Live on Solana devnet · not audited yet
Bond servicing, enforced on Solana.
AssetFlow decides who may hold a tokenized bond, counts its holders on-chain on every record date, and pays coupons and redemptions in USDC.
Coupon 1, counted on-chain
Devnet bond 9jUH…927K
| Holder | Units at record date | Coupon |
|---|---|---|
| Holder A | 2,500 | $125.00 |
| Holder B | 1,000 | $50.00 |
| Private pool (MagicBlock) | 500 | $25.00 |
| Total · equals supply ✓ | 4,000 | $200.00 |
Anyone counts the register on the record date, one account at a time, until it equals the supply. No Merkle root, no list to trust. Devnet, October 4, 2026.
Built with
Token-2022
Token ACL
Solana Attestation Service
MagicBlock
USDC
Recognition: One of six winning teams (4th place), Solar × 021Lab Hacker House, October 2026 · 3rd place, DeFi track, HashKey Chain Horizon, with AssetFlow's first version, 2026
Solana devnet, October 2026. Not audited, no mainnet deployment on Solana yet, and no customers yet: pilots are open.
Issuance is day one. AssetFlow runs every day after.
Tokenizing a bond takes one transaction. Running it takes years, and today that work lives in spreadsheets and email next to a token that knows nothing about it.
Admit
Only eligible wallets can hold it.
Every holder account starts frozen. A wallet is let in only while its investor profile passes the registry, checked by the token itself.
- Accounts thaw through Token ACL, never by hand
- KYC once, from a Solana Attestation Service credential
- A lapsed approval can be frozen by anyone
Eligibility
- Investor profile on file
- Approved by compliance
- No compliance hold
- KYC valid until Oct 5, 2027
- Investor tier 1 meets the minimum of 1
- Hong Kong is an allowed jurisdiction
Pay
Every coupon, counted on-chain.
On the record date anyone counts the register, account by account, until it equals the supply. Then every eligible holder is paid in USDC.
- A funded vault per payment, capped so none overdraws another
- Ineligible holders are held back, not paid
- Nobody types an amount
Coupon 1
Period ending Apr 1, 2027
- Record date
- Oct 4, 2026
- Register fixed
- Transfers paused
- Register counted
- 4,000 of 4,000 units
- Funded
- $200.00
- Paid
- $200.00, $0.00 held back
Redeem
Redemptions priced by the program.
Early redemptions settle at face plus accrued interest. At maturity the mint authority is dropped and every eligible holding is paid at face.
Matured bond
DaNB…WJVh
- Early redemption
- $500.00
- Maturity funded
- $5,000.00
- Paid at face
- $3,500.00
- Held back
- 1,500 units
Nobody can mint
Private
Private holdings, the same rules.
Holders can move units into MagicBlock's Private Ephemeral Rollup. Balances leave public view; both sides must still be eligible.
Private pool
9jUH…927K
- In escrow
- 400
- Deposited
- 500
- Released
- 100
- Private accounts
- 2
On MagicBlock's TEE validator
Protect
A dump freezes the pool.
A trading pool trades only while a fresh risk decision allows it. Past its band from the bond's value, anyone can freeze it. No oracle.
Trading pool
BR7C…8tsi
- Price deviation
- 64.00%
- Band
- ±5.00%
- Reserves
- 500 units · $180
- Bond value
- $500.00
Frozen in the same transaction
Why Solana.
AssetFlow is built on Solana's own standards rather than around them: compliance at the account level, reusable KYC, payouts cheap enough to make one by one, and private balances that auditors can still read.
- 1Holder's walletAny wallet that supports Token-2022
- 2Token-2022 accountStarts frozen
- 3Token ACL (sRFC-37)Asks AssetFlow before any thaw or freeze
- 4Solana Attestation ServiceKYC once, reused by every registry
- 5MagicBlock Private Ephemeral RollupPrivate balances, the same rules
Compliance without a transfer hook
Token ACL, the Solana Foundation's sRFC-37 standard, lets AssetFlow's program decide which accounts may thaw. A plain Token-2022 transfer runs none of our code, so any program that handles Token-2022 can move the asset.
KYC once, reusable
The Solana Attestation Service holds credentials an investor can reuse. A registry that trusts the provider writes the profile from the attestation: verified once, admitted everywhere that provider is trusted.
Pay every holder on-chain
The base fee is 5,000 lamports per signature, so each holder's coupon can be its own on-chain payment instead of a line in a batch file.
Private balances, the same rules
MagicBlock's Private Ephemeral Rollup runs holdings on a validator in a trusted execution environment. Only the holder, the issuer, compliance and a named auditor can read a balance.
Where tokenized funds are launching
The Solana Foundation reports bond and fund launches on Solana including Baillie Gifford's BAGEY bond fund (June 2026) and commercial paper for Galaxy arranged by J.P. Morgan (December 2025).
One program, open to read
Every guarantee on the proof page is enforced by one Anchor program on devnet. Read it in the explorer, or in the repository with its 91 tests.
One bond, start to maturity.
One devnet bond has run this whole life: four coupons, an early redemption and maturity. Check it on the proof page →
01
Issue
A Token-2022 mint whose accounts start frozen. Every authority sits on a program account, not a person.
02
Admit
KYC once: the investor presents an attestation, and the gate lets their account thaw.
03
Record date
The mint pauses and anyone counts the register on-chain until it equals the supply.
04
Pay
Each holder's coupon is computed from the terms and paid in USDC. Ineligible holders are held back.
05
Redeem
Early redemptions settle at face plus accrued interest. The units burn as the cash moves.
06
Mature
The mint authority is dropped for good, and every eligible holding redeems at face.
Built for the people who run bonds.
Issuers
Of tokenized bonds, notes and funds who want eligibility, coupons and redemptions enforced by the token itself.
Fund administrators and transfer agents
Who keep registers by hand today and want a record-date count that anyone can check.
Tokenization platforms
That issue on Solana for their clients and would rather not build servicing themselves.
FAQs
Is AssetFlow a custodian?
No. Units sit in holders' own token accounts, and the escrows for redemptions and private holdings belong to program accounts, not to a person. AssetFlow is servicing software; it does not take custody of investor assets.
Is it audited?
Not yet. It runs on Solana devnet only, with 91 program tests passing. An independent audit comes before any real money.
Which wallets can hold the token?
Any wallet that supports Token-2022. Accounts start frozen; the holder portal thaws an eligible holder's account through Token ACL, and after that a plain transfer runs none of our code.
What does a pilot cost?
Nothing. A pilot shadows one coupon cycle on devnet beside your current process: no custody, no real money, nothing to change in how you issue. Proposed production pricing is on the pricing page.
Does it run beyond Solana?
Yes. The same servicing runs as Solidity on Base, Arbitrum and Robinhood Chain with the Ethereum Attestation Service, with pilot notes on Base and Arbitrum One mainnet. Its first version runs on HashKey Chain mainnet.
Is the code open source?
Yes, under MIT: the Anchor program, the console and the tests. ARCHITECTURE.md maps every account and flow in 22 diagrams.
Run one coupon cycle with us.
We are looking for our first design partners, starting in Hong Kong and Singapore. Bring one bond, and we will run its next coupon on devnet beside your current process.