Section 4: OTCM Liquidity Pool Architecture — Layer 3

OTCM PROTOCOL

Comprehensive Technical Whitepaper — Version 7.0

ST22 Digital Securities Platform | March 2026 | Groovy Company, Inc. dba OTCM Protocol

Section 4: Global Unified CEDEX Liquidity Pool — Layer 3

The permanent, protocol-owned liquidity infrastructure that serves all ST22 issuers simultaneously — the architectural innovation that makes secondary market trading viable for OTC microcap Digital Securities for the first time.

Section 4 Overview

The Global Unified CEDEX Liquidity Pool is the single protocol-owned capital reserve that serves all ST22 issuers simultaneously. It is funded by two protocol-owned sources: (1) OTCM Protocol Solana Treasury — the SOL treasury held by the protocol; (2) OTCM Staking Pool — a portion of staking pool capital routes to the liquidity pool. Additional perpetual deepening mechanisms: 5% transaction fee allocation on every CEDEX trade, investor secondary sale proceeds post-holding-period, and 2% staking reward reinvestment. All capital is permanently locked — LP tokens burned at initialization, no withdrawal function exists in the contract.

4.1 Architecture Overview

The OTCM Global Unified CEDEX Liquidity Pool is the defining infrastructure innovation of OTCM Protocol. It is the reason every issuer that onboards to the Gateway inherits an immediately functional secondary market on CEDEX — with no per-issuer liquidity sourcing, no bonding curve bootstrapping, and no dependency on external market makers.

The pool operates as a single shared capital reserve that all ST22 issuers draw upon simultaneously. It is funded by the OTCM Protocol Solana Treasury and the OTCM Staking Pool, and deepens continuously through two perpetual mechanisms: the 5% transaction fee on every CEDEX trade across all issuers, and investor secondary sale proceeds routing into the pool after the mandatory holding period expires.

4.1.1 The Structural Liquidity Problem

Creating secondary market liquidity for microcap OTC securities has historically failed at the same structural point: each token requires dedicated liquidity, and the economics of building adequate depth in a thin market have been fundamentally unviable. The Global Unified CEDEX Liquidity Pool resolves this by making liquidity a shared protocol resource rather than an individual issuer obligation.

Problem	Traditional Approach	OTCM Global Unified Pool
Capital efficiency	Low — capital isolated per token, most sits idle	High — shared reserves serve all ST22 issuers simultaneously
New issuer liquidity	Starts at zero — must bootstrap from scratch	Inherits full existing pool depth on day one
Bootstrapping cost	Issuer or operator must fund each token pool independently	Zero per-issuer cost — OTCM Solana Treasury and Staking Pool fund the shared pool
Price impact	High for thin individual pools	Reduced — all issuers share combined depth
Rug pull risk	LP can withdraw individual pool at any time	Mathematically impossible — global pool permanently locked
Growth trajectory	Linear — each pool independent	Compounding — every new issuer adds fee volume to shared pool
Infrastructure failure	Any issuer's performance affects its dedicated pool	One issuer's performance has no effect on pool available to others

4.1.2 Unified Pool Design Principles

The Global Unified CEDEX Liquidity Pool is governed by three foundational principles that collectively produce the institutional-grade market infrastructure properties described throughout this section:

• Capital Permanence — All capital entering the Global Pool remains permanently. The pool contract contains no withdrawal function. LP tokens are burned at initialization. Once capital enters the pool it cannot exit under any circumstance except a 2/3 DAO supermajority vote with 48-hour timelock and mandatory destination restriction to a new compliant pool contract — not to external wallets.

• Unified Reserve Model — All ST22 issuers draw from the same capital reserve. A single $50M pool provides deeper liquidity than fifty separate $1M pools — the mathematics of CPMM price impact are a function of total pool TVL, not per-token allocation.

• Compounding Growth — Multiple independent capital streams continuously feed the unified pool — protocol treasury, staking pool, transaction fees, and investor secondary sales. The cumulative effect creates compound growth where each new issuer adds trading volume, which generates fees, which deepen the pool, which makes the platform more attractive to subsequent issuers.

"OTCM Protocol does not ask how to attract liquidity. It builds infrastructure where liquidity can only grow — a protocol-owned pool with no withdrawal function, seeded once, deepened by every trade, forever."

4.1.3 Network Effect Economics

The Global Pool creates a compounding network effect unique to the unified architecture. Every issuer that onboards adds trading volume — and therefore fee revenue — that deepens the pool for all existing and future issuers simultaneously:

Participant	Network Effect Benefit	Mechanism
Early issuers	Benefit from all subsequent issuer fee contributions	Later issuers' trading adds to shared pool depth
Late issuers	Access mature liquidity infrastructure on day one	Graduate into established deep pool, not a zero-balance pool
Accredited investors	Improving price execution over time	Growing reserves reduce price impact on secondary sales
OTCM Protocol	Increasing treasury replenishment from ecosystem volume	5% fee scales with total platform trading volume across all issuers

4.2 Capital Accumulation Mechanism 1: OTCM Protocol Solana Treasury & Staking Pool

Capital Accumulation Mechanism 1 · OTCM Protocol Solana Treasury & Staking Pool

Protocol-owned capital funding the pool's permanent depth — OTCM Solana Treasury and OTCM Staking Pool

The first capital accumulation mechanism is the protocol-owned capital deployed by OTCM Protocol to establish the pool's permanent depth. Two distinct protocol-owned sources fund this mechanism:

• OTCM Protocol Solana Treasury — The SOL treasury held by OTCM Protocol provides the primary capital base for the Global Pool. This is the protocol's own balance sheet capital, denominated in SOL, deployed as permanent pool infrastructure at launch.

• OTCM Staking Pool — A portion of the OTCM Staking Pool capital routes directly to the Global Unified CEDEX Liquidity Pool. This creates a structural link between protocol staking activity and secondary market liquidity depth — as staking participation grows, so does the pool's capital base.

Together, these two sources establish the pool's founding liquidity depth and ensure that the first accredited investors who exit their positions after the holding period have a functional buy-side available from day one. Both are protocol-owned capital — not investor capital, not issuer capital, and not dependent on external market maker participation.

4.2.1 Why Protocol-Owned Funding Is the Right Architecture

Funding the Global Pool from the OTCM Protocol Solana Treasury and Staking Pool — rather than from issuer contributions, bonding curve proceeds, or external market makers — is the architectural choice that makes the pool structurally independent of any individual issuer's performance. The pool exists and deepens regardless of how any single ST22 token trades. The pool then becomes further self-sustaining through the perpetual fee accumulation described in Section 4.3, investor secondary sale proceeds, and the ongoing Staking Pool contribution.

4.2.2 Pool Initialization Protocol

• Treasury transfer — OTCM Protocol transfers the seed capital from its SOL treasury to the Global Pool smart contract on launch day

• LP token burn — The pool contract mints LP tokens representing the initial liquidity position and immediately burns them to a designated burn address (0x000…dead equivalent on Solana). No entity holds LP tokens after initialization.

• Permanent lock confirmed — The burn of LP tokens at initialization is the event that makes the pool permanently locked. With no LP tokens in circulation, there is no mechanism to claim the underlying pool reserves. This is not a policy commitment — it is a mathematical property of the CPMM contract.

• Staking Pool routing activated — The Staking Pool's contribution to the Global Pool begins routing automatically. Both protocol-owned capital sources are now flowing to pool depth.

• Pool activation — CEDEX order routing is activated against the pool. The pool is immediately available for all ST22 secondary trading.

4.3 Capital Accumulation Mechanism 2: 5% Transaction Fee Allocation

Capital Accumulation Mechanism 2 · 5% Transaction Fee Allocation

Perpetual — every CEDEX trade across every ST22 issuer contributes to pool depth

The second and primary ongoing capital accumulation mechanism derives from CEDEX's 5% transaction fee applied to every ST22 trade across all issuers. A defined allocation of this fee routes permanently to the Global Pool on every transaction, creating a direct, automatic relationship between platform trading activity and pool depth.

This mechanism has no ceiling, no expiry, and no dependency on issuer behavior. As long as any ST22 token trades on CEDEX, the Global Pool receives its allocation. The more issuers on the platform, the more trading volume, the faster the pool grows.

4.3.1 Fee Structure

CEDEX implements a 5% total transaction fee (500 basis points). The fee is configured at the SPL Token-2022 Transfer Fee Extension level — it cannot be bypassed by any trading venue or wallet. Distribution is as follows:

Fee Recipient	Rate	BPS	Purpose	Lock Status
Issuer treasury	2.00%	200	Revenue to tokenizing company	Withdrawable by issuer
OTCM staking pool	1.50%	150	Distributed to OTCM stakers — 8–60% APY	Distributed per epoch
Protocol operations	1.06%	106	Infrastructure, compliance oracles, development	Withdrawable by OTCM Protocol
Global Unified CEDEX Pool	0.44%	44	Permanent pool depth accumulation	PERMANENTLY LOCKED
TOTAL	5.00%	500	Complete fee structure	—

4.3.2 Volume-Based Projections

The following projections model 0.44% of projected CEDEX trading volume across all ST22 issuers contributing to the Global Pool. These are the fee-contribution projections only — not total pool TVL, which includes the treasury seed and investor secondary sale contributions:

Year	Est. Total CEDEX Volume	Total Fees (5%)	LP Share (0.44%)	Cumulative Fee Contribution
Year 1	$544M	$27.2M	$2.39M	$2.39M
Year 2	$580M	$29.0M	$2.55M	$4.94M
Year 3	$1.45B	$72.5M	$6.38M	$11.32M
Year 4	$2.90B	$145M	$12.76M	$24.08M
Year 5	$5.80B	$290M	$25.51M	$49.59M

Capital Source Evolution

In early years, the treasury seed dominates pool TVL. By Year 3, fee accumulation has matched the initial seed. By Year 5, the perpetual fee mechanism has contributed nearly $50M in locked depth — making the Global Pool self-sustaining at institutional scale regardless of any additional treasury contribution.

4.4 Capital Accumulation Mechanism 3: Investor Secondary Sale Proceeds

Capital Accumulation Mechanism 3 · Investor Secondary Sale Proceeds

Continuous — accredited investor sales after holding period route into the pool

The third capital accumulation mechanism is inherent to the Regulation D issuance model. One hundred percent of ST22 tokens are distributed to verified accredited investors at minting. After the mandatory holding period (6 months US / 12 months non-US), those investors sell their tokens on CEDEX. The proceeds of those sales flow through the Global Pool's CPMM — adding buy-side depth and contributing to overall pool liquidity.

This mechanism creates a virtuous cycle: investors who invested early in an ST22 offering, held through the Rule 144 period, and now wish to liquidate provide the capital that makes the pool deeper for the next round of investors. The secondary market is self-funding from participant activity rather than dependent on protocol capital injection.

4.4.1 Secondary Sale Flow

• Holding period expires — Transfer Hook Control 24 clears for the investor's wallet automatically at the 6-month (US) or 12-month (non-US) mark

• Investor initiates sale on CEDEX — The investor places a sell order through the CEDEX interface — market order, limit order, or stop-loss (all available post-graduation)

• Transfer Hook validates — All 42 controls execute. Control 24 confirms holding period satisfied. Control 12 confirms buyer is a verified accredited investor. Control 20 confirms buyer wallet stays under 4.99% concentration limit.

• CPMM executes against Global Pool — The Custom AMM Engine executes the swap against the Global Pool's CPMM formula. Proceeds route to the seller. Pool reserves adjust per x × y = k.

• 5% fee routed — 0.44% of the transaction value routes permanently to the Global Pool — meaning every sale further deepens the pool it just drew upon.

4.4.2 Buyer-Side Requirement

Every secondary sale on CEDEX requires a buyer who is also a verified accredited investor — Transfer Hook Control 12 enforces this on every transfer. This means secondary market participation is not open to the general public. It is limited to investors who have completed the Empire Stock Transfer onboarding process (KYC/KYB/AML/OFAC/Wallet Verification) and have been certified as accredited investors.

This constraint is architecturally intentional. It maintains the Regulation D 506(c) compliance environment in the secondary market — preventing the secondary trading activity from constituting an unregistered public distribution. It also means the Global Pool's buy-side counterparties are institutional-quality market participants, contributing to price stability.

4.5 Capital Accumulation Mechanism 4: Staking Reward Reinvestment

Capital Accumulation Mechanism 4 · Staking Reward Reinvestment

Automatic — 2% of all staking rewards permanently redirect to pool before reaching holder wallets

The fourth capital accumulation mechanism operates within the OTCM Staking Pool infrastructure. Two percent of all OTCM Security Token staking rewards are programmatically captured and permanently locked in the Global Pool before distribution to staker wallets — in addition to the direct Staking Pool capital contribution described in Section 4.2. This mechanism is immutable, enforced by Transfer Hook logic, and cannot be disabled by any governance action.

4.5.1 Staking Architecture

OTCM Security Token stakers earn yield from two sources: a share of the 1.5% CEDEX trading fee allocation (described in Section 4.3) and staking emission rewards. Both sources are subject to the 2% automatic reinvestment mechanism. The staking node architecture assigns each ST22 Digital Securities token its own dedicated staking node, enabling token holders to earn continuous passive income:

APY Tier	Condition	Approximate APY
Floor	Early-stage — low platform volume	8%
Standard	Operational at moderate volume	20–35%
Growth	High trading volume + accumulated fees	35–55%
Peak	Maximum platform utilization	Up to 60%

4.5.2 2% Automatic Reinvestment — Immutability Guarantee

The 2% reinvestment executes through immutable Transfer Hook logic. There is no administrative function, upgrade path, or governance mechanism capable of disabling or reducing this percentage below 2%. The mechanism is hard-coded at the Transfer Hook level, which is itself immutable after mint creation. This is not a policy commitment — it is a mathematical property of the deployed smart contract.

Non-Bypassable Mechanism

The 2% staking reinvestment to the Global Pool executes before staking rewards reach holder wallets. It is enforced by the same Transfer Hook architecture that enforces all 42 security controls. Stakers receive their full entitled yield net of the 2% — the mechanism is transparent and disclosed. It is mathematically inevitable that 2% of all staking rewards deepen the Global Pool.

4.5.3 Compounding Frequency

OTCM staking rewards compound every 2.6 days — approximately 140 compounding events per year. This compounding frequency is 35 times more frequent than quarterly dividends and 12 times more frequent than monthly distributions:

Vehicle	Compound Frequency	Events/Year	Effective APY (10% nominal)
Traditional quarterly dividend	Quarterly	4	10.38%
Monthly dividend	Monthly	12	10.47%
OTCM staking (every 2.6 days)	Every 2.6 days	~140	10.52%

4.6 Permanent Lock Architecture

The permanent lock is not the fourth capital accumulation mechanism — it is the foundational constraint that makes all four mechanisms meaningful. Without permanent lock enforcement, any of the above capital accumulation mechanisms would simply be temporary liquidity that could be withdrawn, eliminating all institutional assurances the pool provides.

4.6.1 Smart Contract Design

The permanent lock is implemented through smart contract design — the pool contract simply does not contain a withdrawal function. This is the most secure form of lock: there is no code to exploit, no administrator key to compromise, no governance proposal to pass. The capital cannot be withdrawn because the operation does not exist in the contract.

• No withdrawal function — The pool contract has no function that allows capital to be extracted to any external address

• LP token burn at initialization — LP tokens representing the initial liquidity position are burned to a null address at pool creation. No party holds LP tokens that could be redeemed for underlying reserves.

• Governance-locked — The pool contract is outside the adjustable parameters of DAO governance. The immutable core program cannot be modified by any governance vote.

• Audit-verified — The absence of withdrawal functionality is verified by the third-party security audits (Quantstamp, Halborn, OtterSec) required before production deployment.

4.6.2 Emergency Override Conditions

A single emergency override exists for catastrophic scenarios — specifically, a discovered vulnerability in the pool contract that requires migration to a new secure contract. This override is not a withdrawal mechanism:

Requirement	Specification
DAO vote threshold	2/3 supermajority (66.67%) of staked OTCM voting power
Quorum requirement	Minimum 30% of total staked OTCM must participate in the vote
Timelock duration	48 hours between vote passage and execution capability — providing community awareness and legal intervention window
Destination restriction	Override can only migrate capital to a new pool contract that has passed independent third-party security audit — not to any external wallet
Audit requirement	New destination contract must pass third-party security audit before migration is permitted

These requirements make unauthorized capital extraction practically impossible while preserving the ability to address a genuine security vulnerability. The 48-hour timelock provides sufficient time for community awareness, legal intervention, and regulatory notification if an override is attempted maliciously.

4.7 Mathematical Modeling

4.7.1 Price Impact by Pool TVL

The CPMM formula (x × y = k) produces price impact as a function of trade size relative to total pool TVL. The following table demonstrates how Global Pool depth translates directly to trading quality for ST22 investors:

Pool TVL	$10K Trade	$50K Trade	$100K Trade	$500K Trade
$5M	0.20%	1.00%	2.00%	10.0%
$12.5M	0.08%	0.40%	0.80%	4.0%
$25M	0.04%	0.20%	0.40%	2.0%
$50M	0.02%	0.10%	0.20%	1.0%
$65M+	0.016%	0.08%	0.16%	0.78%

The practical implication: a $100K investor secondary sale at Year 5 pool depth ($65M+) incurs only 0.16% price impact — comparable to institutional OTC desk execution for a listed security, and orders of magnitude better than the zero liquidity that currently exists for these securities.

4.7.2 Five-Year Pool TVL Projections — Base Case

Base case assumptions: 8 issuer onboardings Year 1 growing 25% annually; $500M initial annual CEDEX volume growing 80% annually; 50% OTCM staking participation; OTCM treasury seed of $2M at launch.

Period	SOL Treasury & Staking Pool	Fee Contributions	Staking 2%	Investor Sales	Year Total	Cumulative TVL
Launch	$2.0M	—	—	—	$2.0M	$2.0M
Year 1	—	$2.39M	$0.1M	$0.5M	$2.99M	$4.99M
Year 2	—	$2.55M	$0.3M	$1.2M	$4.05M	$9.04M
Year 3	—	$6.38M	$0.8M	$2.5M	$9.68M	$18.72M
Year 4	—	$12.76M	$1.5M	$4.0M	$18.26M	$36.98M
Year 5	—	$25.51M	$2.0M	$5.0M	$32.51M	$65.29M+

The 'Investor Sales' column represents the ongoing deepening effect of accredited investor secondary sales routing through the CPMM — a mechanism that grows as more issuers complete their Regulation D raises and more investors exit their positions after the mandatory holding period.

4.8 Pool Governance

4.8.1 Governable Parameters

• Fee distribution ratios — The percentage allocation among the five fee recipients (issuer, staking, operations, pool) can be adjusted via DAO vote — subject to a maximum 10% change per proposal and 48-hour timelock

• New ST22 token routing — Approval of newly minted ST22 tokens for CPMM trading against the Global Pool

• Circuit breaker thresholds — Modification of price impact limits and volume halt parameters within defined safety bounds

• Emergency response — Activation of the override migration mechanism under the 2/3 supermajority + 48h timelock conditions described in §4.6.2

4.8.2 Non-Governable (Immutable)

• Permanent lock status — Cannot be removed without satisfying the full 2/3 supermajority + 48h timelock + destination restriction + audit requirements

• 2% staking reinvestment — Hard-coded in Transfer Hook logic — not modifiable by any governance action

• Capital withdrawal — No withdrawal function exists in the pool contract — governance cannot create one without a full contract migration under emergency override conditions

• Graduation migration (GROO) — The automatic transfer of bonding curve capital to the pool upon GROO token graduation cannot be disabled

4.9 Security Architecture

4.9.1 Smart Contract Security

• Formal verification — Pool logic formally verified using Certora Prover prior to production deployment

• Independent audits — Multiple independent security audits required: Quantstamp, Halborn, and OtterSec. Audit reports published publicly.

• Bug bounty program — Up to $500K in rewards for critical vulnerability reports — specifically prioritizing: liquidity extraction vulnerabilities, CPMM arithmetic exploits, fee routing bypass, and LP burn circumvention

• No upgrade proxy — The core pool contract uses no upgrade proxy pattern — eliminating the attack surface where an upgrade could introduce a withdrawal function

4.9.2 Economic Security

• No single point of failure — Three independent capital inflow mechanisms — failure of any one does not stop the pool from deepening through the others

• Multi-source inflows — Diversification across treasury seed, fee accumulation, and investor sales reduces dependency on any single mechanism

• Bank-run immunity — Permanent locks eliminate the possibility of a coordinated withdrawal cascade — a risk that has caused multiple DeFi protocol collapses

• Diversified asset exposure — The pool holds liquidity across all ST22 Digital Securities tokens traded on CEDEX — not concentrated in any single issuer

4.9.3 Institutional Assurance Properties

The permanent lock architecture creates four institutional-grade assurances that are essential for regulated securities markets:

Assurance	Description	Without Permanent Lock
Liquidity certainty	Market makers and investors know liquidity will be available indefinitely — no monitoring required	Liquidity depends on active participation — can disappear without notice
Price stability	No risk of sudden liquidity withdrawal causing price dislocation events	Sudden capital withdrawal can collapse pool pricing instantly
Long-term planning	Issuers can make multi-year business decisions knowing the trading venue will exist	Venue liquidity depends on ongoing participation incentives
Regulatory comfort	Demonstrates commitment to market integrity over short-term profit extraction — consistent with SEC Category 1 Model B spirit	Profit-motivated behavior may conflict with investor protection obligations

Capital Architecture Summary

The Global Unified CEDEX Liquidity Pool is funded by two protocol-owned capital sources: (1) OTCM Protocol Solana Treasury and (2) OTCM Staking Pool. It deepens continuously through: 5% transaction fee allocation (0.44% per trade permanently locked), investor secondary sale proceeds post-holding-period, and 2% staking reward reinvestment via immutable Transfer Hook. All capital is permanently locked — no withdrawal function exists in the pool contract.

Groovy Company, Inc. dba OTCM Protocol | CIK: 1499275 | Version 7.0 | March 2026 | Confidential