📚 Section 15: References

📚 Federal securities laws, blockchain technical documentation, AML regulations, and OTCM Protocol internal documents cited throughout this whitepaper.

⚖️ Federal Securities Laws and Regulations

[0a] U.S. Securities and Exchange Commission and Commodity Futures Trading Commission. Statement on Crypto Asset Securities. Release No. 33-11412. March 17, 2026. Joint interpretation establishing the formal Digital Securities taxonomy under federal securities law — defining five categories of crypto assets and their respective regulatory treatment. Confirms that ST22 Security Tokens are "Digital Securities (tokenized securities)" — financial instruments formatted as crypto assets where the record of ownership is maintained on a crypto network. The primary regulatory authority governing all ST22 Digital Securities offerings and trading on CEDEX.

[0b] U.S. Securities and Exchange Commission. Staff Fact Sheet: Crypto Asset Securities. Division of Corporation Finance. March 17, 2026. Companion fact sheet to Release No. 33-11412 summarizing the five-category Digital Securities taxonomy and guidance on investment contract lifecycle.

[1] U.S. Securities and Exchange Commission. Joint Staff Statement on Tokenized Securities. Division of Corporation Finance, Division of Investment Management, and Division of Trading and Markets. January 28, 2026. Primary regulatory guidance establishing the SEC staff taxonomy for tokenized securities — defining issuer-sponsored and third-party-sponsored models, and confirming that the format of issuance (on-chain vs. off-chain) does not alter the application of federal securities laws.

Available: https://www.sec.gov/newsroom/speeches-statements/corp-fin-statement-tokenized-securities-012826-statement-tokenized-securities

🔑 Key Holdings Relevant to OTCM Protocol:

A tokenized security is a financial instrument within the definition of "security" under federal securities laws, formatted as or represented by a crypto asset where the record of ownership is maintained in whole or in part on or through one or more crypto networks.

Under the issuer-sponsored model, integrating DLT into the master securityholder file — such that a transfer of the crypto asset results in a transfer of the security on the master securityholder file — is a recognized compliant structure. This is the model upon which OTCM Protocol ST22 architecture is built.

Alternatively, a crypto asset may notify the issuer (or its agent) to record the transfer of ownership on a master securityholder file maintained off-chain — directly describing OTCM Protocol SEC Category 1 Model B architecture: Empire Stock Transfer maintains the authoritative off-chain master securityholder file; the Solana blockchain serves as the operational notification layer.

The SEC states: "The format in which a security is issued or the methods by which holders are recorded (e.g., onchain vs. offchain) does not affect application of the federal securities laws." Registration, exemption, and disclosure obligations apply equally regardless of tokenization format.

Stock is an "equity security" under the Securities Act and Exchange Act regardless of its format, confirming that Series M Preferred Shares underlying ST22 Digital Securities tokens retain full federal securities law protection.

[2] Securities Act of 1933. 15 U.S.C. § 77a et seq. Federal statute governing securities offerings and registration requirements.

[3] Securities Exchange Act of 1934. 15 U.S.C. § 78a et seq. Federal statute governing securities trading, broker-dealers, and market manipulation.

[4] Regulation D — Rules Governing Limited Offer and Sale of Securities. 17 CFR § 230.500–508. SEC regulations providing exemptions from registration for private placements.

[5] Rule 506(c) — Conditions for Accredited Investor Offerings. 17 CFR § 230.506(c). SEC rule permitting general solicitation in offerings limited to accredited investors.

[6] Rule 10b-5 — Employment of Manipulative and Deceptive Practices. 17 CFR § 240.10b-5. SEC rule prohibiting fraud and market manipulation in securities transactions.

[7] Rule 15c2-11 — Publication of Quotations. 17 CFR § 240.15c2-11. SEC rule governing market maker quotation requirements for OTC securities.

[8] Transfer Agent Registration and Requirements. 17 CFR § 240.17a-1 et seq. SEC regulations governing transfer agent registration, custody, and reporting.

[9] Regulation A+ — Conditional Small Issues Exemption. 17 CFR § 230.251–263. SEC regulations permitting offerings up to $75M to non-accredited investors.

[10] Regulation S — Rules Governing Offers and Sales Outside U.S. 17 CFR § 230.901–905. SEC regulations for offshore securities offerings to non-U.S. persons.

[11] Rule 13d-3 — Determination of Beneficial Owner. 17 CFR § 240.13d-3. SEC rule defining beneficial ownership for disclosure requirements.

[12] Rule 144 — Sale of Restricted and Control Securities. 17 CFR § 230.144. SEC rule governing resale of restricted securities after holding periods.

🔍 Anti-Money Laundering and Sanctions Regulations

[13] Bank Secrecy Act (BSA). 31 U.S.C. § 5311 et seq. Federal statute requiring financial institutions to assist in detecting money laundering.

[14] BSA/AML Implementation Regulations. 31 CFR § 1010. Treasury regulations implementing Bank Secrecy Act AML requirements.

[15] OFAC Sanctions Administration Regulations. 31 CFR § 500–598. Treasury regulations governing economic sanctions and prohibited transactions.

[16] FinCEN SAR Filing Requirements. 31 CFR § 1020.320. Requirements for filing Suspicious Activity Reports with Financial Crimes Enforcement Network.

[17] Customer Identification Program Requirements. 31 CFR § 1020.220. KYC requirements for financial institutions under Bank Secrecy Act.

⚡ Solana Blockchain Technical Documentation

[18] Solana Foundation. Solana Documentation — Architecture Overview. Official documentation describing Solana blockchain architecture, Proof of History, Tower BFT, Sealevel parallel execution, and consensus mechanisms. Available: https://docs.solana.com

[19] Solana Program Library. SPL Token-2022 Program Specification. Technical specification for Token-2022 standard including Transfer Hook extensions, Confidential Transfers, Permanent Delegate, and all programmable extensions. Available: https://spl.solana.com/token-2022

[20] Solana Labs. Solana Transfer Hook Interface. Implementation guide for SPL Token-2022 Transfer Hook functionality — the security primitive underlying OTCM Protocol's 42-control compliance architecture.

[21] Coral. Anchor Framework Documentation. Smart contract development framework for Solana. Available: https://anchor-lang.com

[22] Solana Foundation. Solana RPC API Reference. API documentation for Solana RPC node interaction, transaction submission, and account querying.

🔄 DeFi Protocol Technical References

[23] Uniswap Labs. Uniswap V3 Core Whitepaper. 2021. Technical specification for concentrated liquidity AMM design. Mathematical foundation referenced in OTCM's CPMM post-graduation trading implementation.

[24] Buterin, V. et al. Constant Product Market Maker Theory. Mathematical foundation for x × y = k automated market maker formula underlying CEDEX's CPMM engine.

[25] Raydium. Raydium Protocol Documentation. Solana-based AMM and liquidity protocol. Referenced in Section 5 comparative analysis of existing DEX infrastructure. Available: https://docs.raydium.io

[26] Jupiter. Jupiter Aggregator Documentation. Solana DEX aggregator technical documentation. Referenced in Token-2022 compatibility analysis. Available: https://docs.jup.ag

[27] Orca. Orca Whirlpools Documentation. Concentrated liquidity implementation on Solana. Referenced in DEX comparison analysis. Available: https://docs.orca.so

✅ Blockchain Analytics and Compliance

[28] Chainalysis. Chainalysis Reactor Documentation. Blockchain analytics platform for AML compliance and investigation. Integrated via Chainalysis KYT (Know Your Transaction) API in OTCM Protocol Hook 3 (AML Analytics Screening).

[29] TRM Labs. TRM Labs Risk Assessment Methodology. Machine learning risk scoring for cryptocurrency transactions. Co-integrated with Chainalysis for AML risk scoring in Hook 3.

[30] Financial Action Task Force. FATF Virtual Asset Guidance. 2021. International AML/CFT standards for virtual assets and virtual asset service providers. Framework informing OTCM Protocol's AML architecture.

📁 OTCM Protocol Internal Documents

[31] Groovy Company, Inc. dba OTCM Protocol. OTCM Protocol Whitepaper V6.1. March 2026. Primary technical specification document for protocol architecture. This document.

[32] Groovy Company, Inc. dba OTCM Protocol. CEDEX Comprehensive Analysis. 2026. Detailed technical analysis of Centralized-Decentralized Exchange infrastructure.

[33] Groovy Company, Inc. dba OTCM Protocol. OTCM Liquidity Pool Unified Architecture. 2026. Technical specification for four-mechanism capital accumulation system.

[34] Groovy Company, Inc. dba OTCM Protocol. SPL Token-2022 Transfer Hook Technical Specification. 2026. Implementation documentation for 42-control Digital Securities security architecture.

[35] Groovy Company, Inc. dba OTCM Protocol. Issuers Portal Compliance Gateway Specification. 2026. Technical and regulatory framework for issuer onboarding under SEC Category 1 Model B.

[36] Groovy Company, Inc. dba OTCM Protocol. Confidential Private Placement Memorandum. 2026. Offering documentation for accredited investor Digital Securities offering under Rule 506(c).

[37] Groovy Company, Inc. dba OTCM Protocol. OTCM Protocol Analysis — SEC Crypto Task Force. 2026. Regulatory compliance analysis prepared for SEC Crypto Task Force engagement.

[38] Groovy Company, Inc. dba OTCM Protocol. The Alesia Doctrine — OTCM Protocol Strategy. 2026. Strategic security framework documentation.

[39] Groovy Company, Inc. dba OTCM Protocol. Global Perpetual Market Infrastructure Specification. 2026. Long-term vision document for international Digital Securities market expansion.

[40] Groovy Company, Inc. dba OTCM Protocol. Share Custody Protocols. 2026. Empire Stock Transfer integration and custody verification procedures under SEC Category 1 Model B.

🛡️ Security Audit and Verification

[41] Quantstamp. Smart Contract Audit Methodology. Formal verification and security audit procedures for blockchain protocols. Engaged for OTCM Protocol TransferHook programs, CEDEX AMM, and LiquidityPool pre-mainnet certification.

[42] Certora, Inc. Certora Prover Documentation. Symbolic execution and formal verification tools for smart contracts. Engaged for mathematical proof of CPMM x × y = k invariant, Transfer Hook atomicity, and LP lock permanence.

[43] Halborn. Halborn Security Assessment Framework. Penetration testing and security assessment methodology for DeFi protocols. Engaged for oracle network, key management, and infrastructure penetration testing.

📋 Document Information

Field	Value
Document Title	OTCM Protocol Whitepaper
Version	V6.1
Date	March 2026
Issuer	Groovy Company, Inc. dba OTCM Protocol
Jurisdiction	Wyoming Corporation
Contact — Investors	invest@otcm.io
Contact — Issuers	issuers@otcm.io
Contact — Partners	partners@otcm.io
Website	otcm.io
SEC EDGAR CIK	1499275
Ticker	GROO

This whitepaper is for informational purposes only and does not constitute an offer to sell or a solicitation of an offer to buy any securities. Securities offerings are made only pursuant to a valid offering memorandum and subscription agreement in compliance with applicable securities laws. ST22 Digital Securities are offered exclusively to verified accredited investors under SEC Regulation D Rule 506(c) (Release No. 33-11412). Past performance is not indicative of future results. Investment in Digital Securities involves significant risk, including the possible loss of the entire investment.