📚 Section 15: References

📚 Federal securities laws, blockchain technical documentation, AML regulations, and OTCM Protocol internal documents cited throughout this whitepaper.

📚 SECTION 15: REFERENCES

⚖️ Federal Securities Laws and Regulations

[1] SEC Joint Staff Statement on Tokenized Securities. Division of Corporation Finance, Division of Investment Management, and Division of Trading and Markets. U.S. Securities and Exchange Commission, January 28, 2026. Primary regulatory guidance establishing the SEC staff taxonomy for tokenized securities — defining issuer-sponsored and third-party-sponsored models, and confirming that the format of issuance (on-chain vs. off-chain) does not alter the application of federal securities laws. Establishes the definitional and structural framework directly applicable to OTCM Protocol ST22 token architecture under the Category 1 Issuer-Sponsored model. Available: https://www.sec.gov/newsroom/speeches-statements/corp-fin-statement-tokenized-securities-012826-statement-tokenized-securities

🔑 Key Holdings Relevant to OTCM Protocol:
A tokenized security is a financial instrument within the definition of "security" under federal securities laws, formatted as or represented by a crypto asset where the record of ownership is maintained in whole or in part on or through one or more crypto networks.
Under the issuer-sponsored model, integrating DLT into the master securityholder file — such that a transfer of the crypto asset results in a transfer of the security on the master securityholder file — is a recognized compliant structure. This is the model upon which OTCM Protocol ST22 architecture is built.
Alternatively, a crypto asset may notify the issuer (or its agent) to record the transfer of ownership on a master securityholder file maintained off-chain — directly describing OTCM Protocol Model B architecture: Empire Stock Transfer maintains the authoritative off-chain master securityholder file; the Solana blockchain serves as the operational notification layer.
The SEC states: "The format in which a security is issued or the methods by which holders are recorded (e.g., onchain vs. offchain) does not affect application of the federal securities laws." Registration, exemption, and disclosure obligations apply equally regardless of tokenization format.
Stock is an "equity security" under the Securities Act and Exchange Act regardless of its format, confirming that Series M Preferred Shares underlying ST22 tokens retain full federal securities law protection.

[2] Securities Act of 1933. 15 U.S.C. § 77a et seq.. Federal statute governing securities offerings and registration requirements.

[3] Securities Exchange Act of 1934. 15 U.S.C. § 78a et seq.. Federal statute governing securities trading, broker-dealers, and market manipulation.

[4] Regulation D - Rules Governing Limited Offer and Sale of Securities. 17 CFR § 230.500-508. SEC regulations providing exemptions from registration for private placements.

[5] Rule 506(c) - Conditions for Accredited Investor Offerings. 17 CFR § 230.506(c). SEC rule permitting general solicitation in offerings limited to accredited investors.

[6] Rule 10b-5 - Employment of Manipulative and Deceptive Practices. 17 CFR § 240.10b-5. SEC rule prohibiting fraud and market manipulation in securities transactions.

[7] Rule 15c2-11 - Publication of Quotations. 17 CFR § 240.15c2-11. SEC rule governing market maker quotation requirements for OTC securities.

[8] Transfer Agent Registration and Requirements. 17 CFR § 240.17a-1 et seq.. SEC regulations governing transfer agent registration, custody, and reporting.

[9] Regulation A+ - Conditional Small Issues Exemption. 17 CFR § 230.251-263. SEC regulations permitting offerings up to $75M to non-accredited investors.

[10] Regulation S - Rules Governing Offers and Sales Outside U.S.. 17 CFR § 230.901-905. SEC regulations for offshore securities offerings to non-U.S. persons.

[11] Rule 13d-3 - Determination of Beneficial Owner. 17 CFR § 240.13d-3. SEC rule defining beneficial ownership for disclosure requirements.

[12] Rule 144 - Sale of Restricted and Control Securities. 17 CFR § 230.144. SEC rule governing resale of restricted securities after holding periods.

🔍 Anti-Money Laundering and Sanctions Regulations

[13] Bank Secrecy Act (BSA). 31 U.S.C. § 5311 et seq.. Federal statute requiring financial institutions to assist in detecting money laundering.

[14] BSA/AML Implementation Regulations. 31 CFR § 1010. Treasury regulations implementing Bank Secrecy Act AML requirements.

[15] OFAC Sanctions Administration Regulations. 31 CFR § 500-598. Treasury regulations governing economic sanctions and prohibited transactions.

[16] FinCEN SAR Filing Requirements. 31 CFR § 1020.320. Requirements for filing Suspicious Activity Reports with Financial Crimes Enforcement Network.

[17] Customer Identification Program Requirements. 31 CFR § 1020.220. KYC requirements for financial institutions under Bank Secrecy Act.

⚡ Solana Blockchain Technical Documentation

[18] Solana Documentation - Architecture Overview. Solana Foundation. Official documentation describing Solana blockchain architecture and consensus mechanisms. Available: https://docs.solana.com

[19] SPL Token-2022 Program Specification. Solana Program Library. Technical specification for Token-2022 standard including transfer hooks. Available: https://spl.solana.com/token-2022

[20] Solana Transfer Hook Interface. Solana Labs. Implementation guide for SPL Token-2022 transfer hook functionality.

[21] Anchor Framework Documentation. Coral. Smart contract development framework for Solana. Available: https://anchor-lang.com

[22] Solana RPC API Reference. Solana Foundation. API documentation for Solana RPC node interaction.

🔄 DeFi Protocol Technical References

[23] Uniswap V3 Core Whitepaper. Uniswap Labs, 2021. Technical specification for concentrated liquidity AMM design.

[24] Constant Product Market Maker Theory. Buterin, V. et al.. Mathematical foundation for x*y=k automated market maker formula.

[25] Raydium Protocol Documentation. Raydium. Solana-based AMM and liquidity protocol. Available: https://docs.raydium.io

[26] Jupiter Aggregator Documentation. Jupiter. Solana DEX aggregator technical documentation. Available: https://docs.jup.ag

[27] Orca Whirlpools Documentation. Orca. Concentrated liquidity implementation on Solana. Available: https://docs.orca.so

✅ Blockchain Analytics and Compliance

[28] Chainalysis Reactor Documentation. Chainalysis. Blockchain analytics platform for AML compliance and investigation.

[29] TRM Labs Risk Assessment Methodology. TRM Labs. Machine learning risk scoring for cryptocurrency transactions.

[30] FATF Virtual Asset Guidance. Financial Action Task Force, 2021. International AML/CFT standards for virtual assets and service providers.

📁 OTCM Protocol Internal Documents

[31] OTCM Protocol Technical Whitepaper v2.0. OTCM Protocol, Inc., 2025. Primary technical specification document for protocol architecture.

[32] CEDEX Comprehensive Analysis. OTCM Protocol, Inc., 2025. Detailed technical analysis of Centralized-Decentralized Exchange infrastructure.

[33] OTCM Liquidity Pool Unified Architecture. OTCM Protocol, Inc., 2025. Technical specification for four-mechanism capital accumulation system.

[34] SPL Token-2022 Transfer Hooks Implementation Guide. OTCM Protocol, Inc., 2025. Implementation documentation for 42-point security architecture.

[35] Issuers Portal Compliance Gateway Specification. OTCM Protocol, Inc., 2025. Technical and regulatory framework for issuer onboarding.

[36] Confidential Private Placement Memorandum. OTCM Protocol, Inc., 2025. Offering documentation for accredited investor securities offering.

[37] OTC Meme Protocol Analysis - SEC Crypto Task Force. OTCM Protocol, Inc., 2025. Regulatory compliance analysis prepared for SEC engagement.

[38] The Alesia Doctrine - OTCM Protocol Strategy. OTCM Protocol, Inc., 2025. Strategic framework documentation using historical military analogy.

[39] Global Perpetual Market Infrastructure Specification. OTCM Protocol, Inc., 2025. Long-term vision document for international market expansion.

🛡️ Security Audit and Verification

[41] Quantstamp Smart Contract Audit Methodology. Quantstamp. Formal verification and security audit procedures for blockchain protocols.

[42] Certora Prover Documentation. Certora. Symbolic execution and formal verification tools for smart contracts.

[43] Halborn Security Assessment Framework. Halborn. Penetration testing and security assessment methodology for DeFi protocols.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

END OF DOCUMENT

OTCM Protocol, Inc.

A Wyoming Digital Asset Corporation

investors@otcm.io | otcm.io

Document Version 1.0 | December 2025