wSOST & Gold Vault emblem
SOST ATOMIC BRIDGE · GOLD ACCESS KEY · GOLD RESERVE V2

wSOST & Gold Reserve V2

TARGET ARCHITECTURE RESEARCH / DEVELOPMENT NOT ACTIVE NOT MAINNET DEPLOYED NOT AUDITED NOT YET PROVEN DEMO ONLY #40,000 RESEARCH HORIZON NOT AN ACTIVATION COMMITMENT

The target architecture is the SOST Atomic Bridge: an Atomic Reserve Vault of preissued, immobilized wSOST on Ethereum, exchanged one-for-one against native SOST through atomic swaps in both directions — no mint per operation, no burn on the return, no liquidity pool. A small Gold Access Key paid in XAUT goes entirely to Gold Reserve V2 and is not part of the backing. Nothing here is live, there is no launch date, the keyless native reserve found in research (C705) needs two new SOST consensus rules that are not authorized, and any future activation is subject to security work, an external audit and legal review.

STATUS: RESEARCH / DEVELOPMENT · NOT ACTIVE · NOT MAINNET DEPLOYED · NOT AUDITED · NOT YET PROVENSOST Atomic Bridge (Atomic Reserve Vault) · no contract deployed · no launch date · subject to security work, external audit and legal / regulatory review
⛔ NOT LIVE · DEMO ONLY
⛔ NO BRIDGE CONTRACT DEPLOYED
⛔ NO GOLD RESERVE V2 FUNDS YET
⛔ REAL OPERATIONS BLOCKED: NO APPROVED SOST/EUR VALUATION
✅ CURRENT SOST CONSENSUS UNCHANGED
#30,000 → #40,000
#30,000 built the current foundation (V30000 is live). #40,000 is the current coordinated research horizon for the next major phase. Nothing activates automatically at #40,000. If engineering, external audit, legal or operational gates are not complete, the work moves later (for example #50,000). Every consensus change would need its own release, tests, audit and public notice.
TARGET ARCHITECTURE · RESEARCH / DEVELOPMENT

SOST Atomic Bridge — Atomic Reserve Vault

TARGET ARCHITECTURE · RESEARCH / DEVELOPMENT · NOT ACTIVE · NOT MAINNET DEPLOYED · NOT AUDITED · NOT YET PROVENno contract deployed · no real funds · no launch date · keyless native reserve designed in research (C705): needs two new SOST consensus rules, not in V17

SOST does not intend to mint a new wSOST for every bridge operation. The target architecture uses a preissued, immobilized wSOST reserve and bidirectional atomic swaps. Native SOST received by the bridge forms the corresponding reserve. The principal research problem is making that native reserve non-discretionary and safely redeemable.

C705 FEASIBILITY RESULT · 26 OCT 2026

The reserve can have no key at all — no daemon, no multisig, no guardians. That needs exactly two new SOST consensus rules (keyless reserve outputs + SOST verifying Ethereum finality) and one Ethereum-side component (a SOST header relay). With them, the reserve and the vault each check proofs from the other chain, so the hashlock is no longer what protects the reserve: hashed swaps stay only as an optional fast path for market makers using their own funds. Research only; not implemented; not in V17. See Diagram 7b.

OUR TARGET
SOST Atomic Bridge (Atomic Reserve Vault)
REFERENCE
Conventional lock / mint bridge
EXISTING PROTOTYPE
C701 / C703 components, reused
RESEARCH COMPARISON
Atomiq · THORChain · Chainflip · others

SOST is not planning to launch two bridges. The lock/mint model below is shown only to explain the difference; its prototype code is the source of reusable components.

native SOSTEthereum / wSOSTGold Reserve V2 / XAUTcondition / proofwarning / risk
PrincipleSOST Atomic Bridge
wSOST issuancepreissued once, immobilized in the Ethereum Atomic Vault; no mint per operation
Returnreturned wSOST goes back to the immobilized inventory; no burn required
Native SOSTheld in the native reserve; never burned
ExchangeHTLC atomic swaps in both directions, one shared sha256 secret per swap (the native SOST HTLC is active on mainnet since #16,000). C705: for a keyless reserve, the swap is settled by cross-chain proofs instead (Diagram 7b)
Backing ruleCIRCULATING_wSOST ≤ CONFIRMED_NATIVE_SOST_RESERVE — not totalSupply
Liquidity pool / human approvalnone / none per operation (automatic engine)
Gold Access Keyseparate: XAUT straight to Gold Reserve V2; not part of the 1:1
DIAGRAM 2 · ENTRY — 1,000 SOST → 1,000 existing wSOST
SOST CHAIN
User 1,000 SOST
locks
SOST HTLC
hashlock H · refund to user after ≈48 h
claimed with s
Native Reserve +1,000 SOST
SHARED ATOMIC CONDITION
H = sha256(s)the user knows s; claiming wSOST reveals it; the same s lets the reserve claim the SOST
ETHEREUM
Atomic Vault · immobilized inventory 990,000 wSOST
releases 1,000
Ethereum HTLC
hashlock H · beneficiary fixed = user · back to inventory after ≈12 h
claim(s)
User ETH wallet +1,000 wSOST
NATIVE RESERVE
10,00011,000
wSOST CIRCULATING
10,00011,000
wSOST IN VAULT
990,000989,000
Step by step · and why the entry still needs a verifier
  1. Your wallet creates a secret s locally and opens a request bound to H = sha256(s), the amount and your Ethereum address. The Gold Access Key in XAUT is escrowed in the same Ethereum transaction — if you lack XAUT, it fails here, before any SOST moves.
  2. You lock 1,000 SOST in a native HTLC: hashlock H, claimable by the reserve, refundable to you after ≈288 blocks.
  3. The engine waits for 30 SOST confirmations and checks the lock.
  4. The Atomic Vault moves 1,000 existing wSOST from inventory into an Ethereum HTLC with the same H, payable only to you.
  5. You claim with s: the wSOST reach you and the escrowed XAUT goes to Gold Reserve V2, in one transaction.
  6. The engine uses the now-public s to claim your 1,000 SOST into the native reserve.

Step 4 must not happen for a SOST lock that does not exist — otherwise anyone could collect wSOST with their own secret. So Ethereum still needs to know the SOST lock is real: today through the engine's authorization (which can be a threshold of keys), later possibly through a SOST light client. The atomic swap turns “mint authority” into “release-from-inventory authority”: the damage of a compromised verifier is bounded by the inventory and the caps, not removed.

DIAGRAM 3 · EXIT — 500 wSOST → 500 SOST
ETHEREUM
User 500 wSOST
locks
Ethereum exit HTLC
hashlock H' · beneficiary fixed = vault · refund to user after ≈48 h
anyone settles with s'
Immobilized inventory +500 wSOST
SAME SECRET
H' = sha256(s')claiming the SOST reveals s'; anyone can then return the 500 wSOST to the vault
SOST CHAIN
Native Reserve 10,000 SOST
funds after Ethereum finality
SOST HTLC
hashlock H' · claimable by you · back to reserve after ≈72 blocks
claim with s'
User SOST wallet +500 SOSTminus the SOST network fee
NATIVE RESERVE
10,0009,500
wSOST CIRCULATING
10,0009,500
wSOST IN VAULT
990,000990,500

No burn, no XAUT on the return. SOST does not need to verify an Ethereum burn — but the reserve signers still decide, off-chain, to fund the SOST HTLC only after they see a final Ethereum lock. That decision is the custody problem (Diagram 7).

DIAGRAM 4 · RESERVE ACCOUNTING — PREMINT, INVENTORY, CIRCULATING, BACKING
TOTAL PREMINTED wSOST · 1,000,000 (illustrative)
immobilized in vault 990,000pending 0circulating 10,000
CIRCULATING wSOST vs NATIVE SOST RESERVE
circulating wSOST 10,000
native reserve 10,000
Backing ratio
BACKING RATIO
100%
10,000 SOST reserve / 10,000 circulating wSOST
NATIVE RESERVE
10,000
CIRCULATING wSOST
10,000
VAULT INVENTORY
990,000
XAUT → GRV2
0
Illustration only · no transaction. Press PLAY to watch the counters move step by step.
Entry +1,000BeforeAfter
SOST reserve10,00011,000
wSOST circulating10,00011,000
wSOST in vault990,000989,000
backing100%100%
Exit −500BeforeAfter
SOST reserve10,0009,500
wSOST circulating10,0009,500
wSOST in vault990,000990,500
backing100%100%
THE IMMOBILIZED wSOST ARE NOT BACKED — AND NOT CIRCULATING
The 990,000 wSOST held by the vault count neither as circulating nor as backed. The rule is CIRCULATING_wSOST ≤ CONFIRMED_NATIVE_SOST_RESERVE, with equality after every completed operation — never totalSupply(wSOST) ≤ locked SOST. Tracked separately: TOTAL PREMINTED · VAULT INVENTORY · PENDING (inside HTLCs) · CIRCULATING · NATIVE BACKING · PENDING NATIVE. A large inventory is itself a target, so it would be sized to the exposure caps and topped up in tranches; the 1,000,000 figure is illustrative.
DIAGRAM 5 · GOLD ACCESS KEY — SEPARATE FROM THE 1:1 BACKING
Your conversion 1,000 SOST
atomic swap, 1:1 1,000 wSOSTbacked by the 1,000 SOST in the native reserve
plus, separately
Gold Access Key XAUT0.10% · min 0.50 · max 250 EUR · min operation 100 EUR
Gold Reserve V2 100%escrowed at the request, paid when you claim
XAUT DOES NOT BACK wSOST
XAUT is not part of the 1:1 ratio, is not liquidity and does not replace the SOST of the reserve. It is a separate contribution to Gold Reserve V2. The return wSOST → SOST pays no new contribution.
DIAGRAM 6 · FAILURE / REFUND — WHY THE DEADLINES ARE ORDERED
entry · your SOST HTLC
claimable by reserve · refund to you after ≈48 h
entry · vault wSOST HTLC
≈12 h
reserve claim window
after you claim → reserve must claim before 48 h

The side that moves first gets the longer deadline, so the other side always has time to react. Exit mirrors it: your wSOST HTLC ≈48 h, the reserve's SOST HTLC ≈72 blocks (≈12 h).

What goes wrongOutcome
Not enough XAUTfails when you open the request; no SOST is locked
The vault never releases (engine stopped, paused)you refund your SOST after the deadline; the XAUT escrow returns
You never claim the wSOSTthe vault HTLC returns to inventory (anyone can trigger it); you refund your SOST; XAUT returns
Exit: the reserve never fundsyou refund your wSOST after the deadline
Exit: you never claim the SOSTthe reserve HTLC returns to the reserve; you refund your wSOST
Same secret used twicerefused: every hashlock and swap id is single-use
Two exits at the same timeeach uses distinct reserve outputs; the engine serializes reserve spending
You claim wSOST, the reserve fails to claim the SOST before 48 hopen risk: you could refund the SOST and keep the wSOST → under-backing. Today only the reserve's claim key can claim a SOST HTLC, so watchtowers cannot help.
The SOST chain reorganizes after the vault releasedbounded risk: the vault HTLC cannot be cancelled without breaking atomicity; protection is depth (30 confirmations) plus a security hold
Design note · a secret revealed in a failed transaction

If the XAUT payment were collected inside the claim and the claim reverted, the secret s would still be public on-chain and the reserve could claim the SOST although you received nothing. That is why the Gold Access Key is escrowed first and the claim itself has no other condition: anyone holding s can submit it, and the wSOST can only go to you.

⚠ DIAGRAM 7 · WHO CONTROLS THE NATIVE SOST RESERVE?

An atomic swap coordinates the exchange. It does not decide who controls the SOST afterwards. A daemon that holds a private key is still an automated custodian.

ETHEREUM CAN
  • lock and release wSOST
  • move ERC-20 tokens
  • verify its own contracts and the secret of an HTLC
ETHEREUM CANNOT, BY ITSELF
  • sign a native SOST transaction
  • control a SOST key
  • check the SOST chain without a verifiable proof
L0
Single hot key in a daemon — rejected as the final design
REJECTED
L1
Single cold key — the only option before V17; exits not automatic
TODAY
L2
V17 native multisig 3-of-5 (#40,000): removes single-key risk — but three signers can still move the whole reserve. V17 lets a multisig fund an HTLC and lets an HTLC claim pay to a multisig; it does not allow a multisig claimant or refund key, nor a timelocked recovery path. Not used for the bridge reserve.
NOT USED
L3
P1–P3 studied, not needed: a destination-fixed HTLC, an HTLC with a multisig claimant and a delayed vault with a recovery key all keep someone in control. In a keyless design there is no key to delay or share.
NOT NEEDED
L4
Keyless reserve (C705) — nobody holds a key. The reserve moves only on a proven return of wSOST, deposits only on a proven release or a proven cancel. Needs Rule 1 = P4 (keyless reserve outputs with fixed spend paths) and Rule 2 = P5 (SOST verifies Ethereum finality). Designed and model-checked; not implemented.
RESEARCH · V18 CANDIDATE

Honest status: with today's and V17's primitives, arbitrary withdrawal by whoever holds the reserve key (or 3 of 5 signers) is not impossible. Only the keyless level L4 removes it, and it needs a consensus upgrade that is not authorized; the SOST consensus is unchanged.

DIAGRAM 7b · KEYLESS RESERVE — EACH CHAIN CHECKS THE OTHER C705 · RESEARCH
SOST CHAIN
Deposit box (no key)names your 0x address
Reserve (no key)one chained output
Rule 1 · keyless outputs: spend only by the fixed paths below
Rule 2 · SOST reads Ethereum: finalized headers (sync committee) + event proofs
ETHEREUM
Atomic Vault (no admin)preissued wSOST inventory
SOST header relay · follows SOST blocks; any false header can be challenged
One arbiter per entry · RELEASED before the deadline or CANCELLED after it — never both
What movesOnly whenPaid to
Deposit box → reserveproof that the vault released your wSOSTthe reserve
Deposit box → youproof that the entry was cancelled (deadline passed)your refund address, fixed in the box
Reserve → youproof that you returned wSOST (one-time exit number)the SOST address you gave the vault
Reserve → anyone elsenever — no key, no admin, no vote—
WHAT IS REMOVED
  • any key that can move the reserve (daemon, server, 3-of-5)
  • human approval per operation
  • a verifier that decides what is true
WHAT YOU STILL TRUST
  • SOST proof of work (a very deep rewrite of recent blocks is the weakest point while mining is concentrated — so amounts are capped)
  • Ethereum's sync committee (512 validators, more than 2/3 honest)
  • correct code · at least one honest relayer (you can be your own)
  • future Ethereum upgrades may need a SOST software update

Bounded model check (all orders of events with users, relayers and an attacker): reserve with a key or a multisig → can be taken; keyless rules → no tested sequence loses or duplicates coins, and every user can finish or cancel even if all servers disappear. Strong evidence, not a formal proof. Both rules are a hard fork: not in V17, candidate for V18.

Why this differs from a conventional bridge

DIAGRAM 1 · MODEL A · CONVENTIONAL LOCK / MINT REFERENCE
User 1,000 SOST
deposit
SOST Bridge Vault · locks 1,000
proof / authorization
Verifier · decides the deposit is real
mint
Ethereum mint 1,000 new wSOST

Return: burn wSOST → verify the burn → release SOST. locked SOST = circulating wSOST; totalSupply changes every time.

MODEL B · SOST ATOMIC BRIDGE SOST TARGET
User 1,000 SOST
atomic swap · H = sha256(s)
Native Reserve+1,000 SOST
Atomic Vault−1,000 wSOSTfrom inventory
existing wSOST
User ETH wallet +1,000 wSOST

Return: reverse swap; wSOST goes back to the inventory. totalSupply fixed; circulating changes.

There is no single vault that lives on both chains at once: there are two states on two chains, and a mechanism that must connect them safely.

PropertyModel A · lock / mintModel B · SOST Atomic Bridge
Entrylock + mintswap + release from inventory
Exitburn + releasereturn to inventory + release
wSOST total supplyvariablefixed after premint
Circulating supplyvariablevariable
Premint requirednoyes
Native reserveyesyes
Atomic swaps centralnoyes
Mint authority riskyes — unbounded except by capschanged: release authority, bounded by the inventory and the caps
Native vault riskyesyes
Automatic returnpossibledesign objective (permissionless settlement on Ethereum)
Liquidity poolnono
Human operator per operationgoal: nogoal: no
Trustless todaynono
Production readynono
NEITHER IS AUTOMATICALLY TRUSTLESS
Neither architecture is automatically trustless. The security of both ultimately depends on how native SOST custody and cross-chain verification are implemented.

How does this compare with existing systems?

DIAGRAM 8 · WHO VERIFIES · WHO CONTROLS THE VAULT · WHERE LIQUIDITY COMES FROM
ATOMIQ
Bitcoin light client on the smart chain: PoW, difficulty adjustment and most-work fork choice checked on-chain; anyone submits headers
UTXO-controlled vault: LP liquidity released only against a verified Bitcoin transaction; withdrawals chained one UTXO at a time; watchtowers submit proofs permissionlessly

Like SOST: UTXO chain, vault, atomic settlement, withdrawals tied to UTXO state, less reliance on custodial signers. Unlike: Atomiq verifies Bitcoin PoW on the destination chain and releases LP liquidity; SOST uses preissued wSOST and 1:1 native reserve accounting, and has no SOST light client yet.

THORCHAIN
Validator network (bonded RUNE) witnesses deposits through Bifröst
Native asset vaults under threshold signing (TSS; docs describe Asgard 27-of-40) · liquidity pools priced by arbitrage

Native assets, no wrapping — but it relies on a dedicated validator set and pools. Not equivalent to the SOST design.

CHAINFLIP
150 validators witness every supported chain; a State Chain keeps the accounting
Vaults under an aggregate key, FROST threshold signing 100 of 150 · JIT AMM liquidity

Solves vault control with a dedicated validator network — the opposite approach to a light client of the source chain.

SOST ATOMIC BRIDGE (TARGET)
Engine authorization today for the entry release; a SOST light client on Ethereum is research
Native reserve: single cold key → V17 3-of-5 → non-discretionary rules (unsolved) · no liquidity pool, inventory 1:1

Aims to avoid a separate validator network for every conversion. Not claimed to be more secure, more advanced or novel.

AtomiqTHORChainChainflipSOST Atomic Bridge
Source-chain verificationon-chain light clientvalidators witnessvalidators witnessengine today; light client = research
Vault controlverified UTXO transactionsTSS validator setaggregate key, 100/150cold key → V17 3-of-5 → ?
LiquidityLPspoolsJIT AMMnone (inventory)
Separate validator networknoyesyesno
Could SOST do what Atomiq does — let Ethereum verify SOST?

It is a research question, not a plan. ConvergenceX has a compact transcript proof that a node checks in about 10–20 ms without the 4 GB dataset, so a light client is not ruled out — but reproducing it and the cASERT difficulty rules in the EVM has not been measured and is expected to be expensive; an optimistic header relay with a challenge window is the likelier first step. In the Atomic Bridge, proofs would no longer be needed for every exchange; their role would be the entry release, public reserve verification, settlement checks, reorg detection and recovery.

Sources: Atomiq · UTXO-controlled vault; Atomiq · Bitcoin light client; Chainflip · protocol overview; THORChain · Bifröst, TSS and vaults. Parameters of other systems change over time.

When would the Atomic Bridge count as proven?

1 · SOST → wSOST automaticNOT PROVEN
2 · wSOST → SOST automaticNOT PROVEN
3 · no human approval per operationNOT PROVEN
4 · no arbitrary reserve withdrawalDESIGNED (C705) · NOT BUILT
5 · safe refundsNOT PROVEN
6 · reorg safeNOT PROVEN
7 · replay safeNOT PROVEN
8 · 1:1 accounting, permanentlyNOT PROVEN
9 · concurrent operations safeNOT PROVEN
10 · recovery after service failureNOT PROVEN
THE DECISIVE TEST
500 SOST → 500 wSOST, then 500 wSOST → 500 SOST, without asking any operator for permission and keeping 1:1 backing. First as a testnet-only proof of concept with 100 fictitious preminted wSOST: entry, exit, counterparty disappears, deadline ordering, engine stops, secret replay, concurrent swaps, reserve insufficient, reorg, attempted reserve theft. POC NOT STARTED With today's primitives the “attempted reserve theft” test is expected to fail — which is exactly what the research must change. Until all of it is shown: ATOMIC RESERVE VAULT = RESEARCH ONLY.
En pocas palabras · investigación / desarrollo · no activo. SOST no pretende emitir un wSOST nuevo en cada operación del puente. La arquitectura objetivo usa una reserva de wSOST preemitidos e inmovilizados y atomic swaps en ambos sentidos: al entrar, tus SOST pasan a la reserva nativa y recibes wSOST que ya existían; al salir, tus wSOST vuelven al inventario y recibes los mismos SOST. El respaldo se mide contra los wSOST en circulación. El XAUT del Gold Access Key va aparte a Gold Reserve V2 y no respalda wSOST. El problema principal es que la reserva nativa de SOST no dependa de la discreción de nadie y siempre pueda rescatarse de forma segura: la investigación (C705) muestra que puede no tener ninguna clave, pero hacen falta dos reglas de consenso nuevas que no están en V17.
SOST ATOMIC BRIDGE · DEMO DASHBOARD

SOST ↔ wSOST 1:1

STATUS: RESEARCH / DEVELOPMENT · NOT ACTIVE · NOT YET PROVEN
⚠ DEMO MODE· no contract is deployed · no wallet is connected · no transaction is created or simulated as real · real operations are blocked until an approved SOST/EUR valuation exists
SEND · native SOST
SOST
RECEIVE · on Ethereum
1,000wSOST
Always the same amount: 1 SOST into the native reserve = 1 existing wSOST released from the vault inventory. No mint. The XAUT contribution never reduces it.
GOLD ACCESS KEYXAUT required
0.10% of the value · min 0.50 EUR · max 250 EUR · 0.000135–0.067329 XAUT at the demo price
DESTINATIONGOLD RESERVE V2 · 100% of the Gold Access Key
ETHEREUM GASestimated cost · paid by you in ETH
XAUT approval + request with XAUT escrow + claim of the wSOST (three transactions; estimate not yet measured for the Atomic Vault). Gas of the conventional prototype for comparison: ≈ 385,000 gas, ≈ 0.0039 ETH at 10 gwei. Your wallet shows the real figure before you sign.
SOST NETWORK FEEnormal fee of your SOST HTLC lock (SOST wallet)
MINIMUM100 EUR per operation · below that the bridge refuses
  1. 1REQUEST + XAUT ESCROW
  2. 2SOST HTLC LOCK
  3. 3CONFIRMATIONS
  4. 4VAULT HTLC READY
  5. 5CLAIM wSOST
  6. 6RESERVE CLAIM
INTO NATIVE RESERVE
0
RELEASED wSOST
0
XAUT → RESERVE
0
The two left figures are always equal once a swap completes (1:1); the wSOST come from the preissued inventory, none is minted. The XAUT figure uses the fee simulator below; the demo moves nothing.
DEMO. Press PREPARE CONVERSION to walk through the states. Nothing is sent anywhere.
GOLD RESERVE V2

Receives every Gold Access Key: escrowed from your wallet when you open the request, paid when you claim your wSOST. It issues nothing, allows no arbitrary withdrawal and provides no liquidity. NOT DEPLOYED NO FUNDS

The gold of the reserve is restricted external ecosystem wealth. It gives no individual right of redemption and does not guarantee the price of SOST.

CONVERSION STATES
  1. Request created
  2. Waiting for your SOST HTLC
  3. Verifying blockchain
  4. SOST HTLC confirmed
  5. Vault HTLC ready (existing wSOST)
  6. Waiting for your claim (MetaMask)
  7. Reserve claims the SOST
  8. Completed
  9. Refund path
  10. Security error

Backing — what wSOST is and is not

EXAMPLE 1,000 SOST ──▶ native reserve 1,000 existing wSOST ──▶ you (atomic swap) Native SOST is NEVER burned. wSOST is preissued once and immobilized; only released wSOST circulate. Backing rule: CIRCULATING wSOST <= CONFIRMED NATIVE SOST RESERVE (equal after every swap) NOT: totalSupply(wSOST) <= reserve (totalSupply includes the immobilized inventory)
THE XAUT CONTRIBUTION IS NOT BACKING
The Gold Access Key in XAUT is NOT backing of SOST or of wSOST, NOT a peg, NOT a price floor, NOT a price guarantee, NOT a redemption promise and NOT 1:1 gold backing. The gold held by Gold Reserve V2 gives no individual redemption right. The only backing of circulating wSOST is the native SOST in the reserve.

Gold Access Key — fee simulator

FORMULA
feeEUR = min(250, max(0.50, bridgeValueEUR × 0.001)) · feeXAUT = feeEUR / XAUT price, rounded up to XAUT's 6 decimals (verified on the official XAUT contract). Minimum operation 100 EUR. Paid in XAUT, 100% to Gold Reserve V2. Ethereum gas is separate and paid by you. The return wSOST → SOST has no XAUT fee. Not free, and never presented as free.
FIXED, DATED PRICE — NOT A QUOTE
The simulator uses 1 XAUT = 3,713.13 EUR, a fixed illustrative value dated 2026-10-19. It is illustrative only: not live, not a quote and not an offer, and the simulator creates no transaction. A real operation would use a signed, fresh, bounded XAUT/EUR price. The bridge value in EUR is a number you type here: SOST has no approved EUR valuation methodology, so real operations stay blocked. The informational SOST gold reference (0.8886707657 mg) is not a market price and is never used for fees.
FEE (EUR)
1.00
FEE (XAUT)
0.000270
RESULT
ALLOWED (demo calculation)

Twenty examples (1 XAUT = 3,713.13 EUR, fixed demo price)

Bridge valueContribution to the reserve (EUR)XAUT (6 dp, rounded up)Effective rateEthereum gasResult
0 EUR————NOT AVAILABLE · BELOW MINIMUM
10 EUR————NOT AVAILABLE · BELOW MINIMUM
50 EUR————NOT AVAILABLE · BELOW MINIMUM
100 EUR0.500.0001350.50%separate, paid in ETHallowed (minimum fee)
250 EUR0.500.0001350.20%separate, paid in ETHallowed (minimum fee)
500 EUR0.500.0001350.10%separate, paid in ETHallowed
750 EUR0.750.0002020.10%separate, paid in ETHallowed
1,000 EUR1.000.0002700.10%separate, paid in ETHallowed
1,500 EUR1.500.0004040.10%separate, paid in ETHallowed
2,000 EUR2.000.0005390.10%separate, paid in ETHallowed
3,000 EUR3.000.0008080.10%separate, paid in ETHallowed
5,000 EUR5.000.0013470.10%separate, paid in ETHallowed
7,500 EUR7.500.0020200.10%separate, paid in ETHallowed
10,000 EUR10.000.0026940.10%separate, paid in ETHallowed
15,000 EUR15.000.0040400.10%separate, paid in ETHallowed
25,000 EUR25.000.0067330.10%separate, paid in ETHallowed
50,000 EUR50.000.0134660.10%separate, paid in ETHallowed
100,000 EUR100.000.0269320.10%separate, paid in ETHallowed
500,000 EUR250.000.0673290.05%separate, paid in ETHallowed (maximum fee)
1,000,000 EUR250.000.0673290.025%separate, paid in ETHallowed (maximum fee)
WHY 0.10% · MIN 0.50 EUR · MAX 250 EUR
Other bridges price something different — relayer capital, liquidity, gas, risk — and their fees vary by route and size, so no other bridge's fee is directly comparable to this contribution. The design choice is: 0.10% so that the reserve grows in proportion to use; a 0.50 EUR minimum that only matters below 500 EUR and stays below the Ethereum gas of the same operation; and a 250 EUR cap, reached at 250,000 EUR, so very large operations are not punished (1,000,000 EUR pays an effective 0.025%) while still contributing meaningfully — the earlier 50 EUR cap would have meant 0.005%. None of it is revenue: 100% goes to Gold Reserve V2, and the return wSOST → SOST pays no contribution. DESIGN PARAMETER · NOT ACTIVE

Return — wSOST → native SOST

1 · LOCK wSOST
Any legitimate wSOST holder can use the return — including wSOST bought on an exchange. You lock N wSOST in the vault's exit HTLC with your own secret's hash (you pay the gas). No XAUT is charged.
2 · RESERVE FUNDS A SOST HTLC
After Ethereum finality, the native reserve locks N SOST (minus the SOST network fee) in a SOST HTLC with the same hash, claimable only by your sost1… address.
3 · CLAIM & SETTLE
You claim the SOST with your secret. Anyone can then use the revealed secret to return your N wSOST to the immobilized inventory. No burn.
HONEST LIMIT TODAY
SOST native multisig is not active, so the native reserve could only be a single cold key and exits would not be automatic. Even with the V17 3-of-5 multisig, the signers decide off-chain to fund an exit and could move the reserve: the custody problem in Diagram 7 is unresolved with today's rules. The keyless design (Diagram 7b) removes it but needs a consensus upgrade, which is why the bridge is not ready for production.

In plain words

Research / development · not active · not yet proven. SOST does not intend to mint a new wSOST for every bridge operation. The target architecture uses a preissued, immobilized wSOST reserve and bidirectional atomic swaps: your native SOST goes into the native reserve and you receive wSOST that already existed; on the way back your wSOST returns to the inventory and you receive the same SOST (native SOST is never burned). To complete a conversion you make a small contribution in XAUT to Gold Reserve V2; gas and network costs are shown separately. The XAUT contribution is not backing, not a peg, not a price floor and not a redemption promise; the gold of the reserve gives no individual right of redemption and does not guarantee the price of SOST. The principal problem is making the native reserve non-discretionary and safely redeemable: research (C705) shows it can be done with no key at all, but it needs two new SOST consensus rules that are not in V17.
Investigación / desarrollo · no activo · no demostrado. SOST no pretende emitir un wSOST nuevo en cada operación del puente. La arquitectura objetivo usa una reserva de wSOST preemitidos e inmovilizados y atomic swaps en ambos sentidos: tus SOST nativos pasan a la reserva nativa y recibes wSOST que ya existían; a la vuelta tus wSOST regresan al inventario y recibes los mismos SOST (el SOST nativo nunca se quema). Para completar una conversión realizas una pequeña aportación en XAUT a Gold Reserve V2; el gas y los gastos de red se muestran aparte. La aportación en XAUT no es respaldo, ni paridad, ni precio mínimo, ni promesa de reembolso; el oro de la reserva no da derecho individual de reembolso ni garantiza el precio de SOST. El principal problema es que la reserva nativa no dependa de la discreción de nadie y pueda rescatarse siempre de forma segura; la investigación C705 propone una reserva sin clave que necesita dos reglas de consenso nuevas, fuera de V17.
REFERENCE MODEL · HOW A CONVENTIONAL BRIDGE WORKS

The conventional lock / mint bridge, question by question

REFERENCE · NOT THE SOST TARGET · NOT ACTIVE · NOT DEPLOYED ON ANY MAINNET
REFERENCE · CONVENTIONAL LOCK / MINT MODEL
This section describes the conventional lock → mint / burn → release model and the C701/C703 prototype built for it. It is not the SOST target architecture — that is the SOST Atomic Bridge. It is kept because its components (verification, single use, recovery states, Gold Access Key, Gold Reserve V2, tests) are reused.
HOW IT WORKS
You lock native SOST in the Bridge Vault; an automated engine verifies the deposit on the SOST chain; you sign one Ethereum transaction that pays the Gold Access Key in XAUT to Gold Reserve V2 and mints the same amount of wSOST to you. Going back, you burn wSOST and the vault releases the same SOST.
WHY SOST IS LOCKED
So that every wSOST has exactly one native SOST behind it. Native SOST is never burned and no new SOST is ever created by the bridge: the coins wait in the vault until someone burns the matching wSOST.
WHY wSOST IS MINTED
Ethereum wallets, exchanges and applications cannot hold native SOST. wSOST is the Ethereum-side representation: an ERC-20 minted only against a verified lock, 1 for 1, and burned on return.
WHAT XAUT DOES
XAUT (tokenized gold) pays the Gold Access Key: 0.10% of the operation value, min 0.50 EUR, max 250 EUR. It moves from your wallet straight to Gold Reserve V2 in the same transaction as the mint. It is a cost of access, not backing of wSOST.
WHAT GOLD RESERVE V2 IS
An Ethereum contract that receives XAUT from completed conversions, publishes every deposit and its balance, allows no arbitrary withdrawal, and can only be paused, rescued to a pre-named quarantine vault, or migrated under guardian + holder rules.
WHAT GOLD RESERVE V2 IS NOT
Not a liquidity pool. It receives no SOST, issues no SOST or wSOST, keeps no peg, sets no price floor, guarantees no price and gives no holder an individual right to the gold. It is separate from the historical Gold Vault.
WHO PAYS GAS
You do: Ethereum gas in ETH for the mint (and for the burn on return), plus the normal SOST network fee of your deposit. SOST does not advance ETH or buy wSOST for anyone. All costs are shown before you sign.
WHY NO LIQUIDITY POOL IS NEEDED
Nobody has to pay you from pre-funded capital: the wSOST you receive is minted against your own locked SOST. So there is no LP capital, no rebalancing fee, no slippage, and the amount is always exactly 1:1.
HOW AUTOMATIC VERIFICATION WORKS
The engine runs its own SOST node. It finds the deposit by its capsule C701:0x<request id> and checks the vault address, the exact amount, the request, the Ethereum recipient, 30 confirmations, that the output is unspent and never used before. Only then it signs one EIP-712 authorization.
WHY A HASH ALONE IS NOT PROOF
A transaction hash says nothing about who should receive wSOST, and anyone can copy it. The bridge never mints because of a hash: it uses it only as a lookup key in recovery. The proof is the engine's own reading of the chain plus an authorization bound to one recipient, amount and deposit.
WHAT HAPPENS IF SOMETHING FAILS
On Ethereum, the XAUT payment and the mint are one transaction: both or neither. Across the two chains it is not atomic, so a locked deposit without a mint stays pending, can be re-authorized, or refunded after the request is revoked on Ethereum. See Example 4.
HOW wSOST RETURNS TO SOST
Any wSOST holder — including one who bought on an exchange — burns wSOST with a SOST address; after the burn is final the vault releases the same amount minus the SOST network fee. No XAUT on the return.
SECURITY MODEL
Authorizations bound to chain id, contract, recipient, amount, deposit, expiry and nonce; each deposit usable once; per-mint, daily and total caps; signed, fresh, bounded prices; reconciliation that pauses minting; separate keys for minting, prices and administration; 2-day timelock on configuration; an event log the engine only appends to (an enforced append-only audit trail is still to be built).
CENTRALIZATION LIMITATION
Ethereum cannot read the SOST chain, so in the first version a single automated verification component decides that a deposit is real. That is a central point of trust: the bridge is not trustless. A stolen verifier key must not be able to mint unbacked wSOST; until that is demonstrable, the bridge stays off.
FUTURE: V17 MULTISIG
Native SOST multisig is planned for V17 (block #40,000). The target is a 3-of-5 Bridge Vault, with vault spending keys separate from the Ethereum authorization key, so that compromising one does not compromise the other. Until then the vault could only be a single cold key.
AUDIT STATUS
Not audited. Contracts and engine exist as development prototypes with tests (Foundry 87/87, engine 25/25), on a development branch only. An independent security audit and a legal / regulatory review are open blockers.

State machine

Every conversion moves through these states. The names in the first column are the design names; the prototype uses the names in the second.

Design statePrototype stateMeaning
CREATEDREQUEST_CREATEDrequest id bound to recipient, amount, chains, contract, expiry
WAITING_SOSTAWAITING_SOSTwaiting for the deposit with the request's capsule
SOST_SEEN · CONFIRMINGVERIFYINGdeposit found; counting confirmations and checking every field
SOST_FINALDEPOSIT_CONFIRMED30 confirmations, output unspent, never used
AUTHORIZEDAUTH_READYone EIP-712 authorization, valid 30 minutes
WAITING_ETHEREUMAWAITING_METAMASKwaiting for the user's single Ethereum transaction
MINTEDMINTINGXAUT → Gold Reserve V2 and wSOST → user in one transaction
COMPLETEDCOMPLETEDboth transaction ids published
EXPIREDEXPIREDno deposit before the request expired: nothing to recover
PAUSED(minting paused by reconciliation or a pauser)no new mints; burns and releases continue
RECOVERY_PENDING · REFUND_ELIGIBLEPENDING_RECOVERYdeposit that cannot be minted (mismatch, no capsule, expiry)
REFUNDEDREFUND_PREPARED → REFUNDEDrequest revoked on Ethereum first, then the SOST are returned
SECURITY_HOLDSECURITY_ERRORreorg after authorization or an inconsistency: the engine stops
NEVER BOTH
No operation can end REFUNDED and MINTED: a refund requires the deposit to be revoked on Ethereum first, and a revoked deposit can never be minted.
REFERENCE MODEL · WORKED EXAMPLES

Lock / mint and Gold Reserve V2, step by step

REFERENCE · NOT THE SOST TARGET · EVERY FIGURE BELOW IS ILLUSTRATIVE
REFERENCE · CONVENTIONAL LOCK / MINT MODEL
This section describes the conventional lock → mint / burn → release model and the C701/C703 prototype built for it. It is not the SOST target architecture — that is the SOST Atomic Bridge. It is kept because its components (verification, single use, recovery states, Gold Access Key, Gold Reserve V2, tests) are reused.

The Atomic Bridge versions of these flows are in Diagram 2 (entry), Diagram 3 (exit) and Diagram 6 (failures). The Gold Access Key amounts below are the same in both models.

READ FIRST
All examples use the fixed demo price 1 XAUT = 3,713.13 EUR (2026-10-19) and a EUR value chosen by the user for the example. SOST has no approved EUR valuation; these are not prices of SOST, not quotes and not offers. No contract is deployed and none of these operations can be executed today.

Example 1 · Ana converts 1,000 SOST

Ana mined 1,000 SOST. For the example she values them at 1,000 EUR. 1. REQUEST Ana types 1,000 SOST and her MetaMask address 0xA1… The bridge creates request id R-7f3a, bound to: her Ethereum address, 1,000 SOST, Ethereum chain id, the bridge contract, an expiry. 2. DEPOSIT Her SOST wallet sends 1,000 SOST to the Bridge Vault with capsule C701:0x7f3a… She pays only the normal SOST network fee. 3. VERIFY The engine reads the SOST chain itself (no hash typed by anyone): right vault · exactly 1,000 SOST · capsule = R-7f3a · 30 confirmations · output unspent · deposit never used before. 4. AUTHORIZE One EIP-712 signature for: chain, contract, 0xA1…, 1,000, deposit txid:vout, expiry, nonce. It is useless for any other address, amount or deposit. 5. SIGN In MetaMask Ana approves 0.000270 XAUT (Gold Access Key: 0.10% of 1,000 EUR = 1.00 EUR) and signs ONE Ethereum transaction that: • moves 0.000270 XAUT from her wallet straight to Gold Reserve V2 • mints exactly 1,000 wSOST to 0xA1… Both happen or neither happens. Gas ≈ 0.0039 ETH at 10 gwei, paid by Ana. RESULT Ana: 1,000 wSOST Bridge Vault: +1,000 SOST locked Gold Reserve V2: +0.000270 XAUT wSOST supply: +1,000 Ana loses no SOST: 1 SOST locked = 1 wSOST minted.

Example 2 · small and very large operations

WhoValue (example)Gold Access KeyXAUTEffectiveReceives
Luis, first conversion100 EUR0.50 EUR (minimum)0.0001350.50%same SOST amount in wSOST
Carlos10,000 EUR10.00 EUR0.0026940.10%same SOST amount in wSOST
Marta25,000 EUR25.00 EUR0.0067330.10%same SOST amount in wSOST
A fund1,000,000 EUR250.00 EUR (maximum — the cap applies from 250,000 EUR)0.0673290.025%same SOST amount in wSOST
Pablo60 EUR———REFUSED · below 100 EUR (refused before any deposit)

Example 3 · Ben returns wSOST he bought on an exchange

Ben never held native SOST. He bought 5,000 wSOST on an exchange. 1. Ben enters 5,000 wSOST and his address sost1b3n… 2. He burns 5,000 wSOST on Ethereum (he pays the gas). NO XAUT is charged. The contract publishes the burn with a unique release id. 3. The engine waits until the burn is final on Ethereum, then the Bridge Vault releases 5,000 SOST to sost1b3n…, minus only the normal SOST network fee of that transaction, with capsule C701R:0x<release id> so anyone can match it to the burn. RESULT Ben: 5,000 native SOST Bridge Vault: −5,000 SOST wSOST supply: −5,000 Gold Reserve V2: unchanged (the return never pays, and never takes, gold) Ben did not have to be the original depositor.

Example 4 · when something goes wrong

SituationWhat the bridge doesThe user's money
SOST sent, but the Ethereum step is never executedPENDING: the authorization expires after 30 min; a new one can be issued for the same deposit, or the user asks for a refundthe SOST stay locked for that request; nothing is minted
Not enough XAUT for the Gold Access Keythe Ethereum transaction reverts as a whole: no XAUT moves and no wSOST is minted; the user tops up XAUT and retriesSOST locked; only the gas of the failed attempt is spent
Not enough ETH for gasMetaMask refuses to send; nothing happens on EthereumSOST locked; retry when ETH is available
Price quote expiredthe contract refuses a stale quote; the engine issues a fresh quoteSOST locked; the new XAUT amount is shown before signing
Ethereum congested / transaction reverteda reverted transaction changes nothing; the user resubmits with a higher fee or laterSOST locked; nothing minted
Ana sent 990 SOST instead of 1,000amount mismatch → PENDING RECOVERY; no mintrefund of the 990 SOST to the sending address, after the request is revoked on Ethereum
Someone tries to reuse Ana's depositrefused: each deposit (txid, vout) can be consumed once, checked on-chain; a pasted hash is only a lookup keyuntouched
The SOST chain reorganizes after authorizationSECURITY HOLD: the engine stops issuing authorizations and the case is reviewedno wSOST without a final deposit
The verification service is offlineno authorizations are issued; on restart it re-reads the chain and continueslocked SOST stay locked; burns keep working
wSOST burned, SOST not yet releasedthe burn is recorded on Ethereum with its release id; the release is pending until signed and recordedthe obligation is public and counted as outstanding
Locked SOST and wSOST supply ever disagreereconciliation pauses minting automaticallyreturns (burn → release) stay available
THE ONE RULE OF REFUNDS
A deposit is refunded only after its request has been revoked on Ethereum, so nobody can ever keep both the refunded SOST and the wSOST.

Example 5 · how Gold Reserve V2 would grow

An illustrative month with 300 completed conversions:

OperationsValue each (example)Key eachXAUT eachXAUT to the reserve
2001,000 EUR1.00 EUR0.0002700.054000
8010,000 EUR10.00 EUR0.0026940.215520
1850,000 EUR50.00 EUR0.0134660.242388
21,000,000 EUR250.00 EUR0.0673290.134658
3003,900,000 EUR bridged2,400 EUR—0.646566 XAUT (≈ 2,400 EUR at the demo price)
Gold Reserve V2 after the month +0.646566 XAUT (every deposit public on Ethereum) Bridge Vault = SOST locked = wSOST supply (checked continuously) New SOST emitted by the bridge 0 Historical Gold Vault / DTD Jackpot untouched

The reserve grows only with real use of the bridge. The gold stays in the reserve under its own rules: it is not paid out to anyone, it backs neither SOST nor wSOST, and it gives no holder a redemption right. Growth of the reserve does not guarantee any price of SOST.

Example 6 · the two reserves are never the same thing

Historical Gold VaultGold Reserve V2
WhereSOST chain (consensus)Ethereum (smart contract)
HoldsSOST from blocks 0–24,999 (25% of each block)tokenized gold (XAUT) only
Fed bynothing since #25,000 (0% of new emission)the Gold Access Key of each completed bridge operation (+ voluntary contributions)
Used forfrozen by consensus; pays the DTD Jackpotheld; no liquidity, no arbitrary withdrawal, emergency rules only
StatusLIVE · FROZENNOT DEPLOYED
COMPARISON

How the SOST Atomic Bridge differs from most bridges

Most cross-chain bridges belong to one of five families. They differ in who decides that a deposit is real, where the money for the other side comes from, and who keeps the fee.

1 · CUSTODIAN / MULTISIG LOCK-AND-MINT
A company or a small group of keys holds the original coins and mints the wrapped token. Example: WBTC (custodian-held BTC). What went wrong elsewhere: Ronin (March 2022) — attackers obtained 5 of its 9 validator keys and took about 625 million USD; Harmony Horizon (June 2022) — 2 of 5 multisig keys, about 100 million USD.
2 · LIQUIDITY NETWORKS
No wrapping: pools or relayers on the destination chain pay you from their own capital, and are repaid later. Examples: Stargate (a per-transfer fee shared by treasury, token holders and LPs, plus pool rebalancing), Across (an LP fee set by the protocol plus a relayer fee for gas, capital and risk), Hop, Synapse. Fees pay the capital, so they vary by route and size.
3 · GUARDIAN / MESSAGING NETWORKS
An external set of validators signs messages that let a contract mint on the other side. Examples: Wormhole (a guardian set, 13 of 19 signatures), LayerZero (verifier networks). What went wrong: Wormhole (February 2022) — a signature-verification bug let an attacker mint 120,000 wrapped ETH without a deposit.
4 · ISSUER BURN-AND-MINT
The issuer of the asset burns it on one chain and mints it on the other. Example: Circle CCTP for USDC — almost free (destination gas only) because the issuer itself attests. Only possible for the issuer's own token.
5 · CANONICAL ROLLUP / LIGHT-CLIENT
The destination chain verifies the source chain's state itself. Example: the Optimism Standard Bridge — deposits in minutes, withdrawals after a 7-day challenge window. The most trust-minimized model, but it exists only where one chain can verify the other.
SOST ATOMIC BRIDGE (TARGET)
Atomic swaps between native SOST and a preissued, immobilized wSOST inventory: no mint per operation, no burn on the return, no liquidity pool, no outside federation or validator network, and a Gold Access Key in XAUT that goes 100% to Gold Reserve V2. In its keyless form (C705) it joins family 5: the vault releases only against a proof of a SOST deposit, and SOST pays only against a proof of an Ethereum return — no key, no multisig. Honest limits: that needs two new SOST consensus rules and a SOST header relay on Ethereum, none built — which is why it is not approved for production.

Comparison table

 Custodian / multisigLiquidity networkGuardian / messagingIssuer burn-mintRollup / light clientSOST Atomic Bridge (target)
ExampleWBTC, Ronin, HorizonStargate, Across, HopWormhole, LayerZeroCircle CCTPOptimism Standard BridgeSOST ↔ wSOST (target)
Trust assumptioncustodian or N-of-M key holderspool and relayer contracts; relayers are repaidan external guardian / verifier setthe issuerthe destination chain verifies the source chaintarget (C705): each chain verifies the other — SOST proof of work for deposits, Ethereum’s sync committee for returns; no key holder
External operatorscustodian, signersrelayers, LPsguardians / verifiersissuernone beyond the chains (proposers, challengers)none: no outside federation, no validator network
Liquidity requirementnoyes — pools on each sideno (wrapped) / yes (some routes)nonono
Capital requirementcustody of the originalsLP and relayer capitalnone for wrappingnonenonenone: a preissued wSOST inventory, released only against SOST received
Amount received1:1 minus feesamount minus fees; may vary with pool balance1:1 minus fees1:11:1exactly 1:1; the contribution is paid apart in XAUT
Fee structurecustodian / merchant feesLP + relayer (+ rebalancing) fees, variable by routemessaging / relayer feesdestination gasgasGold Access Key 0.10% (min 0.50, max 250 EUR) → 100% to Gold Reserve V2; return free of it
Finalitycustodian’s policyrelayer fills fast; settles laterguardian finality policyissuer attestationchallenge window (e.g. 7 days to withdraw on the Optimism Standard Bridge)30 SOST confirmations / Ethereum finality (≈13 min); one entry deadline on Ethereum
Recoverycustodian processslow fill by LP capital; refundsmanual redeem / governanceissuerforced withdrawal through the source chainanyone cancels after the deadline; the deposit refunds to its fixed address
User types a tx hash?sometimesnosometimes (manual redeem)nonono — the wallet or any relayer carries the proofs
Security model / main riskkey holderspool / relayer contractsguardian keys, verification bugsthe issuerproof system, long exita very deep SOST reorg (concentrated mining → capped amounts), the sync committee, code correctness
Statusin production on their networksDESIGN · NOT ACTIVE

No model is universally better: each trades trust, capital, speed and cost differently. Light-client and rollup bridges minimize trust but need one chain to verify the other; liquidity networks are fast but need capital; issuer bridges work only for the issuer’s own token. The SOST Atomic Bridge avoids capital, pools and outside operators at the price of an engine-authorized entry release and an unsolved native custody problem.

What SOST does differently — and what it does not claim

DIFFERENT
  • the fee builds a public gold reserve instead of paying LPs, relayers or a treasury;
  • no mint per operation: a preissued, immobilized inventory is released and returned through atomic swaps;
  • the gold payment is escrowed first and paid with the claim: no wSOST without it, and it returns if the swap expires;
  • no pool, no slippage, no rebalancing fee: always exactly 1:1;
  • the fee has a cap, and the return trip is free of it;
  • no hash to copy: your wallet holds the swap secret, and a pasted hash proves nothing;
  • no human approves operations and no outside federation signs them.
NOT CLAIMED
  • not trustless: Ethereum cannot read SOST; the engine authorizes the entry release and the native reserve signers are a central point of trust;
  • not novel: related ideas such as UTXO-controlled vaults already exist (Atomiq);
  • not safer than a light-client bridge, and not universally better than any model; not audited;
  • the XAUT is not backing, not a peg, not a floor and not redeemable by holders;
  • not free: the Gold Access Key is a real, irreversible cost;
  • not active: 9 blockers are open (see Open blockers).
En resumen. La mayoría de los puentes cobran una comisión que se queda alguien (proveedores de liquidez, relayers, la tesorería o los tenedores de su token), y muchos dependen de un grupo externo de claves o de una bolsa de liquidez. El puente SOST propuesto bloquea SOST nativo y emite exactamente la misma cantidad de wSOST, sin bolsa de liquidez, y la aportación en XAUT (0,10 %, mínimo 0,50 €, máximo 250 €) va íntegra a Gold Reserve V2 dentro de la misma transacción. La vuelta no paga aportación. A cambio, su primera versión depende de un único verificador automático de SOST: no es un puente sin confianza y no se activará hasta cerrar los 8 bloqueos publicados.

Sources: Across documentation (fees); Stargate documentation (protocol fees); Wormhole, Circle CCTP and Optimism documentation; public post-mortems of the Ronin, Harmony Horizon and Wormhole incidents. Other bridges change over time; descriptions are for orientation only.

BRIDGE

What is wSOST?

RESEARCH NOT DEPLOYED

wSOST is not another coin. It is a token on Ethereum that represents native SOST one-for-one. The SOST it represents stays on the SOST blockchain, locked in a dedicated Bridge Vault, until the wSOST is turned back into SOST.

CANONICAL RULE
1 wSOST = 1 native SOST locked

Example — John wraps 500 SOST

JOHN HAS 1,000 SOST John wraps 500 SOST 500 SOST ──LOCK──▶ Bridge Vault (SOST chain) ══▶ 500 wSOST (Ethereum) RESULT 500 SOST remain native in John's wallet 500 SOST are locked in the Bridge Vault 500 wSOST exist on Ethereum NO NEW SOST WAS CREATED. The same 1,000 SOST still exist.

Example — John unwraps 200 wSOST

John burns 200 wSOST (Ethereum) 200 wSOST destroyed ══▶ 200 native SOST released from the Bridge Vault (minus the SOST network fee)
PERMANENT SOST INVARIANT
Only wSOST is burned during unwrap. Native SOST is never burned.

How a deposit would work (design)

sost-cli send <BRIDGE_VAULT> 500 --capsule-mode open-note \ --capsule-text "C701:0x<requestId>" # 71 of the 80 open-note bytes

The deposit carries a capsule (a data field active on SOST since block 7,350) with the id of your bridge request. That id is a public hash of the Ethereum recipient, the amount, the chain and the bridge contract, so your SOST signature binds the deposit to exactly that request. No consensus change, no new transaction type.

Why wSOST would exist

Integrating a brand-new Layer-1 is real work for wallets and exchanges; Ethereum and ERC-20 tokens are already integrated almost everywhere. wSOST would make SOST reachable from:

  • Ethereum wallets;
  • DEX liquidity pools and therefore public price discovery;
  • exchanges where ERC-20 support reduces Layer-1 integration work;
  • future DeFi compatibility.
WHAT IT DOES NOT DO
wSOST may reduce technical integration friction, but listing, liquidity, legal review and exchange due diligence remain independent requirements. It guarantees no listing anywhere.
ACCESS LAYER

Why wSOST — and why native SOST stays the real asset

RESEARCH NOT DEPLOYED

The integration barrier

One practical barrier to wider SOST market access is the technical burden a centralized exchange faces when it integrates a new, independent Layer-1 blockchain. Listing native SOST would require the exchange to:

  • run and maintain a SOST full node;
  • integrate SOST deposits and withdrawals;
  • implement a SOST-specific confirmation and reorganisation policy;
  • monitor wallet and node infrastructure around the clock;
  • review SOST RPC and transaction semantics;
  • build custody and operational tooling for a new chain;
  • carry the security and maintenance work specific to SOST.

Ethereum and ERC-20 infrastructure, on the other hand, is already in place at virtually every major centralized exchange: deposits, withdrawals, custody and monitoring for ERC-20 tokens are standard operations there. For such a venue, integrating an ERC-20 representation is operationally much simpler than integrating a new chain.

WHAT wSOST IS FOR
wSOST is intended to reduce integration friction for venues that already support Ethereum/ERC-20 infrastructure. It is being researched as an access layer. It does not guarantee that any exchange will list it, and listing, liquidity, legal review and exchange due diligence remain independent requirements.
native SOST → lock 1:1 → wSOST (ERC-20) → Ethereum wallets · DEX · compatible CEX infrastructure

What would be listed

The initial exchange-access target is wSOST: the representation offered to CEX and DEX venues where integrating the native SOST chain is impractical or unnecessarily complex. wSOST does not replace SOST. wSOST is designed to make SOST easier to integrate without replacing the native SOST network.

NATIVE SOST — THE CANONICAL ASSET
Native SOST remains:
  • the real Layer-1 asset;
  • the asset created and distributed by SOST consensus;
  • the asset received through mining, through normal DTD and through the DTD Jackpot;
  • the asset used for native transfers and in the SOST-side atomic swap;
  • the asset locked behind wSOST;
  • the final settlement asset when wSOST is unwrapped.
1 wSOST = 1 native SOST locked. Native SOST is the source asset; wSOST is only its external Ethereum representation. There is no independent wSOST monetary policy, no new native SOST is created by wrapping, and native SOST is never burned.

Example — John reaches an Ethereum-compatible exchange

JOHN HAS 1,000 native SOST He wraps 400 SOST RESULT 600 native SOST remain in his wallet 400 native SOST are locked in the Bridge Vault 400 wSOST are issued → he can send them to a compatible Ethereum / exchange address Later he unwraps 100: 100 wSOST are burned → 100 native SOST are released wSOST is the transport and market representation. Native SOST remains the underlying asset.

Three roles, three layers

NATIVE SOST
Canonical Layer-1 asset. Mining, DTD, Jackpot and native settlement. Created only by SOST consensus. LIVE
wSOST
1:1 Ethereum representation. Intended CEX/DEX access layer. Always backed by locked native SOST. Not a new monetary asset. PLANNED NOT DEPLOYED
GOLD RESERVE V2
External tokenized-gold reserve: XAUT first, other approved gold assets later. Does not mint SOST. Does not mint wSOST. Creates no peg and no guaranteed floor. PLANNED NOT FUNDED
MINING / DTD / ATOMIC SWAP ↓ NATIVE SOST ↓ WRAP 1:1 ↓ wSOST ↓ CEX / DEX / ETHEREUM XAUT / APPROVED GOLD → GOLD RESERVE V2 Historical Gold Vault: SEPARATE → DTD JACKPOT

Native SOST remains the canonical protocol asset. wSOST is the planned Ethereum-compatible market-access representation. Gold Reserve V2 is the planned external gold-reserve layer.

From the Genesis Gold Vault to Gold Reserve V2

The original SOST design introduced a Gold Vault concept from Genesis: part of the early block distribution accumulated in a constitutional reserve, with the long-term idea of connecting SOST with an external gold reserve. That historical architecture later changed. From block #25,000:

  • the Gold Vault receives 0% of new emission;
  • the PoPC Pool receives 0% of new emission;
  • the current block distribution is 50% miner / 50% DTD;
  • the historical Gold Vault + PoPC balances are frozen and committed to the DTD Jackpot.
THE HISTORICAL GOLD VAULT IS NOT REOPENED — ITS FUNDS ARE NOT REUSED
Gold Reserve V2 is a new and completely separate external reserve. Gold Reserve V2 is intended to continue the reserve philosophy introduced at Genesis, while preserving the historical Gold Vault exactly as committed under the current DTD Jackpot architecture. The old Gold Vault does not back wSOST, and Gold Reserve V2 does not reuse or alter its balances. HISTORICAL DTD JACKPOT RESERVE

How wSOST feeds Gold Reserve V2

wSOST and Gold Reserve V2 live on the same Ethereum infrastructure as tokenized gold such as XAUT. In the C701 design the reserve grows from one source only: the Gold Access Key each bridge user contributes in XAUT, paid straight from the user's wallet to the reserve inside the mint transaction.

N SOST locked → N wSOST issued (1:1, unchanged by the fee) small XAUT amount → Gold Reserve V2 (100% of the Gold Access Key) no new native SOST · no unbacked wSOST · no sale of wSOST from a treasury the historical Jackpot reserve is never touched

That gives the Genesis reserve philosophy a practical modern infrastructure — SOST L1 + the wSOST access layer + an external tokenized-gold reserve — while every accounting layer stays separate. DEVELOPMENT · NOT DEPLOYED

REFERENCE MODEL · USER GUIDE

How the conventional prototype would work

REFERENCE · CONVENTIONAL LOCK / MINT MODEL
This section describes the conventional lock → mint / burn → release model and the C701/C703 prototype built for it. It is not the SOST target architecture — that is the SOST Atomic Bridge. It is kept because its components (verification, single use, recovery states, Gold Access Key, Gold Reserve V2, tests) are reused.
DEVELOPMENT NOT DEPLOYED

Nothing below can be done today. It describes the C701 conventional lock/mint prototype (automated verification) — no longer the target architecture — prototyped and tested on a local development chain only. Design in development · not active · not ready for production.

1 · SOST → wSOST

1 You create a request: amount + your Ethereum address → request id (public hash) 2 Your SOST wallet sends the amount to the Bridge Vault, with the capsule C701:0x<request id> on that output 3 The verification engine would detect the deposit itself (no hash to paste) 4 It checks: right vault · exact amount · capsule = request · 30 confirmations (provisional) · output unspent · never used before 5 It signs ONE authorization bound to: chain id · bridge contract · recipient · amount · deposit txid:vout · expiry · nonce (+ a separately signed XAUT price) 6 In MetaMask you approve the XAUT Gold Access Key and send the mint transaction 7 In that single transaction the contract re-checks everything, moves the XAUT from your wallet to Gold Reserve V2 and mints exactly N wSOST to you 8 You get both proofs: the SOST deposit txid and the Ethereum transaction

A transaction hash typed by a user is only used to search or recover; it is never treated as proof. The engine always re-reads the SOST chain.

Who pays what

ActionCost
Deposit (SOST side)the normal SOST network fee of your transaction
Mint (Ethereum)Gold Access Key in XAUT (0.10%, min 0.50 EUR, max 250 EUR, 100% to Gold Reserve V2) + Ethereum gas paid by you in ETH
Send wSOST, use a DEXEthereum gas only
Return (wSOST → SOST)Ethereum gas for the burn + the published SOST network fee of the release. No XAUT.

All costs are shown before you confirm. Nothing about the bridge is free, and it is never described as free.

Do I need MetaMask?

You need an Ethereum wallet that can sign the mint transaction and hold XAUT and a little ETH for gas: MetaMask, Rabby, a hardware wallet or any EVM wallet. The wSOST recipient can be another address, but only one you control or one that explicitly supports wSOST.

2 · wSOST → SOST

RETURN 200 wSOST → destination sost1abc… Ethereum 200 wSOST burned by you (gas) · no XAUT ↓ the engine verifies the burn on Ethereum SOST the Bridge Vault releases 200 SOST minus the SOST network fee to sost1abc… (release capsule C701R:0x<release id>, publicly matchable)

If an exchange lists wSOST

An exchange that supports the wSOST ERC-20 does not have to integrate the SOST chain first, and anyone who holds wSOST — including wSOST bought on an exchange — can use the return path. Only send wSOST to an exchange that explicitly supports wSOST deposits; tokens sent to an address that does not credit them can be lost.

SOST MAINNET │ N SOST + capsule C701:<request> ▼ BRIDGE VAULT ──▶ verification engine (target: automatic, operator-run) │ 30 confirmations · one EIP-712 authorization ▼ ETHEREUM one transaction: XAUT ──▶ Gold Reserve V2 + N wSOST ──▶ you ┌──────────┼──────────┐ ▼ ▼ ▼ Ethereum DEX CEX wallet back: burn wSOST (no XAUT) → engine verifies → Bridge Vault → native SOST
MARKETS

Price discovery — the 1:1 arbitrage

RESEARCH
Native SOST offered at $0.30 wSOST trading at $0.80 buy 1 SOST at $0.30 → wrap 1:1 → receive 1 wSOST → sell near $0.80 = +$0.50 Many people do it → SOST demand ↑ · wSOST supply ↑ → prices move together

So, once the bridge is liquid and freely usable, the wSOST market price is expected to become a market reference for native SOST. Prices are not guaranteed identical: bridge risk, fees, liquidity, access restrictions and finality delays can create temporary premiums or discounts. A large, persistent gap would mean wrapping is not freely available or the bridge is impaired.

CONCEPT

Five sources of SOST value

#SourceWhat it meansStatus
1Monetary scarcityHard cap 4,669,201 SOST, smooth decaying emissionLIVE
2PoW network securityConvergenceX Proof of Work, nodes verifying every ruleLIVE
3UtilityDTD, Jackpot V2, capsules, atomic swaps, future native assetsLIVE PARTLY GATED
4Market access & liquiditywSOST on Ethereum, DEX pools, exchange integrationRESEARCH
5External Gold Reserve V2Publicly verifiable tokenized gold held by the ecosystemRESEARCH
GOLD DOES NOT SET THE PRICE
The market determines the price of SOST. A gold reserve is verifiable ecosystem wealth — like the cash a company holds, its shares can trade far above or below it.
ACCOUNTING

Five accounts — never mixed

BOX 1 · NATIVE SOST
Ordinary circulating SOST on the SOST chain. LIVE
BOX 2 · BRIDGE-LOCKED SOST
Native SOST locked specifically against wSOST. RESEARCH
BOX 3 · wSOST
The ERC-20 representation of BOX 2, one for one. RESEARCH
BOX 4 · GOLD RESERVE V2
External tokenized-gold reserve on Ethereum. RESEARCH
BOX 5 · HISTORICAL GOLD VAULT + PoPC
Legacy SOST reserve already committed to the DTD Jackpot. HISTORICAL FROZEN · LIVE
RULE
THESE FIVE BALANCES MUST NEVER BE COMBINED OR DOUBLE-COUNTED. Box 2 backs Box 3 and nothing else. Box 4 never backs wSOST. Box 5 is never used by the bridge or by Gold Reserve V2.
HISTORY

The historical Gold Vault

HISTORICAL · BLOCKS 0–24,999
50% miner · 25% Gold Vault · 25% PoPC Pool (draw blocks from #7,100 paid 50% miner / 50% lottery). HISTORICAL
CURRENT · FROM #25,000
50% miner · 50% normal DTD. Gold Vault and PoPC receive 0% of new emission. Their balances are frozen by consensus and pay the DTD Jackpot. LIVE
Live reserve: loading…

The Genesis Gold Vault is the conceptual ancestor of Gold Reserve V2 — a rule-bound reserve with one purpose and public accounting — but it is not the same reserve. It accumulated SOST; Gold Reserve V2 would hold tokenized gold. Historical Gold Vault ≠ Gold Reserve V2.

RESERVE

Gold Reserve V2

RESEARCH NOT DEPLOYED

A new, external reserve on Ethereum. It receives tokenized gold — not newly emitted SOST — and it never mints wSOST. In the C701 design it is funded by the Gold Access Key of completed bridge operations (plus voluntary contributions); its balance and every deposit are verifiable on Ethereum, and it provides no liquidity.

AssetRoleStatus
XAUT (Tether Gold)initial intended assetRESEARCH
PAXG (Paxos Gold)possible later asset; reportedly not offered in the EUGATED UNTIL LEGAL / AVAILABILITY REVIEW
SOST LOCKED → backs wSOST 1:1 GOLD RESERVE V2 → holds external gold assets these two statements are never mixed

What the reserve means — and what it does not

ALLOWED WORDING
publicly verifiable reserve · on-chain reserve · rule-constrained reserve · ecosystem reserve · informational reserve ratio
NEVER SAID
gold-backed SOST · guaranteed backing · peg · price floor · redeemable gold · guaranteed value · "$X guaranteed per SOST"
Gold Reserve V2 $250,000 Circulating SOST 2,000,000 Informational ratio $250,000 / 2,000,000 = $0.125 of gold reserve per circulating SOST
READ THIS
THIS IS NOT A REDEMPTION VALUE. THIS IS NOT A GUARANTEED FLOOR. A SOST holder has no right to claim any of the gold.
ISSUER RISK
XAUT and PAXG are issued by companies that can freeze, upgrade or retire their tokens. "Perpetual" can only ever mean "under the reserve's own rules", which is why an emergency migration path exists.
PROPOSAL · 30 OCT 2026
Under research: the XAUT in this reserve could be used for one purpose only — buying wSOST back so that the same amount of native SOST is retired forever. See SOST Dead Vault (PoPR). Not active; the reserve stays locked.
PROPOSAL · RESEARCH · 30 OCT 2026

SOST Dead Vault — Proof of Permanent Retirement (PoPR)

RESEARCH NOT ACTIVE NOT DEPLOYED NEEDS A HARD FORK AFTER V17

A proposed use for the XAUT collected by the Gold Access Key: periodically buy wSOST back from the market and take the same amount of native SOST out of circulation forever. Ordinary users of the SOST Atomic Bridge are not affected: entering and leaving keep working exactly as described above (wSOST from and back to the inventory, no mint, no burn).

THE CONSTITUTIONAL RULE
For every N wSOST permanently retired on Ethereum, exactly N native SOST are permanently immobilized on SOST. In base units, with no rounding and no fee taken out of either side.

How it would work — option A (chosen): permanent immobilization, no burn

1 · GOLD ACCESS KEY XAUT from bridge entries accumulates in Gold Reserve V2 2 · BUYBACK periodically, anyone can trigger a capped purchase of wSOST with that XAUT (max price, max slippage, max size; no safe liquidity → no purchase, the XAUT stays) 3 · RETIRED INVENTORY the wSOST bought go to a permanent retired inventory on Ethereum that has no exit: they are never sold, lent, re-issued or returned to the market 4 · DEAD VAULT after that step is final, exactly the same amount of native SOST moves from the bridge reserve into the SOST Dead Vault — an output type nobody can ever spend

Option A keeps the founding rule of the SOST Atomic Bridge: wSOST is issued once and its total supply never changes. The retired wSOST still exist on Ethereum, but they sit in a contract with no way out, and they are counted separately from the ordinary inventory. (Option B — really burning them and reducing totalSupply() — was considered and not chosen.)

Example — one year retires 10,000 SOST

AccountBeforeAfter retiring 10,000
A · wSOST total supply1,000,0001,000,000 (unchanged)
B · wSOST in the ordinary inventory950,000950,000
C · wSOST circulating50,00040,000
D · wSOST in the retired inventory (no exit)010,000
E · native SOST in the bridge reserve50,00040,000
F · native SOST in the Dead Vault (no exit)010,000
Backing of circulating wSOST (E / C)100%100%
SOST ever mined / SOST destroyedunchanged / 0unchanged / 0
invariants checked in EVERY state, not only at month end: C ≤ E circulating wSOST is always fully backed D = F + G G = retirements final on Ethereum, not yet immobilized on SOST A = B + C + D no wSOST appears or disappears each retirement id used once no double counting, no replay figures are illustrative

The order is fixed: first the wSOST are final in the retired inventory, then the native SOST move. If the second step is delayed, what remains is a public, pending obligation to immobilize — never wSOST circulating without backing.

The SOST Dead Vault

WHAT IT IS
a new SOST output type (working name OUT_PERMANENT_RESERVE) that nodes refuse to spend · accepts deposits only · every entry public and verifiable
WHAT IT IS NOT
not a wallet · no private key, owner, admin, guardian or vote can move it · no staking, lending or rewards · not the historical Gold Vault, whose coins have their own DTD Jackpot rules

The Dead Vault immobilizes SOST, it does not burn it: the emission schedule and the 4,669,201 hard cap are untouched. An address “with no known key” would not give the same guarantee, which is why it needs a consensus rule.

What it needs — and what it does not promise

PieceStatus
Retired-inventory contract on EthereumRESEARCH new Solidity, not written
Permissionless, capped buyback (DEX / auction / tranches)RESEARCH needs real wSOST liquidity, which does not exist
Dead Vault output type on SOSTHARD FORK AFTER V17 not part of #40,000
SOST verifying, by itself, that the wSOST were retired on EthereumRESEARCH same open problem as the keyless reserve (C705)
SOST Atomic Bridge itselfNOT BUILT PoPR cannot exist before it
READ THIS
Nothing here is active, deployed or scheduled. Retiring SOST reduces the supply available to circulate; it does not guarantee any price. Spending XAUT on buybacks turns part of the gold reserve into permanently immobilized SOST — whether part of the XAUT stays as gold is still open. While mining is concentrated and Ethereum cannot verify SOST without custodians, this cannot be called trustless, and Gold Reserve V2 stays locked and only accumulates. “Forever” means under the protocol's rules: a future hard fork accepted by the network could technically change any rule.

En pocas palabras. Con el XAUT de la Gold Access Key se recomprarían wSOST periódicamente. Esos wSOST quedarían en un inventario retirado del que nunca pueden salir, y la misma cantidad exacta de SOST nativos pasaría a una bóveda sin clave ni salida: 1 wSOST retirado = 1 SOST inmovilizado. Los intercambios normales del puente no cambian, no se emite ni se quema nada y la emisión de SOST queda intacta. Es investigación: necesita el puente atómico y un hard fork posterior a V17, no está activo y no garantiza ningún precio.

HISTORICAL / SUPERSEDED DESIGN

Historical / superseded design — kept for the record

HISTORICAL / SUPERSEDED DESIGN NEVER OPERATIONAL

Earlier versions of this page described the treasury Gold → wSOST desk and a federated observer architecture. They were never operational and are not the target architecture; C701 replaced them with automated verification, and on 26 Oct 2026 the target became the SOST Atomic Bridge. They are listed here so the history stays readable.

Historical / superseded designProposed in C701 (design in development, not active)
Gold → wSOST desk: selling existing treasury wSOST for XAUT at an auction / TWAP priceNo treasury sale. Gold Reserve V2 is funded only by the Gold Access Key of bridge operations (and voluntary contributions).
2-of-3 federated observers signing attestations, relayer paying the mint gasC701 (now the conventional reference): automated verification by an operator-run engine with an EIP-712 authorization; the user sends the mint transaction and pays gas. The centralisation and the single-verifier-key risk are stated openly (see Trust model and Open blockers).
Deposit capsule WSOST:0x<recipient>Capsule C701:0x<request id> binding recipient, amount, chain and contract.
TRUST MODEL

How the bridge would be secured — and what it cannot promise

TWO LAYERS
The controls table below comes from the conventional prototype and carries over to the Atomic Bridge (bound authorizations, single use, caps, signed prices, finality, timelocked configuration). The Atomic Bridge adds HTLC deadlines and permissionless settlement on Ethereum — and keeps the hardest open problem: who controls the native reserve.
NOT TRUSTLESS
Ethereum cannot read the SOST chain. The automated engine checks each deposit and signs the authorization, so the operator that holds the authorization keys is a central point of trust. In the current prototype, if those keys were compromised, wSOST without backing could be issued up to the caps until reconciliation pauses minting. For that reason the design is not ready for production.
BLOCKING SECURITY REQUIREMENT
A stolen verifier key must NOT allow releasing wSOST without native SOST received. Before production there must be a demonstrable property CIRCULATING_WSOST <= CONFIRMED_NATIVE_SOST_RESERVE (the conventional prototype states it as MINTED_WSOST <= VERIFIED_CONFIRMED_NATIVE_SOST_LOCKED), and the system must fail closed (no release) whenever it cannot be demonstrated. No arbitrary withdrawal from the native reserve may be possible. Neither is met yet.

Controls built into the design

ControlWhat it does
Bound authorizationEIP-712 signature tied to chain id, contract, recipient, amount, deposit txid:vout, expiry and nonce. Changing any field invalidates it.
No replay, no double minteach deposit, request and nonce can be used once; checked on-chain
Separate keysmint authorizer ≠ price signer ≠ administrator; the SOST Bridge Vault key never exists on Ethereum; Gold Reserve V2 guardians have no bridge role
Exposure limitsper-operation, daily and total-supply caps
Signed, fresh, bounded pricestale, out-of-range or jumping XAUT prices are refused; with no approved SOST/EUR valuation every mint is refused
Finality30 SOST confirmations (provisional; a 1-block reorg was observed at #30,297); reorgs after authorization stop the engine
Reconciliationlocked SOST vs wSOST supply + pending releases; CRITICAL pauses minting automatically; burns keep working
Refund guarda refund needs the deposit to be revoked on Ethereum first, so nobody can keep both the refund and wSOST
Timelocked configurationkey or limit changes wait 2 days

Native custody today

SOST native multisig is not active (library code; planned for V17). The Bridge Vault could therefore only be a single cold key with offline signing, and releases would not be automatic. Deployment is blocked until custody can guarantee a safe, tested recovery.

Open blockers — all must be closed before any activation

#Open blockerState
1Non-discretionary native reserve: no arbitrary withdrawal by its signers (missing primitives P1–P5)OPEN
2Entry release authority: a stolen verifier key must not release unbacked wSOST (threshold / light-client research)OPEN
3Entry claim liveness: the reserve must always claim the SOST before the user's deadlineOPEN
4Secure native custody with V17 multisig (3-of-5 target)OPEN
5Testnet proof of concept (entry, exit, refunds, replay, reorg, concurrency, theft attempt)NOT STARTED
6Approved SOST/EUR valuation methodOPEN
7Reliable XAUT price oracleOPEN
8External security auditOPEN
9Legal / regulatory reviewOPEN

Stronger proofs later — without a federation

  • SOST header relay with Merkle inclusion proofs on Ethereum (SPV-style), likely optimistic with a challenge window, since verifying ConvergenceX itself on-chain is impractical;
  • succinct (zero-knowledge) proofs of SOST chain validity — long-term research;
  • delay and veto window for large mints;
  • threshold signing inside the operator and native SOST multisig for the vault.
SEPARATE SERVICE

SOST Atomic Swap — independent of the bridge

The SOST Atomic Swap is a separate peer-to-peer service. It does not offer SOST ↔ wSOST, charges no Gold Access Key and does not use Gold Reserve V2. The SOST Atomic Bridge would use the same native HTLC primitive, but against the bridge’s own wSOST inventory and native reserve; the two services stay separate.

Atomic Swap pieceState
SOST-side HTLCLIVE consensus since #16,000
EVM HTLC contractCODE COMPLETE NOT DEPLOYED
BTC sidelab-verified on a development branch · DISABLED ON MAINNET
SOST ↔ wSOST pairNOT OFFERED — that is the bridge's job
TRANSPARENCY

Proof of reserves

RESEARCH
CONFIRMED NATIVE DEPOSITS PENDING DEPOSITS MINTED wSOST BURNS PENDING RELEASES COMPLETED RELEASES BRIDGE VAULT BALANCE wSOST TOTAL SUPPLY STATUS: BALANCED · PENDING · CRITICAL

The basic invariant is wSOST.totalSupply ≤ confirmed native SOST backing. That inequality is necessary but not sufficient: a deposit minted twice and a release paid twice can cancel out in the balance. So the indexer reconciles every deposit id, mint, burn and release separately. The SOST side is derived from the SOST chain; the Ethereum side from Ethereum; the browser is never the source of truth.

HEALTHY
500 SOST deposit → waiting confirmations PENDING → 500 wSOST minted BALANCED
FAILURE
100,000 SOST locked 150,000 wSOST supply STATUS CRITICAL ACTION MINTING PAUSED

A failure is shown, never hidden. Transfers of existing wSOST continue while minting is paused.

SAFETY

Withdrawals & emergency powers

RESEARCH
NORMAL WITHDRAWALS: NOT ALLOWED
Gold Reserve V2 contains no withdraw(address) and no equivalent unrestricted destination. The reserve can never go to a founder wallet, a guardian wallet, an arbitrary wallet, an exchange deposit or a treasury account.
PowerWhoEffect
PAUSE2-of-5 guardiansstops relevant reserve operations. Pause does not move gold. Stolen pause keys can only stop the safe.
CRITICAL RESCUE4-of-5 guardians, short timelockGold Reserve → the predefined Quarantine Vault only, which itself has no withdrawal. Temporary safe custody, not a final migration.
FINAL MIGRATIONall four keys at once (below)moves assets only to the exact successor vault in the frozen proposal
Guardian recovery4-of-5 guardians + timelock; any 2 can cancelreplaces a lost or compromised guardian; cannot move assets or change thresholds DEVELOPMENT

Critical rescue example

XAUT issuer announces a critical freeze in 6 hours — no time for a 48-hour vote 4/5 guardians → CRITICAL RESCUE → Quarantine Vault (fixed at deployment) later, calmly: guardians + SOST vote → final successor vault never possible, even with 100% of signers: → founder wallet ✗ → exchange ✗ → sold for USDT ✗ → shared out to miners ✗

Final migration — every key at the same time

1. Guardians 4-of-5 2. SOST governance YES from at least 2/3 OF THE FULL ELIGIBLE CENSUS 3. Timelock completed 4. Destination only the exact successor Gold Reserve Vault in the frozen proposal If ANY one fails → NO MIGRATION
GuardiansSOST voteDestinationTimelockResult
4/5 ✓8/12 ✓approved successor ✓done ✓MIGRATES
5/5 ✓7/12 ✗approved successor ✓—DOES NOT MOVE
4/5 ✓10/12 ✓personal wallet ✗—DOES NOT MOVE
4/5 ✓10/12 ✓approved successor ✓running ✗NOT YET
contract surface (design): NO withdraw(address destination) — does not exist YES pause() — 2/5; moves nothing YES rescueToQuarantine(asset) — 4/5; fixed Quarantine Vault only YES migrate(asset, successorVault, proposalId) — registered successor, approved code hash, allowed gold asset, same restrictions, recorded SOST tally hash, timelock elapsed
GOVERNANCE

The second key: SOST participants

RESEARCH PHASE A: ADVISORY

The proposal is frozen before anyone votes

PROPOSAL_ID GRV2-004 SOURCE_VAULT GoldReserveVaultV2 SOURCE_ASSET XAUT v1 SUCCESSOR_VAULT GoldReserveVaultV3 SUCCESSOR_ASSET XAUT v2 SUCCESSOR_CODE_HASH 0x1234… TIMELOCK 7 days SNAPSHOT_HEIGHT #35,712 VOTING_CLOSE #36,000 REASON official XAUT protocol migration

Miners do not vote on "should we move the gold?" — they vote on one exact instruction. If any material field changes, the old vote is invalid and a new proposal and a new vote are required.

Who can vote

CheckRule (frozen at the snapshot)
Mining identityvalid SbPoW mining identity with the required recent mining activity
NODE_BINDactive binding of that identity to a node key
Heartbeatsrequired heartbeat participation (the Jackpot V2 framework)
Snapshoteligibility is fixed at SNAPSHOT_HEIGHT; a later NODE_BIND or later mining does not enter that proposal
Binding agea minimum NODE_BIND age before the snapshot — value under research
ONE IDENTITY = ONE VOTE
Governance is not weighted by PoW block count (the Jackpot is; governance is not), so a dominant miner cannot decide the reserve alone. NODE_BIND does not prove one unique human: this is protocol-identity governance, not one-human-one-vote.
ON-CHAIN

How a vote is cast and counted

RESEARCH
sost-cli send <identity> 0.001 \ --from-address <identity> \ --capsule-mode open-note \ --capsule-text "SOSTGOV1|GRV2-004|S35712|YES" # or NO / ABSTAIN

The vote is a normal SOST transaction from the eligible identity to itself, carrying the choice in a capsule (28 of the verified 80 bytes). Because it spends from that identity, chain validation itself proves control of the private key — no new message-signing tool is needed. The website never asks for a private key, seed phrase, wallet file or password, and it does not run a central poll: the votes are on the SOST blockchain, and anyone can recount them.

RuleExact definition
Valid voteall inputs spend from the identity; the capsule output pays the same identity; text exactly SOSTGOV1|<proposal>|S<snapshot>|YES|NO|ABSTAIN; confirmed in (snapshot, close]
Changing a voteallowed — the last valid confirmed vote before VOTING_CLOSE counts; earlier votes stay on chain
ApprovalYES ≥ ceil(2/3 × TOTAL FIXED ELIGIBLE CENSUS) — not 2/3 of those who voted
ABSTAINrecorded as participation; never counts as YES
FinalityVOTING CLOSED → FINALITY PENDING → FINAL RESULT once the close block is buried by the governance finality depth
Census 12 → YES needed = ceil(12 × 2/3) = 8 Case A 8 YES · 2 NO · 2 no vote → APPROVED Case B 7 YES · 0 NO · 5 no vote → NOT APPROVED (100% of voters said YES — only 7 of 12) Case C 7 YES · 0 NO · 5 ABSTAIN → NOT APPROVED (abstention is not YES) Change #35,800 YES → #35,850 NO → counted as NO; both remain on chain

Status panel — example

ILLUSTRATIVE EXAMPLE · NO LIVE PROPOSAL EXISTS
PROPOSAL GRV2-004 STATUS VOTING ELIGIBLE CENSUS 12 REQUIRED YES 8 YES 8 · NO 2 · ABSTAIN 1 · NO VOTE 1 VOTE PASSED GUARDIANS 4 / 5 TIMELOCK 4d 11h remaining SUCCESSOR GoldReserveVaultV3 EXECUTION WAITING
WHAT THE VOTE IS NOT
SOST voting does not execute Ethereum state directly; guardians execute. If a sufficient guardian majority deliberately ignored a valid vote, the breach would be publicly provable from both chains, but SOST consensus cannot itself stop it. Security comes from four layers — guardians, SOST vote, timelock and the contract's destination restrictions. This is not trustless cross-chain governance.

Advisory first, binding later

PhaseMeaning
A — Advisoryvotes run, are public and verifiable, but do not control a vault. The network is small today (very few eligible identities); calling that "the community" would not be honest.
B — Bindingonly after an objective, persistent participation condition is met. Maturity criteria under research — no threshold is set without simulation. A UI existing does not make governance binding.
TRY IT

Check my voting eligibility

PREVIEW

No proposal is open, so this checks your mining identity against the current Jackpot V2 participation framework — the base of the planned voter census — using the chain-derived participation index. Binding age is still under research.

If a future wallet integration exists, it would build the vote transaction locally. This page never collects keys.

#40,000

Research horizon — not an activation commitment

RESEARCH NOTICE
#30,000 builds the foundation. #40,000 is the current target research horizon for the next coordinated upgrade — not an activation commitment. Nothing is scheduled until code, tests, external audit and a public announcement exist. If not ready, it moves later (for example #50,000). Current consensus remains 50% miner / 50% DTD.
PILLAR 1 · REWARD EVOLUTION
Research scenario: 80% direct PoW miner · 15% normal DTD · 5% into the existing DTD Jackpot pool. The 5% is not a direct node payment: it accumulates in the Jackpot pool, paid under the applicable Jackpot eligibility rules. No new supply — all from existing block emission. RESEARCH
PILLAR 2 · DECENTRALIZATION
Peer persistence, independent seeds, address gossip, autonomous peer discovery; more independent nodes, operators, providers, jurisdictions and miners; no consensus dependency on sostcore.com infrastructure. Full decentralization is not claimed. RESEARCH
PILLAR 3 · ECONOMIC INFRASTRUCTURE
A mature native-asset framework and the SOST Asset Market: order book, price discovery, atomic settlement, deeper Asset Passport integration, economic-right descriptions and regulatory classification. Intended initial state: technically functional but developer-gated. RESEARCH
NATIVE ASSETS TODAY
At #30,000 V30000 introduced the technical foundation for native assets in a restricted form: ADMIN / DEVELOPER GATED FAIL-CLOSED NOT PUBLICLY ACTIVATED — no public activation date. The Asset Market is not live.

wSOST, Gold Reserve V2 and governance are part of this research horizon. Unlike the 80/15/5 scenario, they need no SOST consensus change: they would run on Ethereum and on existing SOST capsules, behind their own engineering, audit and legal gates.

CONTEXT

Bitcoin · Ethereum · SOST

BITCOIN
Consensus: PoW (SHA-256d). Incentive: the miner/pool receives subsidy + fees. Nodes: validate every rule, unpaid. Wrapped: external wrapped-BTC products exist. Gold reserve: none at protocol level.
ETHEREUM
Consensus: PoS. Participants: validators stake ETH (32 ETH solo). Execution: smart contracts, ERC-20 tokens, DeFi.
SOST
Consensus: ConvergenceX PoW. Block: 50% direct miner / 50% normal DTD. Also: DTD Jackpot V2 with NODE_BIND + heartbeats; SOST-side atomic swap HTLC; PLANNED wSOST bridge and Gold Reserve V2.
SOST COMBINES WORK + PARTICIPATION INCENTIVES
No claim of superiority is made. Nodes are a gate, not a multiplier: the direct mining reward does not grow because a miner runs a node; normal DTD does not require NODE_BIND today; Jackpot V2 uses node participation as an eligibility condition, with weight set by real PoW blocks.

One Proof of Work, two control dials. ConvergenceX defines the work of every attempt. bitsQ sets how rare a winning commit must be (every block; 288-block average; ±15 s dead band; steps 0.5% / 1% / 2% / ≈3.03%). The Equalizer sets how demanding each attempt is (43 profiles E7…B0…H35 from the schedule lag) and never changes bitsQ. Full rules: Technology · comparison with examples: SOST vs Bitcoin vs Ethereum.

HOW TO GET SOST

Three ways — plus wrapping

⚒ 1 · MINE IT
ConvergenceX on CPU + RAM; the finder receives 50% of the block reward. LIVE
🎲 2 · EARN IT THROUGH DTD
Every block, the other 50% goes to one eligible recent miner; plus the Jackpot every 288 blocks. LIVE
⚛ 3 · SWAP FOR IT
Atomic swap: SOST-side HTLC consensus-active since #16,000. SOST SIDE LIVE EVM contract CODE COMPLETE NOT DEPLOYED. An atomic swap transfers existing SOST; it creates none.
WRAP IT — SOST ↔ wSOST
DESIGN IN DEVELOPMENT · NOT ACTIVE Wrapping is not a fourth issuance source: it moves existing SOST into a 1:1 representation on Ethereum.
STATE

Current / future status matrix

ItemState
Block reward 50% miner / 50% DTDLIVE
DTD Jackpot V2 (NODE_BIND + heartbeats)LIVE
Gold Vault 25% / PoPC 25% emissionHISTORICAL (blocks 0–24,999)
Gold Vault + PoPC balancesFROZEN · fund the Jackpot
"Gold floor" / gold backing per SOSTRETIRED DESIGN
Native multisig (sost3)NOT ACTIVE · library code only · planned for V17
SOST-side HTLCLIVE (consensus since #16,000)
EVM atomic-swap contractCODE COMPLETE NOT DEPLOYED
BTC atomic-swap signinglab-verified on a development branch · DISABLED ON MAINNET
Native assets / Asset MarketDEVELOPER GATED
SOST Atomic Bridge (Atomic Reserve Vault) — targetRESEARCH / DEVELOPMENT NOT ACTIVE NOT YET PROVEN · design + audit done, proof of concept not started, native custody unsolved, 9 open blockers
Conventional lock/mint prototype (C701/C703)REFERENCE / COMPONENT SOURCE · local tests only (Foundry 87/87, engine 25/25), not deployed
Gold Access Key (XAUT)DEVELOPMENT · blocked: no approved SOST/EUR valuation
Gold Reserve V2DEVELOPMENT NOT DEPLOYED NO FUNDS
Gold → wSOST desk / treasury wSOST saleHISTORICAL / SUPERSEDED DESIGN · never operational
Federated observer networkHISTORICAL / SUPERSEDED DESIGN · never operational
SOST Atomic Swapseparate service · not part of the bridge
On-chain SOST governanceRESEARCH · advisory first
80 / 15 / 5 reward scenarioRESEARCH · would need a future hard fork
NO PRICE PROMISES
Nothing on this page is a price forecast, a guaranteed appreciation, a price floor, an investment return or a listing guarantee. Price-discovery mechanics are explained for education only. Full technical detail: Explorer · Whitepaper §3.16.
🎮
// BEACON

Beacon — Advisory Channel

Signed operator notices, propagated between nodes. Advisory only. Does not affect mining rewards, block validity, chain selection, transaction validation, wallet balances, PoPC, Gold Vault, or consensus.

Phase II-A — local notices

Each node reads notices.json on startup. ECDSA-SHA256 signature verification against a hardcoded operator pubkey. Failure modes (bad signature, wrong network, expired, malformed) are silent drops. Active at V13_HEIGHT (12,000).

Phase II-B — threshold + revocation

Adds N-of-M threshold signatures (default 3-of-5), revocation by notice ID (only threshold-signed notices can revoke), and an optional mirror_url metadata field (never fetched by the node). Active at V13_HEIGHT.

Phase III — P2P gossip

Nodes gossip verified notices via a BCNN dispatcher with hard limits: 4 KB max notice, 32-notice LRU dedup cache, 8 notices/peer/min rate limit. Bad-signature notices are silently dropped; oversized/malformed/rate-limit hits earn peer misbehavior. Active at V13_HEIGHT.

Hard invariant. No Beacon code path links into block validation, mining validity, or chain commit. Beacon cannot reject, invalidate, or affect the canonical chain. Rollback is a single-line constant revert (BEACON_P2P_ACTIVATION_HEIGHT to INT64_MAX in include/sost/params.h).