorded deployment.
6029	0x178d	DeploymentTooHigh	Deployment percentage too high	configure_yield_strategy with a deployment share out of range.
6030	0x178e	OracleReadError	Could not read oracle account data	The oracle_config account passed to a yield instruction is too short to read.
6031	0x178f	Retired6031	Retired error code	Retired. Nothing returns it. The code stays so later codes keep their numbers.
6032	0x1790	Retired6032	Retired error code	Retired. Nothing returns it. The code stays so later codes keep their numbers.
6033	0x1791	AdminWithdrawCapExceeded	Admin withdrawal would exceed the 24h cap of $100K; wait for window to roll or rotate authority if attack is suspected	No longer returned. It reported the old 24 h cap on admin_withdraw, which the TreasuryPolicy token bucket replaced on 11 Oct 2026. The code stays so later codes keep their numbers.
6034	0x1792	InvalidPosition	Account does not match the expected CLP-owned account	A wrong market, token account or mint passed to clp_burn_excess.
6035	0x1793	InvalidAccountData	Account data too small for operation	Never raised.
6036	0x1794	InvalidVault	Token account is not the expected protocol-owned vault	A token account has the wrong owner or mint: the global vault must be owned by the GlobalClp PDA, and a market’s CLP vault and its L and S accounts by that market’s Clp PDA. vault_mint_pairs, vault_redeem_pairs, vault_redeem_single, allocate_to_market, return_to_global and the treasury instructions check it.
6037	0x1795	TreasuryFrozen	Treasury withdrawals are frozen	admin_withdraw while the treasury is frozen. Only the guardian can unfreeze it.
6038	0x1796	TreasuryAllowanceExceeded	Withdrawal exceeds the accrued treasury allowance	admin_withdraw above the allowance. Wait for it to refill at rate_per_sec, up to burst.
6039	0x1797	InvalidTreasuryParams	Invalid treasury limits: rate and burst must be > 0, delay within 0..=30 days, guardian set	init_treasury_policy or set_treasury_limits with a rate or burst of 0, a delay outside 0 to 30 days or no guardian, or set_treasury_guardian with the default pubkey.
6040	0x1798	InvalidTreasuryDestination	Treasury destination must be the named token account and hold the global vault's mint	admin_withdraw to an account other than the policy’s destination, or a new destination that isn’t the account passed or holds another mint.
6041	0x1799	NoPendingTreasuryChange	No pending treasury change	apply_treasury_limits with nothing pending.
6042	0x179a	TreasuryChangeNotReady	The pending treasury change is still inside its delay	apply_treasury_limits before pending_at.
6043	0x179b	MarketMismatch	Market is not this CLP's market	vault_mint_pairs, vault_redeem_pairs or vault_redeem_single with a market other than the CLP’s own.
6044	0x179c	PoolClosedWhileLive	The book trades only while the market is closed; use a committed order	pool_swap while the market’s price is live: its risk state is Normal, or its last price push is at most 300 s old. Send a committed order instead. The book reopens once the price is more than 300 s old outside Normal.
6045	0x179d	ExposureCapExceeded	This trade would push the market's net exposure past its cap	A pool_swap fill that would move traders’ net position further past Clp.oi_cap. Try a smaller amount, or the other side, which opens room. Committed orders never raise this: settle_swap fills what fits and refunds the rest.
6046	0x179e	ExposureAccountsMissing	The market is capped: pass the pool synth vaults and the CLP's token accounts	pool_swap or settle_swap on a market with oi_cap above 0 without the four inventory accounts: the pool long and short synth vaults, then the CLP’s long and short token accounts.
6047	0x179f	SettleKeeperOnly	Only the keeper (clp.authority or market.keeper_authority) may settle	settle_swap signed by anyone else. Settling is keeper-only; the keeper settles at the first push it sees after the commit.
6048	0x17a0	InvalidOrderAccount	Not a valid order account for this instruction	An order account that doesn’t fit the instruction, such as an unrecognised size or a recorded account that doesn’t match.
6049	0x17a1	OrderNotClaimable	The order has nothing held for claim	claim on an order whose status isn’t held.
6050	0x17a2	ClaimDestinationInvalid	Claim destination must be a live, unfrozen token account of the order's owner for that mint	claim to an account that is closed, frozen, the wrong mint or not the owner’s. The keeper creates the owner’s token account first.
6051	0x17a3	NothingToSweep	The account holds no lamports above its rent-exempt minimum	sweep_clp_lamports on a Clp with nothing to move.
6052	0x17a4	PoolShapePredatesFloat	The book was last reshaped before the market began to float; wait for the free-float book	pool_swap while the market floats, on a book whose shape_updated_at isn’t more than 300 s after twap_updated_at. Wait for the keeper to post the free-float book.

oracle

Program ID (devnet): 5vxiCrDpFnQ2W5QtgZBC66K2XTC19bjVBjinGYYBsadC

The oracle program isn’t updated on devnet, so these errors come only from operator instructions and the oracle’s own view instructions. Mint and redeem report price problems with mint-redeem errors.

Code	Hex	Name	Message	Cause and fix
6000	0x1770	OraclePaused	Oracle is paused	is_paused is set on the OracleConfig.
6001	0x1771	InvalidPythAccount	Invalid Pyth account	The pyth_oracle account doesn’t parse as a Pyth price feed.
6002	0x1772	PriceUnavailable	Price unavailable	The Pyth price is zero or negative.
6003	0x1773	ConfidenceTooHigh	Confidence interval too high	get_price: confidence above max_confidence_interval.
6004	0x1774	PriceStale	Price is stale	get_price: the Pyth publish time is older than max_staleness.
6005	0x1775	PriceMovementTooLarge	Price movement too large (>20% in one update)	get_price: more than 20% away from last_price.
6006	0x1776	TwapNotReady	TWAP not ready - insufficient observations	get_keeper_twap always (deprecated); get_user_twap, get_user_price or get_keeper_price before a value is stored.
6007	0x1777	InvalidTwapWindow	Invalid TWAP window duration	configure_twap_windows with a keeper window outside 30 to 120 s or a user window outside 300 to 600 s.
6008	0x1778	MarketStateRestriction	Operation not allowed in current market state	Never raised.
6009	0x1779	UnauthorizedKeeper	Unauthorized keeper	The signer isn’t OracleConfig.keeper_authority.
6010	0x177a	UnauthorizedAdmin	Unauthorized admin	The signer isn’t OracleConfig.admin_authority, or initialize_oracle_config isn’t signed by market.authority.
6011	0x177b	InvalidRegisteredFeed	Invalid registered oracle feed	The OracleFeed doesn’t belong to this config and Pyth account.
6012	0x177c	InactiveOracleFeed	Registered oracle feed is inactive	The OracleFeed has is_active false.
6013	0x177d	MathOverflow	Math Overflow	Arithmetic overflow. Not expected in normal use.

registry

Program ID (devnet): Hss7QZ46RcrV4ta63q2EM2Wf1Pzbjnd5FNjaTTDZHnau

Code	Hex	Name	Message	Cause and fix
6000	0x1770	SymbolTooLong	Symbol must be 16 characters or fewer	register_market with a symbol over 16 bytes after uppercasing.
6001	0x1771	UnauthorizedInitializer	Registry initialization requires the program upgrade authority	initialize isn’t signed by the registry program’s upgrade authority.
6002	0x1772	InvalidProgramData	Registry initialization requires this program's ProgramData account	initialize was given a program_data account that isn’t this program’s ProgramData.

faucet

Program ID (devnet): 9tUeQAPEtVSB68NSfvFAqfwaB74GuVxm6Zbp1hrMiNKY

Code	Hex	Name	Message	Cause and fix
6000	0x1770	CooldownNotElapsed	Cooldown period has not elapsed yet	Less than cooldown_seconds (86,400 s on devnet) since this wallet’s last drip.

trading

Program ID (devnet): Anyy78cCJqapwvvFsignmQ45an5PCg9HfeDhDtAPNfmA

These come from the order book, the trading account and the short rebate. Errors raised inside Manifest itself are Manifest’s, not these.

Code	Hex	Name	Message	Cause and fix
6000	0x1770	NotAuthorized	Signer is neither the owner nor the account's active session key	The signer of a trading call is not the account owner and not its current session key.
6001	0x1771	OwnerOnly	Only the owner can do this	An owner-only call (deposit, withdraw, set or revoke a session, close) signed by anyone but the account’s owner, a session key included.
6002	0x1772	SessionExpired	The session key has expired or was revoked	A session-key call after the session’s expiry, or after the owner revoked it.
6003	0x1773	InvalidExpiry	Session expiry must be in the future and at most 30 days away	set_session with an expiry in the past or more than 30 days ahead.
6004	0x1774	OrderTooLarge	Order is larger than the session's per-order limit	A session-signed order above the per-order limit the owner set.
6005	0x1775	WrongTokenAccount	Token account is not the trading account's own	A token account that isn’t the associated account of the owner or the trading account’s trader for that mint, or a mint that doesn’t match the market.
6006	0x1776	NotAManifestMarket	Account is not a Manifest market	The market account passed isn’t owned by the Manifest program.
6007	0x1777	ZeroAmount	Amount must be greater than zero	A deposit or withdraw of 0.
6008	0x1778	MathOverflow	Arithmetic overflow	Arithmetic overflow. Not expected in normal use.
6009	0x1779	NotOurMarket	That Manifest market does not trade this Continuum market's token for its collateral	The Manifest market’s mints are not this Continuum market’s token and its collateral.
6010	0x177a	NoReferencePrice	The market has no posted price yet	A session-signed order on a market with no posted price, so there is no band to check.
6011	0x177b	OutsideBand	Session-signed orders must be priced inside the band around the posted price	A session-signed order priced outside the protection band around the posted price. The owner can sign wider.
6012	0x177c	UnsupportedOrderType	Only limit, immediate-or-cancel and post-only orders are supported	An order type other than limit, immediate-or-cancel or post-only.
6013	0x177d	TooManyOrders	Too many orders or cancels in one call	More orders or cancels in one call than the program allows.
6014	0x177e	NotFilled	Fill-or-kill order did not fill in full	A fill-or-kill order that could not fill completely. The call reverts.
6015	0x177f	InvalidFillOrKill	Fill-or-kill takes one immediate-or-cancel order and no cancels	A fill-or-kill call with more than one order, an order that isn’t immediate-or-cancel, or any cancel.
6016	0x1780	NoSeat	The trader has no seat on this market	The trading account has no seat on the Manifest market yet. Claim one with claim_seat first.
6017	0x1781	InvalidDirection	Direction must be 0 (buy) or 1 (sell)	A direction other than 0 or 1.
6018	0x1782	BadGlobalAccounts	Global accounts must come in groups of mint, global, global vault, market vault and token program, for this market's mints	The remaining accounts for Manifest’s global orders aren’t in groups of five for this market’s mints.
6019	0x1783	InsufficientStake	Not that much S is staked	unstake_rebate asked for more S than the position has staked. Check RebatePosition.units.
6020	0x1784	RebateFundingAboveYield	The rebate pot can't be funded beyond the collateral yield the market has harvested since the rebate opened	fund_rebate would take the pot’s cumulative funding above total_yield_harvested minus the value it had when the rebate opened. Fund less, or wait for the market to harvest more.
6021	0x1785	SessionBudgetExceeded	The session has used its budget; the owner must grant it again	A session-signed order that would take the key past its total budget. Approve the key again in the app, which resets the count.
6022	0x1786	SessionAccountReadOnly	A session-signed trade must pass the trading account as writable, to record what the session has spent	A session-signed place_orders, swap_pool or commit_order with the rules account passed read-only.
6023	0x1787	CanonicalBooksMissing	A session-signed book call must pass the market's canonical-books account first among the remaining accounts	A session-signed place_orders or claim_seat without the CanonicalBooks account as the first remaining account.
6024	0x1788	NotCanonicalBook	A session key may only use the market's canonical Manifest book	A session-signed call on a Manifest book other than the market’s canonical one. Your wallet can use any book.
6025	0x1789	MarketNotActive	A session key cannot trade a market that is not active	A session-signed order, pool swap or committed order on an inactive market. Cancels still work.
6026	0x178a	InvalidProgramData	The program account does not match the program data account	set_canonical_books with a program data account that isn’t the trading program’s.
6027	0x178b	NotUpgradeAuthority	Only the trading program's upgrade authority can set the canonical books	set_canonical_books signed by anyone but the program’s upgrade authority.

Anchor errors below 6000

Anchor raises its own errors before the program’s code runs: when the instruction doesn’t exist, or when an account fails validation. The common ones:

Code	Name	Cause and fix
101	InstructionFallbackNotFound	The instruction isn’t in the deployed program. mint-redeem’s four unified-vault instructions (init_collateral_authority, migrate_to_unified_vault, exit_unified_vault, sweep_unified_surplus) fail this way since 11 Oct 2026. Rebuild your client from the current IDL.
2001	ConstraintHasOne	An admin instruction signed by a key other than market.authority.
2012	ConstraintAddress	The oracle account isn’t market.oracleAddress. Wrong longMint, shortMint or collateralVault accounts raise InvalidAmount (6001) instead.
3012	AccountNotInitialized	A user token account (cUSDC, L or S) doesn’t exist yet. Create the ATA first.

How errors surface in clients

Anchor turns a failed transaction into an AnchorError that carries the code, its name and the program that raised it:

import { AnchorError } from "@coral-xyz/anchor";

try {
  await program.methods.mintPaired(amount).accountsStrict(accounts).rpc();
} catch (e) {
  if (e instanceof AnchorError) {
    console.log(e.error.errorCode.code);   // "TwapNotAvailable"
    console.log(e.error.errorCode.number); // 6012
    console.log(e.program.toBase58());     // the program that raised it
  }
  throw e;
}

When you simulate with @solana/web3.js, AnchorError.parse(logs) reads the same fields from the logs. The raw log line looks like this:

Program log: AnchorError thrown in programs/mint-redeem/src/lib.rs:2826. Error Code: TwapNotAvailable. Error Number: 6012. Error Message: TWAP price not available - keeper has not updated.

Common error sequences

Mint or redeem fails with TwapNotAvailable (6012)

The market’s price is 0 or more than 300 s old. The keeper doesn’t push prices while the underlying market is closed (for equities, nights and weekends), so mint and redeem stay closed until it reopens. The bin books trade in the meantime. If it happens during market hours and persists, check #announcements on Discord, where the team posts outages, or ask in #help.

Mint or redeem fails with MintNotAllowedInStress or RedeemNotAllowedInStress

The market is in Stress, which blocks both mint and redeem on every live market. Read market.riskState and surface it to the user as “mint and redeem paused”. Committed orders still fill while the keeper pushes prices.

Redeem fails with InvalidAmount (6001)

Both l_amount and s_amount must be above 0: there is no single-leg redeem. The program also fails with this code when the balanced pair it would burn has a zero leg, for example one atom of L whose value is worth less than one base unit of S. Offer a larger amount of the smaller leg. Sell a lone leg with a committed order while the market is open, or on its bin book while its price is stale. The same code also covers an amount above the outstanding supply and a token account whose mint doesn’t match the market.

pool_swap fails with PoolClosedWhileLive (6044)

The market’s price is live, and the bin books trade only while it is stale. Send a committed order (commit_swap) instead; it fills at the next price push. See Trade.

A pool_swap fails with ExposureCapExceeded (6045)

The market is full on that side. Its exposure cap limits how far traders’ net position can go, and a trade that pushes it further past the cap reverts. Trades the other way always pass and open room, so a short makes room for a long and the reverse. Redemptions are not capped, because they burn a balanced pair. Try a smaller amount, or wait. Committed orders don’t fail this way; they fill what fits and refund the rest. See Exposure cap.

A trade fails with ExposureAccountsMissing (6046)

The market is capped and the transaction didn’t pass the exposure accounts. For pool_swap and settle_swap they are the pool long and short synth vaults, then the CLP’s long and short token accounts. Passing them on an uncapped market is harmless. Redemptions need none of them. See Exposure cap.

Redeem fails with InsufficientLiquidCollateral (6022)

The payout is more than the market’s liquid collateral. On mainnet most collateral is lent out, and the vault keeps only a liquid share. Escrow the tokens with request_redemption and the keeper pays the request in parts as money comes back from the lending venues. Cancel with cancel_redemption to take the unpaid part back. See Redeem.

Mint or redeem fails with BelowMinimum (6019)

A mint needs a deposit of at least 10 cUSDC (10_000_000 base units). A redeem needs the balanced pair it burns to be worth at least 10 cUSDC at the redeem NAVs. If you offer a lopsided amount, the pair is smaller than the offer.

Mint or redeem fails with Unauthorized (6021)

devTokenAccount must be a cUSDC token account owned by market.feeRecipient. Derive it with getAssociatedTokenAddressSync(cusdcMint, market.feeRecipient, true); the true matters because a fee recipient can be a PDA.

See also

FAQ

Common questions, including error symptoms.

Glossary

What the terms in error names mean.