There is no company. No office. No support ticket system. The protocol is governed by deployed contracts, a multisig with no individual override, and a timelocked upgrade path. Everything described here can be verified independently.
Three layers separate routine operation from structural change. No single keyholder can act alone. No single keyholder can be compelled to act against the others.
A 2-of-3 Safe multisig controls the Protocol Treasury and emergency pause functions on Sonic. This is not governance. It is operations — executing parameters that have already been approved, or pausing the system in response to an active exploit.
Any contract upgrade, parameter change, or treasury allocation above routine thresholds passes through a timelock contract with a minimum 48-hour delay. This is the actual governance layer — it gives the community time to review, exit, or challenge before execution.
The protocol deploys in five sequential phases, each with minimum collateral ratio and duration requirements enforced by the PhaseManager contract. No governance vote can shortcut the sequence. The ratchet only moves forward.
Three engineers with direct experience of monetary crises (Shanghai 2015 equity crash, ruble collapse 1998, naira devaluation 2016) designed the protocol. They operate under pseudonyms because the system should be judged by what it does, not by who built it.
Designed the collateral ratio management system, bond auction mechanics, and redemption fee schedule. Responsible for the mathematical invariants that keep the peg under stress.
"I was in Shanghai during the 2015 equity crash, when the composite index fell 30 percent in three weeks after dollar liquidity tightened. I watched retail investors — taxi drivers, retirees — lose savings they had moved into equities because bank deposit rates had been held below inflation for a decade. The volatility was not a local story. It was the downstream effect of a monetary superpower adjusting its own domestic interest rates. That is why the collateral ratios here are computed from on-chain reserves, not from instruments denominated in a foreign unit of account."
Built the governance framework, access control hierarchy, and legal wrappers for institutional participation. Ensured the protocol cannot be captured by a single class of participant.
"I watched the ruble lose two-thirds of its purchasing power in August 1998 not because Russian factories had stopped producing, but because a sovereign debt crisis in East Asia twelve months earlier had made emerging-market exposure unfashionable in London and New York. Capital that had arrived seeking yield departed overnight, and the exchange rate absorbed the shock. I watched it happen again in 2014, in 2020, in 2022. Each time, the domestic monetary rules were overwritten by portfolio rebalancing decisions made in someone else's time zone. Immutable governance is not an abstraction to me. It is insulation."
Deployed the contracts, built the frontend and indexing infrastructure, and established the monitoring and incident response pipeline. Responsible for operational continuity.
"I watched the naira lose 70 percent of its value against the dollar in 18 months while the central bank raised rates to 25 percent trying to retain carry-trade capital that left anyway when the Fed signaled a pivot. Grocery prices doubled not because harvests failed, but because the currency in which grain is traded internationally strengthened against the currency in which salaries are paid. The problem was not mismanagement. It was the structural asymmetry of a global monetary architecture in which some currencies issue and others merely endure. That is why this protocol runs on-chain: the reserves are auditable by anyone, and the fee schedule cannot be altered to chase hot money."
The protocol's security guarantees are enforced by code, not by trust. These are not aspirations. They are assertions you can verify on-chain.
There is no `owner` address with unilateral override. The DEFAULT_ADMIN_ROLE is held by the timelock contract. Emergency pause is 2-of-3 multisig. Upgrade is timelock + governance. No individual can rug, censor, or modify parameters alone.
All contracts are verified on Sonic Explorer. The full Foundry test suite (25 tests, 6 fuzz campaigns) is published. The whitepaper, formal specification, and deployment artifacts are in the public repository.
The 20% hard bond cap, the 1% daily governance-only redemption limit, and the phase-gated collateral ratio thresholds are enforced by contract logic, not by policy. They cannot be waived by a governance vote.
Every upgrade is announced on-chain through the timelock, documented in the public repository, and subject to a 48-hour review window. The community can exit before any change takes effect.
What is live, what is queued, and what remains in development. This page updates only when on-chain state changes.
| Component | Status | Network | Notes |
|---|---|---|---|
| DINGToken (DING) | Live | Sonic Mainnet | Phase 1: USDC-backed, 1:1 mint/redemption |
| GovToken (MULKI) | Live | Sonic Mainnet | Non-transferable until Phase 3 governance activation |
| MintingEngine & RedemptionEngine | Live | Sonic Mainnet | 4-tier fee schedule (10/30/50/100 bps) enforced |
| BondAuction | Live | Sonic Mainnet | Dutch auction, 20% hard cap, FIFO queue clearing |
| MULKIStaking | Live | Sonic Mainnet | Voting power decays linearly over 365 days |
| PhaseManager | Live | Sonic Mainnet | 5-phase ratchet; Phase 2 entry at CR >= 1.00, 180 days |
| Sovereign Enrollment | Queued | Sonic Mainnet | Pending Phase 2 activation and partner government negotiation |
| CelestialNet Mesh | In Dev | Testnet | Peer discovery and tunneling protocol under active development |