Section 4: OTCM Liquidity Pool Architecture — Layer 3

💧OTCM ThePROTOCOL Federated Comprehensive Technical Whitepaper  —  Version 7.0 ST22 Digital Securities Platform  |  March 2026  |  Groovy Company, Inc. dba OTCM Protocol

 

Section 4: Global Unified CEDEX Liquidity ProtocolPool — sovereignLayer 3

The permanent, protocol-owned liquidity infrastructure that serves all ST22 issuers simultaneously — the architectural innovation that makes secondary market trading viable for OTC microcap Digital Securities for the first time.

 

Section 4 Overview The Global Unified CEDEX Liquidity Pool is the single protocol-owned capital reserve that serves all ST22 issuers simultaneously. It is funded by two protocol-owned sources: (1) OTCM Protocol Solana Treasury — the SOL treasury held by the protocol; (2) OTCM Staking Pool — a portion of staking pool capital routes to the liquidity pool. Additional perpetual deepening mechanisms: 5% transaction fee allocation on every CEDEX trade, investor secondary sale proceeds post-holding-period, and 2% staking reward reinvestment. All capital is permanently locked — LP tokens burned at initialization, no withdrawal function exists in the contract.

 

4.1  Architecture Overview

The OTCM Global Unified CEDEX Liquidity Pool is the defining infrastructure innovation of OTCM Protocol. It is the reason every issuer that onboards to the Gateway inherits an immediately functional secondary market on CEDEX — with no per-issuer liquidity poolssourcing, withno permanentlybonding lockedcurve capital, four accumulation mechanisms,bootstrapping, and optionalno cross-dependency on external market makers.

The pool federationoperates routing.as a single shared capital reserve that all ST22 issuers draw upon simultaneously. It is funded by the OTCM Protocol Solana Treasury and the OTCM Staking Pool, and deepens continuously through two perpetual mechanisms: the 5% transaction fee on every CEDEX trade across all issuers, and investor secondary sale proceeds routing into the pool after the mandatory holding period expires.

 

---

🏗️

4.1.1 4.1 The Structural Liquidity Problem

Creating secondary market liquidity for microcap OTC securities has historically failed at the same structural point: each token requires dedicated liquidity, and the economics of building adequate depth in a thin market have been fundamentally unviable. The Global Unified Architecture Overview

The OTCMCEDEX Liquidity Pool representsresolves transformativethis institutional-gradeby marketmaking infrastructure, unifying four distinct but complementary capital accumulation mechanisms intoliquidity a singleshared integratedprotocol ecosystem.resource Thisrather unifiedthan architecturean createsindividual networkissuer effects that compound over time, establishing OTCM as the definitive liquidity venue for Digital Securities on Solana.obligation.

Unlike traditional DeFi protocols where each token pair requires separate liquidity provision, OTCM implements a shared liquidity model where all ST22 Security Tokens benefit from a common capital reserve. This design reflects lessons learned from both traditional securities markets — where centralized clearinghouses aggregate liquidity — and the DeFi ecosystem — where fragmented liquidity creates inefficient markets.

---

🔹 4.1.1 The Fragmentation Problem

Traditional per-issuer liquidity pools suffer from fundamental structural weaknesses that OTCM's unified architecture resolves:

Problem	Fragmented Model	OTCM Unified Model
CapitalProblem Efficiency	Traditional Approach	OTCM Global Unified Pool
Capital efficiency	Low — capital isolated per tokentoken, most sits idle	High — shared reserves serve all ST22 issuers simultaneously
New Tokenissuer Liquidityliquidity	Starts at zero every— timemust bootstrap from scratch	Inherits ecosystemfull existing pool depth on day one
Liquidity Provider Bootstrapping Riskcost	Concentrated per- Issuer or operator must fund each token exposurepool independently	Diversified portfolio Zero effectper-issuer cost — OTCM Solana Treasury and Staking Pool fund the shared pool
Price Impactimpact	High for low-liquiditythin tokensindividual pools	Reduced via— sharedall issuers share combined depth
Rug Pullpull Riskrisk	LP can withdraw anytimeindividual pool at any time	Permanently Mathematically impossible — global pool permanently locked capital
Growth Trajectorytrajectory	Linear (— each pool independent pools)	Compound (network Compounding effects)— every new issuer adds fee volume to shared pool
Infrastructure failure	Any issuer's performance affects its dedicated pool	One issuer's performance has no effect on pool available to others

---

 

🔹 4.1.2  Unified Pool Design PhilosophyPrinciples

The OTCMGlobal Unified CEDEX Liquidity Pool operatesis ongoverned by three foundational principles:principles that collectively produce the institutional-grade market infrastructure properties described throughout this section:

 

•       Principle 1: Capital Permanence —  All capital entering the OTCM LiquidityGlobal Pool remains permanently.permanently. UnlikeThe traditionalpool liquiditycontract poolscontains whereno providerswithdrawal canfunction. withdrawLP tokens are burned at will,initialization. OTCMOnce implementscapital immutableenters smartthe pool it cannot exit under any circumstance except a 2/3 DAO supermajority vote with 48-hour timelock and mandatory destination restriction to a new compliant pool contract locks ensuring capital can never be extracted. This permanence creates institutional-grade assurance that liquidity will always be available for trading — eliminatingnot theto "liquidityexternal flight" risk that plagues traditional DeFi protocols.wallets.

•       Principle 2: Unified Reserve Model —  Rather than maintaining separate reserves for eachAll ST22 token,issuers OTCMdraw implementsfrom athe unifiedsame reservecapital model where all tokens share access to common SOL liquidity.reserve. A single $50M pool provides deeper liquidity than fifty separate $1M pools.pools — the mathematics of CPMM price impact are a function of total pool TVL, not per-token allocation.

•       Principle 3: Compounding Growth — Multiple Four distinctindependent capital streams continuously feed the unified pool — protocol treasury, staking pool, eachtransaction withfees, independentand growthinvestor dynamics.secondary sales. The cumulative effect creates compound growth where capital begets more capital through trading fees, staking reinvestment, andeach new issuer graduations.adds trading volume, which generates fees, which deepen the pool, which makes the platform more attractive to subsequent issuers.

 

---

"TraditionalOTCM DeFiProtocol asks:does 'Hownot doask wehow to attract liquidity?'liquidity. OTCMIt asks:builds 'Howinfrastructure do we mathematically guaranteewhere liquidity can only grow?'grow — a protocol-owned pool with no withdrawal function, seeded once, deepened by every trade, forever."

 

🔹 4.1.3 Network Effects and Early Issuer Advantage

Economics

The

GlobalPool creates a compounding network effect unique to the unified architecture. Every issuer that onboards adds trading volume — and therefore fee revenue — that deepens the pool for all existing and future issuers simultaneously:

 

Participant	Network Effect Benefit	Mechanism

tradingvolumeacrossissuers

EarlyParticipant Issuers	Network Effect Benefit	Mechanism
Early issuers	Benefit from all subsequent issuer graduationsfee contributions	Later graduationsissuers' addtrading adds to shared pool depth
Token Holders Late issuers	Access mature liquidity infrastructure on day one	Graduate into established deep pool, not a zero-balance pool
Accredited investors	Improving price execution over time	Growing reserves reduce price impact on secondary sales
OTCM StakersProtocol	Increasing rewardtreasury poolsreplenishment from ecosystem volume	Trading fees 5% scalefee scales with TVLtotal andplatform activity
Lateall Issuers	Instant access to mature liquidity infrastructure	Graduate into established ecosystem

---

 

🔹 4.1.4 Capital Flow Architecture

CAPITAL INFLOWS — Four Streams
═══════════════════════════════════════════════════════

  [1] Bonding Curve Graduations    ──→  $1M–$5M per issuer · permanent
  [2] Trading Fee Allocation        ──→  0.44% of all CEDEX volume · permanent
  [3] Staking Reward Reinvestment   ──→  2% of all epoch rewards · permanent
  [4] Initial Protocol Deposit      ──→  $2M at launch · permanent

                    ↓ ↓ ↓ ↓
         ┌──────────────────────────┐
         │   OTCM LIQUIDITY POOL    │
         │   Unified · Permanent    │
         │   No Withdrawal Function │
         └──────────────────────────┘
                    ↓
         All ST22 Digital Securities
         Trading Pairs on CEDEX

---

💰 4.2  Capital Accumulation Mechanism 1: BondingOTCM CurveProtocol GraduationSolana Treasury & Staking Pool

The first and largest capital accumulation mechanism occurs when ST22 tokens graduate from bonding curve trading to permanent CPMM trading. Upon graduation, all SOL accumulated during the bonding curve phase (typically $1–5M per issuer) transfers irreversibly to the unified OTCM Liquidity Pool.

---

🔹 4.2.1 Graduation Capital Flow

ST22 Token reaches graduation criteria:
  ├── Market Cap ≥ $250,000 USD
  ├── Holder Count ≥ 127,000 wallets, OR
  └── Time Elapsed ≥ 72 hours
         ↓
Bonding Curve State Snapshot:
  ├── Total SOL accumulated: $X (typically $1–5M)
  ├── Total tokens issued: Y
  └── Final price: $Z per token
         ↓
Atomic Migration Transaction (single block):
  ├── Bonding curve contract disabled — PERMANENT
  ├── SOL reserves transfer to unified pool
  └── Token/SOL ratio established for CPMM
         ↓
Post-Graduation State:
  ├── Unified pool reserves: +$X
  ├── New ST22 trading pair active on CEDEX
  ├── All 42 Transfer Hook controls remain active
  └── Liquidity lock: PERMANENT

---

🔹 4.2.2 Capital Transfer Protocol

pub fn execute_graduation_transfer(
    ctx:           Context<GraduationTransfer>,
    tokens_issued: u64,
) -> Result<()> {
    // Verify graduation criteria met
    require!(
        bonding_curve.check_graduation_criteria()?,
        LpError::GraduationCriteriaNotMet
    );

    // Atomic capital transfer to unified pool
    transfer_sol(
        &ctx.accounts.bonding_curve_vault,
        &ctx.accounts.unified_pool_vault,
        capital_to_transfer,
    )?;

    // Register new ST22 token in unified pool
    unified_pool.total_sol_reserve += capital_to_transfer;
    unified_pool.registered_st22_tokens.push(RegisteredToken {
        mint:                  bonding_curve.token_mint,
        initial_contribution:  capital_to_transfer,
        graduation_timestamp:  Clock::get()?.unix_timestamp,
        tokens_in_circulation: tokens_issued,
    });

    // Permanently disable bonding curve — IMMUTABLE FLAG
    bonding_curve.is_graduated      = true;
    bonding_curve.graduation_timestamp = Some(Clock::get()?.unix_timestamp);
    bonding_curve.can_reactivate    = false;

    emit!(GraduationCompleted {
        token_mint:        bonding_curve.token_mint,
        capital_transferred: capital_to_transfer,
        new_pool_tvl:      unified_pool.total_sol_reserve,
    });

    Ok(())
}

---

🔹 4.2.3 Beta Validation — Graduation Analysis

Beta validation across three initial issuers — Groovy Company, Inc., Green Leaf Innovations, and MetroSpace Company — demonstrated $7M+ in liquidity processed through the bonding curve and graduation mechanism prior to platform-wide launch.

AccumulationMechanism1 

Metric	Pump.fun	Moonshot	OTCM Est.	Notes
Avg. Graduation Capital	$85K	$400K	$1–5M	Higher threshold
Graduation Rate	1.5%	0.8%	5–10%	Vetted issuers
Capital Permanence	None	None	·  100%OTCM Protocol Solana Treasury & Staking Pool	Locked Protocol-owned forevercapital funding the pool's permanent depth — OTCM Solana Treasury and OTCM Staking Pool

 

💡The Capitalfirst Permanencecapital Advantage:accumulation Traditionalmechanism DEXis protocolsthe likeprotocol-owned Raydiumcapital allowdeployed liquidityby providersOTCM Protocol to withdrawestablish atthe any time. OTCM'pool's permanent depth. Two distinct protocol-owned sources fund this mechanism:

•       OTCM Protocol Solana Treasury — The SOL treasury held by OTCM Protocol provides the primary capital base for the Global Pool. This is the protocol's own balance sheet capital, denominated in SOL, deployed as permanent pool infrastructure at launch.

•       OTCM Staking Pool — A portion of the OTCM Staking Pool capital routes directly to the Global Unified CEDEX Liquidity Pool. This creates a structural link between protocol staking activity and secondary market liquidity depth — as staking participation grows, so does the pool's capital base.

 

Together, these two sources establish the pool's founding liquidity depth and ensure that the first accredited investors who exit their positions after the holding period have a functional buy-side available from day one. Both are protocol-owned capital — not investor capital, not issuer capital, and not dependent on external market maker participation.

 

4.2.1  Why Protocol-Owned Funding Is the Right Architecture

Funding the Global Pool from the OTCM Protocol Solana Treasury and Staking Pool — rather than from issuer contributions, bonding curve proceeds, or external market makers — is the architectural choice that makes the pool structurally independent of any individual issuer's performance. The pool exists and deepens regardless of how any single ST22 token trades. The pool then becomes further self-sustaining through the perpetual fee accumulation described in Section 4.3, investor secondary sale proceeds, and the ongoing Staking Pool contribution.

 

4.2.2  Pool Initialization Protocol

•       Treasury transfer — OTCM Protocol transfers the seed capital from its SOL treasury to the Global Pool smart contract on launch day

•       LP token burn — The pool contract mints LP tokens representing the initial liquidity position and immediately burns them to a designated burn address (0x000…dead equivalent on Solana). No entity holds LP tokens after initialization.

•       Permanent lock confirmed — The burn of LP tokens at initialization is the event that makes the pool permanently locked. With no LP tokens in circulation, there is no mechanism ensuresto thatclaim oncethe underlying pool reserves. This is not a policy commitment — it is a mathematical property of the CPMM contract.

•       Staking Pool routing activated — The Staking Pool's contribution to the Global Pool begins routing automatically. Both protocol-owned capital enterssources are now flowing to pool depth.

•       Pool activation — CEDEX order routing is activated against the pool,pool. itThe remainspool indefinitelyis —immediately creatingavailable mathematicalfor certaintyall ofST22 long-termsecondary liquidity growth.trading.

 

---

💰 4.3  Capital Accumulation Mechanism 2: Trading5% Transaction Fee Allocation

Capital Accumulation Mechanism 2  ·  5% Transaction Fee Allocation Perpetual — every CEDEX trade across every ST22 issuer contributes to pool depth

 

The second and primary ongoing capital accumulation mechanism derives from continuousCEDEX's trading5% activitytransaction fee applied to every ST22 trade across all ST22issuers. DigitalA Securitiesdefined tokens.allocation Everyof CEDEXthis transactionfee generates fees, with a portionroutes permanently allocated to the unifiedGlobal liquidityPool poolon —every transaction, creating a directdirect, automatic relationship between ecosystemplatform trading activity and pool depth.

---

This mechanism has no ceiling, no expiry, and no dependency on issuer behavior. As long as any ST22 token trades on CEDEX, the Global Pool receives its allocation. The more issuers on the platform, the more trading volume, the faster the pool grows.

 

🔹 4.3.1  Fee Structure Breakdown

CEDEX implements a 5% total transaction fee (500 basis points),. distributedThe acrossfee fiveis stakeholderconfigured categories:at the SPL Token-2022 Transfer Fee Extension level — it cannot be bypassed by any trading venue or wallet. Distribution is as follows:

 

company (withdrawable)

Fee Recipient	Rate	BPS	Purpose & Lock Status
IssuerFee TreasuryRecipient	2.00% Rate	200 BPS	Revenue to Purpose issuing	(withdrawable) Lock Status
OTCM Staking Issuer Pooltreasury	1.50% 2.00%	150 200	Revenue to tokenizing company	Withdrawable by issuer
OTCM staking pool	1.50%	150	Distributed to OTCM stakers — 8–60% APY	Distributed per epoch
Protocol Operationsoperations	1.06%	106	Infrastructure · Infrastructure, compliance oraclesoracles, ·development dev	Withdrawable by OTCM Protocol
OTCM Liquidity Global Unified CEDEX Pool	0.44%	44	Permanent pool depth accumulation	PERMANENTLY LOCKED — adds to unified pool
TOTAL	5.00%	500	Complete fee structure	—

---

 

🔹 4.3.2 Fee Distribution Smart Contract

pub const LP_FEE_BPS:      u64 = 44;    // 0.44% to liquidity pool
pub const FEE_DENOMINATOR: u64 = 10000;

pub fn distribute_fees(
    ctx:       Context<FeeDistribution>,
    total_fee: u64,
) -> Result<()> {
    let lp_allocation = total_fee * LP_FEE_BPS / FEE_DENOMINATOR;

    // Permanently route LP share to unified pool vault
    transfer_sol(
        &ctx.accounts.fee_escrow,
        &ctx.accounts.unified_pool_vault,
        lp_allocation,
    )?;

    // Update pool state
    pool.total_sol_reserve            += lp_allocation;
    pool.cumulative_fee_contributions += lp_allocation;
    pool.last_fee_timestamp            = Clock::get()?.unix_timestamp;

    // Proportionally distribute across all active trading pairs
    for pair in pool.active_trading_pairs.iter_mut() {
        pair.sol_reserve += lp_allocation / pool.active_trading_pairs.len() as u64;
        pair.k_invariant  = pair.sol_reserve * pair.token_reserve;
    }

    emit!(FeeAllocatedToPool {
        amount:  lp_allocation,
        new_tvl: pool.total_sol_reserve,
        source:  FeeSource::TradingFee,
    });

    Ok(())
}

---

🔹 4.3.3 Volume-Based Projections

The following projections model 0.44% of projected CEDEX trading volume across all ST22 issuers contributing to the Global Pool. These are the fee-contribution projections only — not total pool TVL, which includes the treasury seed and investor secondary sale contributions:

 

Cumulative

Fee

	Year		Est. Total CEDEX Volume		Total Fees	(5%)	LP Share (0.44%)	Cumulative
Year 1	$544M	$27.2M	$2.39M	$2.39MContribution
Year 21	$580M544M	$29.0M27.2M	$2.55M39M	$5.94M2.39M
Year 32	$1.45B580M	$72.5M29.0M	$6.38M2.55M	$11.32M4.94M
Year 43	$2.90B1.45B	$145M72.5M	$12.76M6.38M	$24.08M11.32M
Year 4	$2.90B	$145M	$12.76M	$24.08M
Year 5	$5.80B	$290M	$25.51M	$49.59M

---

 

Capital Source Evolution In early years, the treasury seed dominates pool TVL. By Year 3, fee accumulation has matched the initial seed. By Year 5, the perpetual fee mechanism has contributed nearly $50M in locked depth — making the Global Pool self-sustaining at institutional scale regardless of any additional treasury contribution.

 

💰 4.4  Capital Accumulation Mechanism 3: StakingInvestor RewardSecondary ReinvestmentSale Proceeds

Capital Accumulation Mechanism 3  ·  Investor Secondary Sale Proceeds Continuous — accredited investor sales after holding period route into the pool

 

The third capital accumulation mechanism leveragesis OTCM's staking infrastructureinherent to createthe continuous,Regulation automaticD issuance model. One hundred percent of ST22 tokens are distributed to verified accredited investors at minting. After the mandatory holding period (6 months US / 12 months non-US), those investors sell their tokens on CEDEX. The proceeds of those sales flow through the Global Pool's CPMM — adding buy-side depth and contributing to overall pool liquidity.

This mechanism creates a virtuous cycle: investors who invested early in an ST22 offering, held through the Rule 144 period, and now wish to liquidate provide the capital flowsthat intomakes the unifiedpool liquiditydeeper pool.for the next round of investors. The secondary market is self-funding from participant activity rather than dependent on protocol capital injection.

 

4.4.1  Secondary Sale Flow

•       Holding period expires — Transfer Hook Control 24 clears for the investor's wallet automatically at the 6-month (US) or 12-month (non-US) mark

•       Investor initiates sale on CEDEX — The investor places a sell order through the CEDEX interface — market order, limit order, or stop-loss (all available post-graduation)

•       Transfer Hook validates — All 42 controls execute. Control 24 confirms holding period satisfied. Control 12 confirms buyer is a verified accredited investor. Control 20 confirms buyer wallet stays under 4.99% concentration limit.

•       CPMM executes against Global Pool — The Custom AMM Engine executes the swap against the Global Pool's CPMM formula. Proceeds route to the seller. Pool reserves adjust per x × y = k.

•       5% fee routed — 0.44% of the transaction value routes permanently to the Global Pool — meaning every sale further deepens the pool it just drew upon.

 

4.4.2  Buyer-Side Requirement

Every secondary sale on CEDEX requires a buyer who is also a verified accredited investor — Transfer Hook Control 12 enforces this on every transfer. This means secondary market participation is not open to the general public. It is limited to investors who have completed the Empire Stock Transfer onboarding process (KYC/KYB/AML/OFAC/Wallet Verification) and have been certified as accredited investors.

This constraint is architecturally intentional. It maintains the Regulation D 506(c) compliance environment in the secondary market — preventing the secondary trading activity from constituting an unregistered public distribution. It also means the Global Pool's buy-side counterparties are institutional-quality market participants, contributing to price stability.

 

4.5  Capital Accumulation Mechanism 4: Staking Reward Reinvestment

Capital Accumulation Mechanism 4  ·  Staking Reward Reinvestment Automatic — 2% of all staking rewards permanently redirect to pool before reaching holder wallets

 

The fourth capital accumulation mechanism operates within the OTCM Staking Pool infrastructure. Two percent of all OTCM Security Token staking rewards are programmatically captured and permanently locked in the Global Pool before reachingdistribution holderto wallets.

staker

---

wallets

🔹— 4.4.1in addition to the direct Staking NodePool capital contribution described in Section 4.2. This mechanism is immutable, enforced by Transfer Hook logic, and cannot be disabled by any governance action.

 

4.5.1  Staking Architecture

EachOTCM Security Token stakers earn yield from two sources: a share of the 1.5% CEDEX trading fee allocation (described in Section 4.3) and staking emission rewards. Both sources are subject to the 2% automatic reinvestment mechanism. The staking node architecture assigns each ST22 Digital Securities token deployed on OTCM Protocol receives its own dedicated staking node, enabling token holders to earn continuous passive income through proof-of-stake mechanisms:income:

pub
 struct StakingNode {
    pub token_mint:                    Pubkey,  // Associated ST22 token
    pub node_authority:                Pubkey,  // Issuer-controlled authority
    pub total_staked:                  u64,
    pub reward_pool:                   u64,
    pub apy_bps:                       u16,     // 800–6000 bps (8–60%)
    pub epoch_duration:                i64,     // 224,640 seconds (~2.6 days)
    pub last_distribution:             i64,
    pub cumulative_rewards_distributed: u64,
    pub cumulative_lp_reinvestment:    u64,     // Amount permanently sent to LP
}

pub struct StakerPosition {
    pub staker:                     Pubkey,
    pub staking_node:               Pubkey,
    pub amount_staked:              u64,
    pub stake_timestamp:            i64,
    pub pending_rewards:            u64,
    pub cumulative_rewards_claimed: u64,
}

---

🔹 4.4.2 APY Configuration (8–60% Range)

APY Tier	Condition	Approx. APY
FloorAPY Tier	Early-stage · Condition low volume	8% Approximate APY
Standard Floor	Early-stage — low platform volume	8%
Standard	Operational at moderate volume	20–35%
Growth	High trading volume + feeaccumulated accumulationfees	35–55%
Peak	Maximum platform utilization	Up to 60%

---

 

🔹4.5.2 4.4.3 2% Automatic Reinvestment Mechanism— Immutability Guarantee

pub const LP_REINVESTMENT_BPS: u64 = 200;  // 2% automatic reinvestment — IMMUTABLE

pub fn distribute_epoch_rewards(
    ctx: Context<RewardDistribution>,
) -> Result<()> {
    let epoch_reward = calculate_epoch_reward(
        node.total_staked,
        node.apy_bps,
        node.epoch_duration,
    )?;

    let lp_reinvestment = epoch_reward * LP_REINVESTMENT_BPS / 10000;
    let staker_rewards  = epoch_reward - lp_reinvestment;

    // Permanently route 2% to unified pool BEFORE distributing to stakers
    transfer_sol(
        &ctx.accounts.reward_escrow,
        &ctx.accounts.unified_pool_vault,
        lp_reinvestment,
    )?;

    unified_pool.total_sol_reserve           += lp_reinvestment;
    unified_pool.cumulative_staking_reinvestment += lp_reinvestment;
    node.cumulative_lp_reinvestment          += lp_reinvestment;

    // Distribute remainder to stakers
    distribute_to_stakers(staker_rewards, &ctx.accounts.stakers)?;

    emit!(EpochRewardDistributed {
        total_rewards:       epoch_reward,
        lp_reinvestment,
        staker_distribution: staker_rewards,
        new_pool_tvl:        unified_pool.total_sol_reserve,
    });

    Ok(())
}

⚠️ Non-Bypassable Mechanism: The 2% reinvestment executes through immutable Transfer Hook logic. There is no administrative function, upgrade path, or governance mechanism tocapable disableof disabling or reducereducing this percentage.percentage below 2%. The mechanism is hard-coded at the Transfer Hook level, which is itself immutable after mint creation. This is not a policy commitment — it is a mathematical property of the deployed smart contract.

 

---

Non-Bypassable Mechanism The 2% staking reinvestment to the Global Pool executes before staking rewards reach holder wallets. It is enforced by the same Transfer Hook architecture that enforces all 42 security controls. Stakers receive their full entitled yield net of the 2% — the mechanism is transparent and disclosed. It is mathematically inevitable that 2% of all staking rewards flow todeepen the unifiedGlobal LP.Pool.

 

🔹4.5.3 4.4.4 Compounding Frequency Analysis

OTCM staking rewards compound every 2.6 days (~— approximately 140 compounding events annually)per —year. 35×This compounding frequency is 35 times more frequent than quarterly dividends and 12 times more frequent than monthly dividends:distributions:

 

Vehicle	Compound Frequency	Events/Year	Effective APY*
Traditional Dividend Vehicle	Quarterly Compound Frequency	4 Events/Year	10.38% Effective APY (10% nominal)
Monthly Dividend Traditional quarterly dividend	Monthly Quarterly	12 4	10.47%38%
OTCM Staking Monthly dividend	Monthly	12	10.47%
OTCM staking (every 2.6 days)	Every 2.6 days	~140	10.52%

*Effective APY shown for 10% nominal APY with continuous reinvestment

---

4.6 

💰 4.5 Capital Accumulation Mechanism 4: Permanent Lock EnforcementArchitecture

The fourth mechanism is not a source of capital inflow, but a mechanism ensuring all accumulated capital remains permanently in the pool. The permanent lock transformsis not the fourth capital accumulation mechanism — it is the foundational constraint that makes all four mechanisms meaningful. Without permanent lock enforcement, any of the above capital accumulation mechanisms would simply be temporary liquidity that could be withdrawn, eliminating all institutional assurances the pool from a typical DeFi construct (where capital can flee) into institutional-grade infrastructure with mathematical guarantees of capital preservation.provides.

---

 

🔹4.6.1 4.5.1 Smart Contract Lock ArchitectureDesign

The permanent lock is implemented through smart contract design that— the pool contract simply does not includecontain a withdrawal function:

function.

pubThis structis UnifiedPoolVaultthe {most pubsecure total_sol_reserve:form u64,of publock: cumulative_inflows: u64,
    pub lock_status: LockStatus,  // Always LockStatus::Permanent
}

impl UnifiedPoolVault {
    // ✅ ALLOWED — Capital inflow
    pub fn deposit(&mut self, amount: u64) {
        self.total_sol_reserve += amount;
        self.cumulative_inflows += amount;
    }

    // ✅ ALLOWED — Trading swaps
    pub fn execute_swap(&mut self, swap: SwapParams) -> Result<SwapOutput> {
        execute_cpmm_swap(self, swap)
    }

    // ❌ NO WITHDRAWAL FUNCTION EXISTS
    // Therethere is no withdraw(),code extract(),to orexploit, drain()no function.administrator //key Capitalto cancompromise, enter.no Capitalgovernance proposal to pass. The capital cannot leave.be }withdrawn 

because

---

the operation does not exist in the contract.

 

•       No withdrawal function — The pool contract has no function that allows capital to be extracted to any external address

•       LP token burn at initialization — LP tokens representing the initial liquidity position are burned to a null address at pool creation. No party holds LP tokens that could be redeemed for underlying reserves.

•       Governance-locked — The pool contract is outside the adjustable parameters of DAO governance. The immutable core program cannot be modified by any governance vote.

•       Audit-verified — The absence of withdrawal functionality is verified by the third-party security audits (Quantstamp, Halborn, OtterSec) required before production deployment.

 

🔹4.6.2 4.5.2 Emergency Override Conditions (DAO 2/3 + Timelock)

WhileA the standard contract contains no withdrawal capability, ansingle emergency override exists for catastrophic scenarios (e.g.,— specifically, a discovered vulnerability requiringin the pool contract migration):that requires migration to a new secure contract. This override is not a withdrawal mechanism:

 

Requirement	Specification
DAORequirement Vote Threshold	Specification
DAO vote threshold	2/3 supermajority (66.67%) of staked OTCM voting power
Quorum Requirementrequirement	Minimum 30% of total staked OTCM must participate in the vote
Timelock Durationduration	48 hours between vote passage and execution capability — providing community awareness and legal intervention window
Destination Restrictionrestriction	Override can only migrate capital to a new pool contract that has passed independent third-party security audit — not to any external walletswallet
Audit Requirementrequirement	New destination contract must pass third-party security audit before migration is permitted

 

✓ Institutional Assurance: These requirements make unauthorized capital extraction practically impossible while preserving emergencythe migrationability capability.to address a genuine security vulnerability. The 48-hour timelock provides sufficient time for community awarenessawareness, legal intervention, and legalregulatory interventionnotification if an override is attempted maliciously.

 

---

4.7  Mathematical Modeling

🔹4.7.1  Price Impact by Pool TVL

The CPMM formula (x × y = k) produces price impact as a function of trade size relative to total pool TVL. The following table demonstrates how Global Pool depth translates directly to trading quality for ST22 investors:

 

Pool TVL	$10K Trade	$50K Trade	$100K Trade	$500K Trade
$5M	0.20%	1.00%	2.00%	10.0%
$12.5M	0.08%	0.40%	0.80%	4.0%
$25M	0.04%	0.20%	0.40%	2.0%
$50M	0.02%	0.10%	0.20%	1.0%
$65M+	0.016%	0.08%	0.16%	0.78%

 

The practical implication: a $100K investor secondary sale at Year 5 pool depth ($65M+) incurs only 0.16% price impact — comparable to institutional OTC desk execution for a listed security, and orders of magnitude better than the zero liquidity that currently exists for these securities.

 

4.7.2  Five-Year Pool TVL Projections — Base Case

Base case assumptions: 8 issuer onboardings Year 1 growing 25% annually; $500M initial annual CEDEX volume growing 80% annually; 50% OTCM staking participation; OTCM treasury seed of $2M at launch.

 

Period	SOL Treasury & Staking Pool	Fee Contributions	Staking 2%	Investor Sales	Year Total	Cumulative TVL
Launch	$2.0M	—	—	—	$2.0M	$2.0M
Year 1	—	$2.39M	$0.1M	$0.5M	$2.99M	$4.99M
Year 2	—	$2.55M	$0.3M	$1.2M	$4.05M	$9.04M
Year 3	—	$6.38M	$0.8M	$2.5M	$9.68M	$18.72M
Year 4	—	$12.76M	$1.5M	$4.0M	$18.26M	$36.98M
Year 5	—	$25.51M	$2.0M	$5.0M	$32.51M	$65.29M+

 

The 'Investor Sales' column represents the ongoing deepening effect of accredited investor secondary sales routing through the CPMM — a mechanism that grows as more issuers complete their Regulation D raises and more investors exit their positions after the mandatory holding period.

 

4.8  Pool Governance

4.8.1  Governable Parameters

•       Fee distribution ratios — The percentage allocation among the five fee recipients (issuer, staking, operations, pool) can be adjusted via DAO vote — subject to a maximum 10% change per proposal and 48-hour timelock

•       New ST22 token routing — Approval of newly minted ST22 tokens for CPMM trading against the Global Pool

•       Circuit breaker thresholds — Modification of price impact limits and volume halt parameters within defined safety bounds

•       Emergency response — Activation of the override migration mechanism under the 2/3 supermajority + 48h timelock conditions described in §4.6.2

 

4.8.2  Non-Governable (Immutable)

•       Permanent lock status — Cannot be removed without satisfying the full 2/3 supermajority + 48h timelock + destination restriction + audit requirements

•       2% staking reinvestment — Hard-coded in Transfer Hook logic — not modifiable by any governance action

•       Capital withdrawal — No withdrawal function exists in the pool contract — governance cannot create one without a full contract migration under emergency override conditions

•       Graduation migration (GROO) — The automatic transfer of bonding curve capital to the pool upon GROO token graduation cannot be disabled

 

4.9  Security Architecture

4.9.1  Smart Contract Security

•       Formal verification — Pool logic formally verified using Certora Prover prior to production deployment

•       Independent audits — Multiple independent security audits required: Quantstamp, Halborn, and OtterSec. Audit reports published publicly.

•       Bug bounty program — Up to $500K in rewards for critical vulnerability reports — specifically prioritizing: liquidity extraction vulnerabilities, CPMM arithmetic exploits, fee routing bypass, and LP burn circumvention

•       No upgrade proxy — The core pool contract uses no upgrade proxy pattern — eliminating the attack surface where an upgrade could introduce a withdrawal function

 

4.9.2  Economic Security

•       No single point of failure — Three independent capital inflow mechanisms — failure of any one does not stop the pool from deepening through the others

•       Multi-source inflows — Diversification across treasury seed, fee accumulation, and investor sales reduces dependency on any single mechanism

•       Bank-run immunity — Permanent locks eliminate the possibility of a coordinated withdrawal cascade — a risk that has caused multiple DeFi protocol collapses

•       Diversified asset exposure — The pool holds liquidity across all ST22 Digital Securities tokens traded on CEDEX — not concentrated in any single issuer

 

4.9.3  Institutional Assurance FrameworkProperties

The permanent lock architecture creates four institutional-grade assurances traditionalthat DeFiare protocolsessential cannotfor provide:regulated securities markets:

 

• CertoraProver
  Multiple independent audits (Quantstamp · Halborn · OtterSec)
  Bug bounty program with up to $500K rewards for critical vulnerabilities
  Immutable core contracts — no upgrade proxy pattern

  Economic Security

  • No single point of failure for capital extraction
  • Multi-source capital inflows reduce dependency on any single mechanism
  • Permanent locks eliminate bank-run scenarios
  • Diversified asset exposure across multiple ST22 Digital Securities tokens

  Operational Security

  • Multi-signature requirements for parameter changes
  • Timelock on all governance actions
  • Real-time monitoring and anomaly detection
  • Incident response procedures documented and tested

  ---

  🔌 4.10 Integration Specifications

  Assurance	Description	Without Permanent Lock
  Liquidity Certaintycertainty —	Market makers and tradersinvestors know liquidity will be available indefinitely Price Stability — no monitoring required	Liquidity depends on active participation — can disappear without notice
  Price stability	No risk of sudden liquidity withdrawal causing price dislocationsdislocation events	Sudden capital withdrawal can collapse pool pricing instantly
  Long-term Planningplanning —	Issuers can make multi-year business decisions knowing the trading venue will exist	Venue liquidity depends on ongoing participation incentives
  Regulatory Comfortcomfort —	Demonstrates commitment to market integrity over short-term profitsprofit extraction — 📊consistent 4.6with MathematicalSEC Modeling Category 🔹 4.6.1 CapitalModel AccumulationB Formula Total pool capital at time t:spirit TVL(t) = Initial_Deposit + Σ Graduation_Capital(i) // Sum of all issuer graduations + ∫ Fee_Rate × Volume(t) dt // Continuous fee accumulation + ∫ 0.02 × Staking_Rewards(t) dt // 2% staking reinvestment Where: Initial_Deposit = $2,000,000 Graduation_Capital(i) = $1M–$5M per issuer graduation Fee_Rate = 0.44% of trading volume Staking_Rewards(t) = Σ (Staked_Amount × APY / 140) per epoch 🔹 4.6.2 Liquidity Depth Calculations For CPMM pools: Price_Impact = (trade_size / reserve_size) × 100% Max_Trade = Reserve × target_impact / 100 At $10M reserve: 1% impact → Max Trade = $100,000 2% impact → Max Trade = $200,000 5% impact → Max Trade = $500,000 🔹 4.6.3 Price Impact by Pool TVL Profit-motivated behaviormayconflictwithinvestorprotectionobligations Pool TVL $10K Trade $50K Trade $100K Trade $500K Trade $5M 0.20% 1.00% 2.00% 10.0% $12.5M 0.08% 0.40% 0.80% 4.0% $25M 0.04% 0.20% 0.40% 2.0% $50M 0.02% 0.10% 0.20% 1.0% $65.3M 0.016% 0.08% 0.16% 0.78%   💰 4.7 Five-Year Capital Projections 🔹 4.7.1 Conservative Scenario Assumptions: 5 issuer graduations Year 1 · 10% annual issuer growth · $300M annual trading volume · 30% staking participation. 🔹 4.7.2 Base Case Scenario Assumptions: 8 issuer graduations Year 1 · 25% annual issuer growth · $500M initial annual volume growing 80% annually · 50% staking participation. Period Graduation Trading Fees Staking 2% Year Total Cumulative TVL Initial — — — $2.0M $2.0M Year 1 $8.0M $2.39M $0.1M $10.49M $12.49M Year 2 $10.0M $2.55M $0.3M $12.85M $25.34M Year 3 $8.0M $6.38M $0.8M $15.18M $40.52M Year 4 $5.0M $12.76M $1.5M $19.26M $59.78M Year 5 $3.0M $25.51M $2.0M $30.51M $65.29M+ 🔹 4.7.3 Optimistic Scenario Assumptions:Capital 15Architecture issuer graduations Year 1 · 50% annual issuer growth · $1B initial annual volume · 70% staking participation. Projected Year 5 TVL: $150M+Summary The 💡Global CapitalUnified SourceCEDEX Evolution:Liquidity EarlyPool yearsis are dominatedfunded by graduationtwo capital.protocol-owned Latercapital yearssources: see(1) tradingOTCM feesProtocol becomeSolana the primary growth driver — reflecting ecosystem maturation from issuer-focused to trading-focused economics. ⚙️ 4.8 Pool ManagementTreasury and Governance (2) OTCM GovernableStaking Parameters Pool. It Feedeepens Distributioncontinuously Ratiosthrough: —5% Adjustment oftransaction fee allocation percentages(0.44% (requiresper DAOtrade vote) permanently Newlocked), Tokeninvestor Pairsecondary Listingsale proceeds post-holding-period, and 2% staking reward reinvestment via immutable Transfer Hook. All capital is permanently locked — Approval of ST22 Digital Securities tokens for trading on CEDEX Circuit Breaker Thresholds — Modification of price impact and volume limits Emergency Response — Activation of override mechanisms if vulnerability discovered Non-Governable (Immutable) Permanent Lock Status — Cannot be modified without 2/3 DAO supermajority + 48h timelock 2% Staking Reinvestment — Hard-coded in Transfer Hook · not modifiable Capital Withdrawal — Nono withdrawal function exists in pool contract Graduation Migration — Automatic transfer cannot be disabled 🏗️ 4.9 Security Architecture Smart Contract Security Formal verification ofthe pool logiccontract. using

  External systems integrate with the OTCM Liquidity Pool through defined APIs:

  interfacePoolState{totalSolReserve:      bigint;
    cumulativeInflows:    bigint;
    registeredTokenCount: number;
    activeTradePairCount: number;
    lastUpdateSlot:       number;
    historicalTvl:        TvlSnapshot[];
  }
  
  
  🥩 Staking Contract Security Specification
  GET/api/v1/pool/state//
  
  
  
  
  Version: 6.1 | Applies To: OTCM Token Staking — Layer 3 / Layer 7
  
  Reward Calculation Integrity
  
  Staking rewards are calculated per-epoch. The reward calculation must be resistant to epoch timing manipulation:
  
  pub fn calculate_epoch_reward(
      total_staked:   u64,
      apy_bps:        u16,
      epoch_duration: i64,
  ) -> Result<u64> {
      let annual_reward = (total_staked as u128)
          .checked_mul(apy_bps as u128)
          .ok_or(StakingError::Overflow)?
          .checked_div(10_000)
          .ok_or(StakingError::Overflow)?;
  
      let epoch_reward = annual_reward
          .checked_mul(epoch_duration as u128)
          .ok_or(StakingError::Overflow)?
          .checked_div(SECONDS_PER_YEAR as u128)
          .ok_or(StakingError::Overflow)?;
  
      Ok(epoch_reward as u64)
  }
  
  2% LP Reinvestment — Immutability Guarantee
  
  // This constant is defined in an immutable program account.
  // No instruction exists to modify LP_REINVESTMENT_BPS.
  // DAO governance explicitly excludes this parameter from votable changes.
  pub const LP_REINVESTMENT_BPS: u64 = 200;  // 2.00% — PERMANENT
  
  
  Groovy Company, Inc. dba OTCM Protocol · Wyoming| Corporation ·CIK: invest@otcm.io1499275 · otcm.io|  Version 7.0  |  March 2026  |  Confidential
  //
  
  
  
  Returns
  
  
  current
   pool metrics and historical data