Security & Trust Model

Trust the contract, not the infrastructure. Every action is validated by ErgoScript on-chain. The bot, frontend, and node are replaceable — the contract is permanent.

Security Model

Every concern about trust has a concrete, verifiable answer rooted in the smart contract.

ConcernAnswer
Can the bot steal collateral?No — contract enforces destination address from R9
Can the bot mint extra tokens?No — contract validates token count formula
Can the bot redirect fees?No — contract checks fee output matches R9[1]
Can someone exercise twice?No — burn verification requires tokens destroyed
What if the bot disappears?Nothing lost — anyone can submit the same TXs
What if someone runs a bad bot?Can't do anything the contract doesn't allow
Is any off-chain server trusted?No — all state is on-chain, read from Ergo node

The Contract Is the Authority

The smart contract is the only thing you need to trust. It holds the collateral. It validates every transaction. It enforces every rule. The bot constructs transactions, but the Ergo node rejects anything the contract doesn't approve. The frontend displays data, but it reads everything from the chain. The node is your source of truth, but any Ergo node will give the same answers.

The smart contract is the only thing you need to trust. Everything else — the bot, the frontend, the node — is just tooling to interact with it.

Glossary

TermMeaning
WriterThe person who creates an option by locking collateral
BuyerThe person who purchases an option token and can exercise it
CollateralThe underlying asset locked in the contract (rsADA, DexyGold, ERG, stablecoin)
Strike priceThe agreed price at which the buyer can exercise
PremiumThe price the buyer pays for the option token
SingletonA special single token that stays in the reserve — proves the contract exists
ExerciseUsing your option to trade at the strike price
Exercise window720 blocks (~24 hours) after maturity when exercise is allowed
American styleCan exercise anytime before expiry
European styleCan only exercise after maturity date
Physical deliveryActual tokens change hands (rsADA, DexyGold, ERG)
Cash-settledProfit paid in stablecoin, no underlying tokens move
USEDexy USD stablecoin (3 decimal places, $1.000)
SigUSDSigmaUSD stablecoin (2 decimal places, $1.00)
Reserve boxThe on-chain box that holds collateral + singleton
Definition boxThe initial box before tokens are minted
BurnPermanently destroying tokens by not including them in any output
Key Takeaway

Trust the contract, not the infrastructure. Every action is validated by ErgoScript on-chain. The bot, frontend, and node are replaceable — the contract is permanent.