‹ Back to overview
Live on Stellar testnet

Deployed, and proven with a real settlement.

This is a hackathon build on Stellar testnet, not a launched market.
The contracts are live, and a full default-to-payout has executed on-chain.
Every address and transaction below is yours to verify on the explorer.

Contracts

What is deployed

One factory, one verifier, one settlement type.
Every instrument is an instance of that type.

Factory and registrydeploys and cross-binds every instrument
Groth16 verifierchecks one proof with the native BN254 pairing
Collateral assetnative XLM, claw-proof and freeze-proof
Settlement type · credit_v1guest image id the live instruments are pinned to
Instruments

Three, factory-deployed

The same generic core, instantiated three times.
Adding one is a single transaction.

#
Vault
Reserve
Cover
Settlement
Status
Factory-deployed credit_v1 instruments. The third has settled; the others demonstrate the factory and the one-transaction replication.
The settlement

A real default-to-payout

A bondholder went unpaid.
The reserve paid the cover buyer, and only a proof made it happen.

Verified on-chain · paid

One coupon missed. The reserve paid the cover buyer.

The settlement program proved exactly what was owed for the epoch, the contract verified the Groth16 proof on Stellar, and the payout left the reserve. The cover amount stayed private throughout. No admin touched it.

default proof verified on Stellar
EventSettled
Paid to cover buyer800
Reserve after payout200
Authorized byZK proof
NetworkStellar Testnet
View the transaction on the explorer ›
The scenario. One holder was owed a coupon worth 10% of a 10,000 position and received nothing, a full default for the epoch. The cover buyer held 800 of cover against a 1,000 reserve. On settlement the buyer was paid 800, leaving 200, and the epoch was marked settled. The events emitted: a transfer from the vault to the buyer, an allocations-paid record, and a Settled marker.
Honest by default

What is real, and what is mocked

The verification is real. The framing around it is labelled.

Real

The four contracts, the factory deployment, the on-chain solvency checks, and the Groth16 proof are real. The settled instrument used real config roots, and its proof was verified on-chain by the deployed verifier before the reserve paid out.

Mocked, and labelled

Two of the three instruments use placeholder roots, so they are correctly not settleable. The reference bond is modeled on a live Stellar corporate issuance, unnamed. A proof guarantees computation over the inputs it was supplied, not that those inputs are the canonical truth; hardening the input source is the path to a pilot.

Next

Read the mechanism, or pick a side