How SOST could reach Ethereum wallets, DEXs and exchanges without creating a single new coin, and how a separate, publicly verifiable reserve of tokenized gold could grow around the ecosystem — governed by the miners who also run nodes.
wSOST is not another coin. It is a token on Ethereum that represents native SOST one-for-one. The SOST it represents stays on the SOST blockchain, locked in a dedicated Bridge Vault, until the wSOST is turned back into SOST.
The Ethereum recipient travels inside a capsule, a data field active on SOST since block 7,350. No consensus change, no new transaction type and no special wallet are needed.
Integrating a brand-new Layer-1 is real work for wallets and exchanges; Ethereum and ERC-20 tokens are already integrated almost everywhere. wSOST would make SOST reachable from:
One practical barrier to wider SOST market access is the technical burden a centralized exchange faces when it integrates a new, independent Layer-1 blockchain. Listing native SOST would require the exchange to:
Ethereum and ERC-20 infrastructure, on the other hand, is already in place at virtually every major centralized exchange: deposits, withdrawals, custody and monitoring for ERC-20 tokens are standard operations there. For such a venue, integrating an ERC-20 representation is operationally much simpler than integrating a new chain.
The initial exchange-access target is wSOST: the representation offered to CEX and DEX venues where integrating the native SOST chain is impractical or unnecessarily complex. wSOST does not replace SOST. wSOST is designed to make SOST easier to integrate without replacing the native SOST network.
Native SOST remains the canonical protocol asset. wSOST is the planned Ethereum-compatible market-access representation. Gold Reserve V2 is the planned external gold-reserve layer.
The original SOST design introduced a Gold Vault concept from Genesis: part of the early block distribution accumulated in a constitutional reserve, with the long-term idea of connecting SOST with an external gold reserve. That historical architecture later changed. From block #25,000:
wSOST would give SOST an Ethereum-compatible representation, and Gold Reserve V2 would live on the same Ethereum-compatible infrastructure as tokenized gold such as XAUT. In a future, gated phase that makes mechanisms like this possible:
That gives the Genesis reserve philosophy a practical modern infrastructure — SOST L1 + the wSOST access layer + an external tokenized-gold reserve — while every accounting layer stays separate. GATED OFF
Nothing below can be done today. It describes how the planned bridge is designed to work from the user's side.
John holds 1,000 SOST and wants 400 of them as wSOST. On the bridge page he enters the amount and an Ethereum address that will receive the wSOST:
His SOST wallet sends an ordinary SOST transaction to the Bridge Vault; the transaction carries his Ethereum address in a capsule. The 400 SOST are locked, not destroyed.
Not specifically — but you need an Ethereum address if you want to hold the wSOST yourself. MetaMask, Rabby, a compatible hardware wallet or any other EVM wallet works. MetaMask is a convenience, not part of the protocol.
| Action | Who pays what |
|---|---|
| Wrap (SOST → wSOST) | You pay only the normal SOST fee. The design has the bridge relayer pay the Ethereum gas for the mint, so you need no ETH to wrap. |
| Send wSOST, use a DEX, add liquidity | You need a little ETH for gas in your Ethereum wallet. ETH is not backing and does not buy SOST; it only pays Ethereum to run the transaction. |
| Unwrap (wSOST → SOST) | Normally a little ETH for gas for the burn on Ethereum. Gas sponsorship could make this easier later. |
An exchange that supports the wSOST ERC-20 does not have to integrate the SOST chain first. A user could even put the exchange's own wSOST deposit address as the Ethereum destination when wrapping, so the wSOST land directly in the exchange account — saving one Ethereum transaction. Only do that if the exchange explicitly supports wSOST deposits; tokens sent to an address that does not credit them can be lost.
Trading inside an exchange (for example USDT ↔ wSOST) needs no MetaMask and no ETH: the exchange runs its own infrastructure. Ethereum only matters when you withdraw wSOST to your own wallet or use contracts directly.
So, once the bridge is liquid and freely usable, the wSOST market price is expected to become a market reference for native SOST. Prices are not guaranteed identical: bridge risk, fees, liquidity, access restrictions and finality delays can create temporary premiums or discounts. A large, persistent gap would mean wrapping is not freely available or the bridge is impaired.
| # | Source | What it means | Status |
|---|---|---|---|
| 1 | Monetary scarcity | Hard cap 4,669,201 SOST, smooth decaying emission | LIVE |
| 2 | PoW network security | ConvergenceX Proof of Work, nodes verifying every rule | LIVE |
| 3 | Utility | DTD, Jackpot V2, capsules, atomic swaps, future native assets | LIVE PARTLY GATED |
| 4 | Market access & liquidity | wSOST on Ethereum, DEX pools, exchange integration | RESEARCH |
| 5 | External Gold Reserve V2 | Publicly verifiable tokenized gold held by the ecosystem | RESEARCH |
The Genesis Gold Vault is the conceptual ancestor of Gold Reserve V2 — a rule-bound reserve with one purpose and public accounting — but it is not the same reserve. It accumulated SOST; Gold Reserve V2 would hold tokenized gold. Historical Gold Vault ≠ Gold Reserve V2.
A new, external reserve on Ethereum. It receives tokenized gold — not newly emitted SOST — and it never mints wSOST.
| Asset | Role | Status |
|---|---|---|
| XAUT (Tether Gold) | initial intended asset | RESEARCH |
| PAXG (Paxos Gold) | possible later asset; reportedly not offered in the EU | GATED UNTIL LEGAL / AVAILABILITY REVIEW |
Pricing must eventually use a transparent auction or a reliable liquid-market / TWAP methodology — never an arbitrary permanent founder price. This is a sale, not a donation, so the module stays off until legal review and pricing gates pass.
| Option | SOST side | Use |
|---|---|---|
| A — Capped operator bridge pilot | one cold single-key Bridge Vault (sost1), offline signing, hard exposure cap, public proof of reserves | TEMPORARY · RESEARCH |
| B — custom threshold / MPC cryptography | key never assembled | REJECTED FOR NOW |
| C — native SOST multisig | real M-of-N SOST outputs via a future, explicitly activated consensus upgrade | TARGET |
The pilot is called a capped operator bridge pilot — federated attestation plus a capped native vault. It is not trustless and not decentralized. The release path talks to a swappable signer interface, so moving from A to C does not redesign deposits, attestations or the Ethereum contract.
SOST has observed real short reorganisations (one block replaced at #30,297). The provisional pilot value is 30 confirmations ≈ 5 hours at 10-minute blocks. PROVISIONAL POLICY — not a protocol constant; it will be recalibrated from measured network behaviour.
The basic invariant is wSOST.totalSupply ≤ confirmed native SOST backing. That inequality is necessary but not sufficient: a deposit minted twice and a release paid twice can cancel out in the balance. So the indexer reconciles every deposit id, mint, burn and release separately. The SOST side is derived from the SOST chain; the Ethereum side from Ethereum; the browser is never the source of truth.
A failure is shown, never hidden. Transfers of existing wSOST continue while minting is paused.
withdraw(address) and no equivalent unrestricted destination. The reserve can never go to a founder wallet, a guardian wallet, an arbitrary wallet, an exchange deposit or a treasury account.| Power | Who | Effect |
|---|---|---|
| PAUSE | 2-of-5 guardians | stops relevant reserve operations. Pause does not move gold. Stolen pause keys can only stop the safe. |
| CRITICAL RESCUE | 4-of-5 guardians, short timelock | Gold Reserve → the predefined Quarantine Vault only, which itself has no withdrawal. Temporary safe custody, not a final migration. |
| FINAL MIGRATION | all four keys at once (below) | moves assets only to the exact successor vault in the frozen proposal |
| Guardian recovery | 6 months inactivity + public notice + long timelock | replaces guardians; cannot move assets |
| Guardians | SOST vote | Destination | Timelock | Result |
|---|---|---|---|---|
| 4/5 ✓ | 8/12 ✓ | approved successor ✓ | done ✓ | MIGRATES |
| 5/5 ✓ | 7/12 ✗ | approved successor ✓ | — | DOES NOT MOVE |
| 4/5 ✓ | 10/12 ✓ | personal wallet ✗ | — | DOES NOT MOVE |
| 4/5 ✓ | 10/12 ✓ | approved successor ✓ | running ✗ | NOT YET |
Miners do not vote on "should we move the gold?" — they vote on one exact instruction. If any material field changes, the old vote is invalid and a new proposal and a new vote are required.
| Check | Rule (frozen at the snapshot) |
|---|---|
| Mining identity | valid SbPoW mining identity with the required recent mining activity |
| NODE_BIND | active binding of that identity to a node key |
| Heartbeats | required heartbeat participation (the Jackpot V2 framework) |
| Snapshot | eligibility is fixed at SNAPSHOT_HEIGHT; a later NODE_BIND or later mining does not enter that proposal |
| Binding age | a minimum NODE_BIND age before the snapshot — value under research |
The vote is a normal SOST transaction from the eligible identity to itself, carrying the choice in a capsule (28 of the verified 80 bytes). Because it spends from that identity, chain validation itself proves control of the private key — no new message-signing tool is needed. The website never asks for a private key, seed phrase, wallet file or password, and it does not run a central poll: the votes are on the SOST blockchain, and anyone can recount them.
| Rule | Exact definition |
|---|---|
| Valid vote | all inputs spend from the identity; the capsule output pays the same identity; text exactly SOSTGOV1|<proposal>|S<snapshot>|YES|NO|ABSTAIN; confirmed in (snapshot, close] |
| Changing a vote | allowed — the last valid confirmed vote before VOTING_CLOSE counts; earlier votes stay on chain |
| Approval | YES ≥ ceil(2/3 × TOTAL FIXED ELIGIBLE CENSUS) — not 2/3 of those who voted |
| ABSTAIN | recorded as participation; never counts as YES |
| Finality | VOTING CLOSED → FINALITY PENDING → FINAL RESULT once the close block is buried by the governance finality depth |
| Phase | Meaning |
|---|---|
| A — Advisory | votes run, are public and verifiable, but do not control a vault. The network is small today (very few eligible identities); calling that "the community" would not be honest. |
| B — Binding | only after an objective, persistent participation condition is met. Maturity criteria under research — no threshold is set without simulation. A UI existing does not make governance binding. |
No proposal is open, so this checks your mining identity against the current Jackpot V2 participation framework — the base of the planned voter census — using the chain-derived participation index. Binding age is still under research.
If a future wallet integration exists, it would build the vote transaction locally. This page never collects keys.
wSOST, Gold Reserve V2 and governance are part of this research horizon. Unlike the 80/15/5 scenario, they need no SOST consensus change: they would run on Ethereum and on existing SOST capsules, behind their own engineering, audit and legal gates.
One Proof of Work, two control dials. ConvergenceX defines the work of every attempt. bitsQ sets how rare a winning commit must be (every block; 288-block average; ±15 s dead band; steps 0.5% / 1% / 2% / ≈3.03%). The Equalizer sets how demanding each attempt is (43 profiles E7…B0…H35 from the schedule lag) and never changes bitsQ. Full rules: Technology · comparison with examples: SOST vs Bitcoin vs Ethereum.
| Item | State |
|---|---|
| Block reward 50% miner / 50% DTD | LIVE |
| DTD Jackpot V2 (NODE_BIND + heartbeats) | LIVE |
| Gold Vault 25% / PoPC 25% emission | HISTORICAL (blocks 0–24,999) |
| Gold Vault + PoPC balances | FROZEN · fund the Jackpot |
| "Gold floor" / gold backing per SOST | RETIRED DESIGN |
| Native multisig (sost3) | NOT ACTIVE · library code only |
| SOST-side HTLC | LIVE (consensus since #16,000) |
| EVM atomic-swap contract | CODE COMPLETE NOT DEPLOYED |
| BTC atomic-swap signing | lab-verified on a development branch · DISABLED ON MAINNET |
| Native assets / Asset Market | DEVELOPER GATED |
| wSOST bridge | RESEARCH NOT DEPLOYED |
| Gold Reserve V2 | RESEARCH NOT DEPLOYED |
| Gold → wSOST desk | GATED OFF |
| On-chain SOST governance | RESEARCH · advisory first |
| 80 / 15 / 5 reward scenario | RESEARCH · would need a future hard fork |
Signed operator notices, propagated between nodes. Advisory only. Does not affect mining rewards, block validity, chain selection, transaction validation, wallet balances, PoPC, Gold Vault, or consensus.
Each node reads notices.json on startup. ECDSA-SHA256 signature verification against a hardcoded operator pubkey. Failure modes (bad signature, wrong network, expired, malformed) are silent drops. Active at V13_HEIGHT (12,000).
Adds N-of-M threshold signatures (default 3-of-5), revocation by notice ID (only threshold-signed notices can revoke), and an optional mirror_url metadata field (never fetched by the node). Active at V13_HEIGHT.
Nodes gossip verified notices via a BCNN dispatcher with hard limits: 4 KB max notice, 32-notice LRU dedup cache, 8 notices/peer/min rate limit. Bad-signature notices are silently dropped; oversized/malformed/rate-limit hits earn peer misbehavior. Active at V13_HEIGHT.
Hard invariant. No Beacon code path links into block validation, mining validity, or chain commit. Beacon
cannot reject, invalidate, or affect the canonical chain. Rollback is a single-line constant revert
(BEACON_P2P_ACTIVATION_HEIGHT to INT64_MAX in include/sost/params.h).