Layer 1 Whitepaper · v6.1

The MoneyFund Network

Decoupled zkVM consensus for yield-sustained data permanence. Privacy-integrated through Ring Confidential Transactions.

Shane Cloonan · May 2026

Abstract

Current decentralized permanent storage networks rely on the macroeconomic assumption of indefinitely declining hardware costs (Kryder’s Law). As semiconductor scaling hits physical thermodynamic limits, these economic models trend toward insolvency. This paper proposes a novel Layer 1 architecture achieving mathematically guaranteed data permanence through an Inflation-Resilient Endowment. Version 6.1 introduces $MONEY, a privacy-integrated utility token that uses Ring Confidential Transactions (RingCT) and zero-knowledge proofs to decouple network utility from user identity, providing a truly untraceable layer for permanent data storage.

Architecture

MoneyFund Network · Technical Illustration v6.2

USER / APPInitiates compute or storagerequest via RingCTCompute RequestData PayloadEXECUTION ⟶ PROVEROFF-CHAIN COMPUTE LAYERHardware:High-End GPU ClustersLogic:High-Performance zkVMScaling:Recursive SNARKsprocess 1MB increments off-chainYield:Generates compute fees → endowmentzk-BRIDGE · π < 1KBSTORAGE ⟶ VERIFIERON-CHAIN PERMANENT LEDGERHardware:Standard HDDs / SSDsLogic:"Dumb" storage · no computeAction:Verifies proofs in < 1msupdates permanent ledgerFunded:Yield from $MONEY endowmentPermanence Tax (Gas)routes into endowmentSustains Networkyield (r) > inflation (i)$$MONEY ENDOWMENTInflation-Resilient Protocol-Owned LiquidityE₀ = C₀ · (1+i) / (r − i)Ensures Yield (r) > Inflation (i) → forever-solventMONEYFUND NETWORK · TECHNICAL ILLUSTRATION v6.2

Decoupled consensus separates expensive compute (Execution / Prover) from cheap, permanent verification (Storage / Verifier). A succinct zero-knowledge proof bridges the two layers, while gas fees from compute continuously refill the $MONEY endowment that pays storage operators in perpetuity.

§1 · The End of Kryder’s Law

Why the foundational assumption of legacy permanence is broken

The foundational flaw of legacy permanence models (e.g., Arweave) is the assumption of a continuous 30% annual decay in cost-per-gigabyte. Current storage mediums are bottlenecking at the laws of physics:

Magnetic Density (HDD)

Has reached the superparamagnetic limit — bits become thermally unstable below a critical grain size.

Silicon Density (SSD)

Faces quantum tunneling — electrons leak across the gate oxide as feature sizes approach atomic scale.

A mathematically sound permanence network for 2026 and beyond must assume hardware inflation (i) will outpace or match baseline technological deflation.

§2 · The Inflation-Resilient Endowment

Yield-generating Protocol-Owned Liquidity replaces passive vaults

To survive a stagnant or inflating hardware market, the protocol abandons passive storage vaults in favor of a dynamic, yield-generating endowment. Let C₀ be the initial cost, i the annual inflation rate, and r the dynamic yield generated by the execution layer.

Total Upfront Endowment

E₀ = ∑t=1 C₀ ·(1+i)t(1+r)t

For the endowment to remain solvent forever, the protocol mathematically enforces r > i.

Closed-Form User Deposit

E₀ = C₀ ·(1 + i)(r − i)

§3 · Endowment Simulator

Live simulator · feel the math from §2 in your hands

The formula above is easy to read and brutal in practice. Drag the sliders to set your assumptions about C₀ (storage cost), i (hardware inflation), and r (compute-fee yield). The cost per TB and total upload price update live, and the chart shows the full sensitivity curve so you can see exactly where the model becomes fragile.

Endowment / TB

$1,700

E₀ = C₀(1+i)/(r−i)

Total upload cost

$1,700

for 1.00 TB

vs Arweave

0.34×

cheaper · ref ≈ $5k/TB

Solvency

Safe

spread 3.0% · (r − i)

$50/yr
$20 (lean)$50 (target)$150 (heavy replication)
+2.0%
−5% (Kryder still works)0–3% (post-Kryder)+10% (shortage)
5.0%
0% (no demand)5–8% (steady-state)15% (boom)
1.00 TB
1 GB1 TB1 PB

Scenarios

Sensitivity to (r − i)

log scale

DANGER$100$500$1k$5k$10k$30k0.5%1%2%3%4%5%6%Arweave ≈ $5kYIELD SPREAD (r − i)

Curve is the cost per TB across all yield spreads at your current C₀ and i. The dot is your current configuration. The dashed line is Arweave’s rough $5k/TB reference.

Notice the curve's shape. Below ~1% spread the endowment cost goes hyperbolic — small changes in macro assumptions produce huge changes in user-facing cost. This is the central fragility called out in §7 · Caveats.

§4 · $MONEY · Privacy-Integrated Utility Token

Untraceable utility, confidential storage allocations

The MoneyFund Network is powered by $MONEY, a native privacy token designed to handle the “Privacy Dilemma” in permanent storage. While data is permanent, the identity of the storer must not be. $MONEY acts as the fuel for the execution layer and the principal for the endowment, integrated with untraceable privacy primitives.

Ring Signatures

Storage transactions are signed by a group of possible signers, making it mathematically impossible to distinguish the actual spender from decoy signers.

Stealth Addresses

For every storage allocation, $MONEY is sent to a unique, one-time address. Prevents external observers from linking multiple storage requests to a single user or entity.

Confidential Amounts

Pedersen Commitments hide the amount of $MONEY allocated to an endowment on-chain — yet storage nodes can still mathematically verify that the required E₀ was satisfied.

Privacy-Preserving Execution

Off-chain zkVMs hide state-transition logic. Users update permanent records by submitting a succinct proof (π); the storage layer verifies validity without ever seeing inputs, balances, or identities.

§5 · Decoupled Consensus Architecture

Two strictly bifurcated node classes

The network architecture is strictly bifurcated into two independent node classes: Storage Nodes and Execution Nodes. Execution Nodes compete for $MONEY compute fees by processing heavy read-write operations and arbitrary business logic. A Permanence Tax from these fees is automatically routed into the $MONEY endowment, ensuring the physical survival of data is funded by its active utility velocity.

Execution Node

Prover · Off-chain

  • · High-end GPU clusters
  • · High-performance zkVM with arbitrary business logic
  • · Recursive SNARKs process 1MB increments off-chain
  • · Earns $MONEY compute fees · pays Permanence Tax

Storage Node

Verifier · On-chain

  • · Standard HDDs / SSDs · commodity hardware
  • · “Dumb” storage · no compute responsibilities
  • · Verifies succinct proofs in < 1ms
  • · Paid in perpetuity by endowment yield (r > i)

§6 · Comparative Economics

MoneyFund vs. legacy permanence networks

MoneyFund assumes hardware inflation and relies on native compute yield. By routing $MONEY gas into the endowment and restaking Protocol-Owned Liquidity, the network can price 1 TB of permanent storage closer to $1,500 – $2,000 — significantly lower than Arweave while eliminating the risk of insolvency inherent in models betting against the laws of thermodynamics.

MetricArweave (Legacy)MoneyFund
Hardware-cost assumption30%/yr decline (Kryder's Law)Inflation ≥ 0% (post-Kryder)
Solvency modelPassive endowment, depletes if costs flatActive yield endowment, r > i forever
Compute layerNone / external (AO)Native zkVM, recursive SNARKs
PrivacyPseudonymous walletsRingCT + stealth + confidential amounts
Storage cost · 1 TB permanent~$3,500–$8,000+$1,500–$2,000
Insolvency riskHigh (bets against thermodynamics)Mathematically eliminated

§7 · Caveats & Open Problems

Honest engineering review of where the v6.1 model is fragile

The architecture above is the version we want to build. This section is the version we have to defend in front of a hostile audit committee. Each item below identifies a real-world failure mode the v6.1 paper does not adequately address, ranked by severity. None are individually disqualifying. The combination of items 01–03, left unresolved, is.

01

The r > i Guarantee Is a Hypothesis, Not a Theorem

Existential

We can require r > i in the protocol. We cannot produce r > i in the market.

Yield is a function of exogenous compute demand and $MONEY market price — both macro-driven and beyond protocol control. The endowment series E₀ = C₀(1+i)/(r−i) does not gracefully degrade when r < i; the denominator goes negative and the model breaks. Arweave's bet on hardware deflation has been replaced with a bet on perpetual compute-fee growth. That bet is plausibly more defensible — compute demand has been elastic and growing — but it remains a macro hypothesis, not a mathematical guarantee.

v6.2 Mitigation

Frame r > i as a credible economic hypothesis with stress-tested fallbacks (insurance fund, graceful-degradation tiers) rather than as a theorem.

02

Reflexive Single-Token Economy

Existential

Endowment principal, gas, fees, and POL are all denominated in $MONEY — a single demand shock cascades through every layer at once.

If compute demand softens, fee accrual falls, $MONEY price drops, the endowment loses USD value, storage operators receive less, confidence erodes, and the cycle compounds. Arweave isolates this by denominating its endowment in AR alone; here the storage and compute economies are fused. A correlated drawdown across all three (price, demand, yield) does not require any single failure — it only requires the same macro condition that hits crypto every cycle.

v6.2 Mitigation

Hold endowment POL as a basket (stablecoins + ETH + $MONEY) so a $MONEY drawdown does not directly threaten storage solvency.

03

Data Availability Has No Replication Proof

Existential

A succinct proof verifies state-transition validity — not that the underlying bytes were actually stored.

A malicious prover can publish a valid SNARK over a commitment to data that never reaches the storage layer. Storage operators are then economically incentivized to not store the data and just collect endowment yield. Arweave addresses this with SPoRA (Succinct Proofs of Random Access); Filecoin uses Proof-of-Replication + Proof-of-Spacetime; Celestia uses DA sampling. v6.1 specifies none of these. Without an analogous mechanism, the entire storage layer is theater.

v6.2 Mitigation

Add a Proof-of-Replication / Proof-of-Spacetime layer with random-challenge audits and slashable stakes for non-responsive operators.

04

zkVM Proving Overhead vs. Centralized Compute

Critical

General-purpose zkVMs impose 10,000×–1,000,000× overhead vs. native execution. That is a steep premium to charge.

Recursive SNARKs over restricted arithmetic circuits (e.g., Nova/Hypernova) can plausibly hit the 1MB-increment throughput target, but arbitrary business logic on a general zkVM (RiscZero, SP1, Jolt) is well beyond current SOTA at that scale. The economic question for a user is: why pay 10,000× the AWS price when the alternative is a centralized prover with a hardware attestation? The honest answer is permanence + privacy — but that confines the addressable workload to a narrower set than the paper currently implies.

v6.2 Mitigation

Identify the specific compute workloads where permanence + privacy justify the premium, and benchmark proving time per workload class.

05

Bootstrap Requires an Explicit Subsidy Phase

Critical

At t=0 there is no compute demand, so r ≈ 0, so E₀ → ∞. The first uploads cannot be priced under the model.

The closed-form deposit formula breaks at network genesis precisely when the network most needs to attract its first users. The protocol implicitly requires a subsidy phase — token emission, treasury reserves, or ICO proceeds — to seed the endowment until organic compute fees can sustain it. The transition curve from subsidized to self-funded has not been specified, and that curve is the single most fragile period in the network's life.

v6.2 Mitigation

Specify a subsidy schedule, target self-sufficiency milestone (e.g., r ≥ 5% measured over rolling 12 months), and explicit conditions for subsidy removal.

06

Permanence + Untraceability = Maximum Regulatory Surface

Material

Combining Arweave's permanence with Monero's unlinkability is strictly additive in regulatory exposure, not neutral.

Arweave alone faces continuous pressure over CSAM, copyright, and sanctioned content. Monero alone has been delisted from Binance, Kraken EU, OKX, and most major Western exchanges. A network that is forever and untraceable presents storage operators with legal liability they cannot mitigate via takedown — and the privacy primitives prevent any user-level compliance affordance. This is not solvable with engineering; it is a posture decision.

v6.2 Mitigation

Explicitly choose a posture: (a) Tor-grade — expect no exchange listings, target privacy-maximalist users; or (b) hybrid — optional view-keys / compliance hooks that selectively de-anonymize on legal request, at the cost of some unlinkability.

Path Forward · v6.2 Targets

The combination of caveats 01, 02, and 03 is the project-killer. Resolving them is the minimum bar for a defensible v6.2 paper. The architecture itself remains sound — these are gaps in the economic and cryptographic specification, not in the underlying vision of decoupled consensus.

  • Reframe r > i as a stress-tested economic hypothesis with insurance fund and graceful-degradation tiers — not a mathematical guarantee.
  • Diversify endowment denomination into a basket (stables + ETH + $MONEY) to break the single-token reflexivity loop.
  • Specify Proof-of-Replication with slashable stakes and random-challenge audits so storage payment is contingent on actually storing.
  • Publish a subsidy schedule with explicit self-sufficiency milestones and a documented exit ramp.
  • Choose a regulatory posture explicitly — Tor-grade or compliance-hybrid — and design the privacy primitives accordingly.

The MoneyFund Network

Whitepaper v6.1 · Architecture Illustration v6.2 · Shane Cloonan · May 2026

MoneyFund

The MoneyFund protocol consists of eight interconnected factory smart contracts that are divided into three categories and collectively referred to as the tri-layer launchpad. Smart contracts are digital agreements that run on the blockchain and automatically execute when conditions are met. A factory smart contract is like a vending machine for vending machines — a contract that creates contracts. The tri-layer launchpad enables anyone to codelessly deploy custom smart contracts by filling out simple forms. In addition to the eight factories, the protocol includes standalone utility contracts such as the MoneyFund DEX (a custom AMM), an Airdrop tool for batch token distributions, and a dedicated MONEY Dividends staking contract — all of which feed into the unified fee ecosystem.

Asset Layer

Creates tokens & ETFs

Distribution Layer

Staking pools & DAOs

Profit Layer

Revenue-generating contracts

Getting Started

Set up your account and wallets in a few minutes

1

Create an Account

Sign up with your email address. MoneyFund uses Supabase Auth — your credentials are hashed and stored securely, and session tokens refresh automatically.

Sign In
2

Unlock the Vault

Set a vault password to encrypt your local key store. This password encrypts all private keys using AES-GCM before they touch storage. If you lose this password, your vault is unrecoverable — there are no resets.

Go to Wallets
3

Set Up an Ethereum Wallet

Import an existing mnemonic (12 or 24 words) or generate a new one. Your private key is derived locally using BIP-39/BIP-44 and never leaves your browser unencrypted. Fund with ETH for gas fees.

Wallets
4

Set Up an Arweave Wallet (Optional)

Generate a new RSA-4096 keypair or import an existing JWK file. This wallet is used for permanent storage on Arweave, AO compute operations, and PermaWrite. You can also connect ArConnect for browser-extension signing.

Wallets → Arweave
5

Explore the Platform

Deploy smart contracts from the Contracts page, upload files permanently with PermaWrite, browse the permaweb through the Gateway, or use the Multiswap for batch token operations.

Contracts
6

Stake MONEY for Dividends

Once you hold MONEY tokens, stake them in the dividend pool to earn a proportional share of all platform fees. Your stake is represented as a transferable ERC-721 NFT.

MoneyFund is non-custodial — you are responsible for backing up your mnemonic phrases and Arweave JWK files. There is no password reset or key recovery. Store backups securely offline.

Value Flow Diagrams

How MoneyFund compares to equities and shitcoins

Equities

BusinessSharesDividends$$$

Unlike crypto, equities rely on fundamentals more than speculative degeneracy. While that tends to be positive, existing systems & structures are perhaps equally flawed in their own ways. Equity is made up out of thin air and thus carries ever-present risks like dilution and centralized control. There are basically two types: private equity + stocks. Private equity often requires you to be an accredited investor which is basically a rich person. This means poor people cant buy companies until they get listed on a public ponzi at massively inflated valuations. It's also difficult to fund many risky business endeavors with traditional systems because they're gatekept by boomers and regulators. For instance an IPO costs about 25 million dollars. The stock market has a number of familiar flaws like restricted trading hours. Due to the aforementioned inferiorities both of these analog asset types will be replaced by ERC-20 tokens. Summary of downsides: high friction, mutable supply, mutable dividends.

Shitcoins

TokensNothingNothing$?

This diagram represents 99% of cryptocurrencies & the larger problem MoneyFund seeks to solve. These are pointless nonsense coins which is only sustainable for top-quality memes. Certain cartoons are great for short-term gambling but the space has become predictably oversaturated with fagcoins that are resented by normal people. The main barrier to shitcoin adoption is their vapid uselessness. Besides coordinated wealth transfers, shitcoins are purposeless and thus automatically dismissed from the conversations of productive society. Despite significant shortcomings, tokens still outshine equities in many key ways. ERC-20 tokens operate on a decentralized network that ensures trustless & permissionless transacting 24/7 globally. The Ethereum blockchain is the oldest + largest smart contract platform in the world. This network effect, as well as the inherent composability of ERC-20 tokens, has allowed them to gain widespread adoption as the global standard for tokenized assets like stablecoins. Summary of downsides: people are tired of gay nonsense.

MoneyFunds

BusinessDividendsTokens$$$

MoneyFund combines the sustainability of traditional business with the transparency + decentralization of the Ethereum blockchain. No more expensive IPOs, no more scam ICOs- the future is IMOs. Initial Money Offerings are the gold standard for tokenized asset deployment and all coins launched elsewhere should be dismissed & discredited. MFTL tokens allow for unlimited customization within secure parameters. This constrained flexibility allows MoneyFund infrastructure to facilitate the creation + management of uniquely productive assets. In addition to the benefits of being built on the largest defi network in the world, MF offers additional advantages over traditional equities- the largest two being transparency and immutability. For instance walmart can delist or change prices at any time whereas the storefronts produced by our factory include a listing timelock mechanism to enhance operational transparency. This is beneficial to users who are considering investing in some MFTL token thats connected to an NFT storefront for example. Users can view the store's inventory and timelocks to know the minimum duration that items will be locked in the storefront + listed at their current price for. This allows auditors to know how long the MFTL token will be backed by listings. Similarly, dividend immutability is a significant upgrade to the offchain tradfi model. Once a dividend pool is deployed nobody can make changes. Same thing for tokens- once a coin is launched the company it represents cannot dilute shareholders unless something like a mintable function is explicitly written in the contract. Summary of downsides: none.

Where Does the MONEY Come From?

Every contract feeds revenue into the MONEY dividend pool

MONEY0
🚀

Coin Launches

0.1%

🪙

Optional fees

15%

📈

ETFs

0.125%

💰

DEX swaps

0.1%

🏛

DAOs

0.25%

🛍

Storefronts

0.2%

📰

Ad Space

0.2%

🔄

Multiswaps

0.05%

🎁

Airdrops

0.1%

Tri-Layer Architecture

Three interconnected layers that power the MoneyFund ecosystem

Asset Layer

The Asset Layer enables creation of ERC-20 tokens and ETFs. Fed by distribution contracts, this is the destination for value in MF's trilayer model.

Distribution Layer

The Distribution Layer manages token allocations and governance through custom staking pools, DAOs, and multisig wallets, serving as the vehicle that connects assets to profit layer contracts.

Profit Layer

The Profit Layer generates external cashflow via contracts like Multiswap, Storefront, and Auction factories — giving tokens sustainable life through on-chain business.

MONEY Tokenomics

MONEY token supply, burns, staking mechanics, and fee math

Token Standard

ERC-20

Ethereum Mainnet

Total Supply

1,000,000,000

Fixed — no minting function

Burn Mechanism

ETF 0.1%

MONEY burned on each ETF transaction

Dividend Source

8 Contracts

All factories feed the MONEY pool

Staking Model

ERC-721 NFT

Stake receipt is a transferable NFT

Fee Split

50 / 50

MoneyFund Wallet + MONEY Dividends

The MONEY token has a fixed supply of 1 billion tokens with no minting function — the supply can only decrease through burns. Every ETF transaction burns 0.1% of the fee in MONEY, creating deflationary pressure proportional to platform usage. Revenue from all eight factory contracts is funneled into the MONEY dividend pool, where stakers earn a proportional share based on their staked amount relative to the total pool. Staking issues a transferable ERC-721 NFT, meaning staked positions can be traded on secondary markets like OpenSea while the underlying tokens remain locked.

Dividend & Fee Math

How rewards, penalties, and payouts are calculated

Your shareyour_staked / total_staked

If you stake 1,000 MONEY and the total pool is 10,000 → your share is 10%

Reward claimshare × accumulated_rewards

If the pool has accumulated 5 ETH in rewards and your share is 10% → you can claim 0.5 ETH

Early unstake penaltyinitialPenalty - (daysElapsed × dailyDecay)

If initial penalty is 50% and daily decay is 1%, after 20 days → penalty = 50% - 20% = 30%

Storefront payoutsale_price × 0.996 → shareholders

On a 1 ETH sale, 0.004 ETH goes to MF fees, 0.996 ETH is split among shareholders

Revenue Flow Summary

All 8 factories50% MoneyFund Wallet + 50% MONEY Dividends

Base platform fees

ETF transactions0.125% + 0.125% + 0.1% MONEY burn

Deflationary burn on every ETF trade

Custom creator feesUp to 3% set by contract creators

70% to creator receivers, 30% to MF

DEX LP fees0.3% to liquidity providers

Separate from the 0.1% + 0.1% MF fee

Smart Contracts

Detailed breakdown of each factory contract

Coin Launcher

Creator

Set name, ticker, total supply, and optional transaction fees (up to 3%), with 70% going to your chosen wallets and 30% split equally between MoneyFund Wallet and MONEY Dividends. A 0.2% launch fee applies, also split equally.

User

Send tokens, approve spending, and check balances. All standard ERC-20 functions supported.

ETF Launcher

Creator

Build an ETF fund by selecting ERC-20 tokens and setting their percentage allocations (summing to 100%). Choose a name, ticker, and optional transaction fee. The fund uses Uniswap V2 for swaps and Chainlink for ETH/USD pricing. 0.35% transaction fee with 0.125% each to MoneyFund Wallet and MONEY Dividends, 0.1% to burn MONEY tokens.

User

Deposit ETH to mint ETF shares, burn shares to get ETH back, or withdraw underlying tokens. Check fund details, token balances, share prices, and performance metrics.

Dividend Launcher

Creator

Set up a staking pool for an ERC-20 token, defining lock duration, initial penalty for early withdrawal, and daily penalty reduction (up to 365 days). Each stake issues a unique NFT (ERC-721) for tracking. A 0.5% fee applies to staking, unstaking, and reward claims.

User

Deposit tokens to stake and receive a unique NFT. Claim dividends in ETH or ERC-20 tokens based on your share of the pool. Unstake tokens after the lock period, or earlier with a penalty.

DAO Launcher

Creator

Launch a DAO with an ERC-20 token for voting, setting voting period, mode (Rape or Standard), locked token percentage, approval threshold, daily proposal limit, and slippage for swaps. 0.5% fee on executed swaps splits equally between MoneyFund Wallet and MONEY Dividends.

User

Propose token swaps (ETH-to-ERC20 or ERC20-to-ETH), vote on proposals with locked tokens, reclaim tokens after voting, and execute approved proposals.

Multisig Launcher

Creator

Deploy a multi-signature wallet by specifying required signers and confirmation threshold (M-of-N). Choose which addresses can propose, confirm, and execute transactions. Supports ETH transfers, ERC-20 token transfers, and arbitrary contract calls — all requiring the configured number of approvals before execution.

User

Submit transactions for group approval, confirm or revoke pending transactions, and execute once the required threshold is met. View pending and executed transaction history, check signer status, and manage shared treasury assets securely without any single point of failure.

Storefront Launcher

Creator

Create an NFT marketplace by setting shareholder wallets and profit shares (up to 99.6%). Deposit and list ERC-721 NFTs with price in ETH or ERC-20 tokens, with timelock for listings. 0.4% sale fee splits equally between MoneyFund Wallet and MONEY Dividends.

User

Buy NFTs from the marketplace using ETH or ERC-20 tokens. Check listing details, sales statistics, and profit distributions.

Ad Space Launcher

Creator

Launch a continuous ad auction by setting refund percentage (0-100%), fee receivers, starting bid, minimum bid increment, ad lock duration, comment fee, and payment token. 0.4% bid fee splits equally between MoneyFund Wallet and MONEY Dividends.

User

Bid on ad space with ETH or ERC-20 tokens. If highest bidder, adjust comment fees, message length, or payment token. Comment on ads by paying a fee (minimum $1 USD).

Multiswap Launcher

Creator

Build a trading platform for swapping and distributing tokens/ETH, with optional fees up to 3%. 0.1% platform fee splits equally between MoneyFund Wallet and MONEY Dividends. Embed as a widget on any website.

User

Swap ETH for tokens, tokens for ETH/tokens, including batch swaps. Distribute tokens/ETH to one or multiple recipients in a single transaction.

MoneyFund DEX

User

A custom-built automated market maker (AMM) for swapping ETH and ERC-20 tokens. Unlike Multiswap (which routes through Uniswap), the DEX maintains its own liquidity pools and constant-product pricing. Users add or remove liquidity to earn 0.3% swap fees. Total 0.5% swap fee: 0.3% to LPs, 0.1% each to MoneyFund Wallet and MONEY Dividends.

MoneyFund Airdrop

User

A batch token distribution tool for sending ERC-20 tokens to multiple recipients in a single transaction. Supports uniform amounts (same amount to everyone) and individual amounts (custom per-recipient). Includes a master contact list, custom lists, leaderboard tracking, and airdrop history. A 0.2% fee applies to each airdrop.

Security Model

Non-custodial design, on-chain immutability, and zero-trust architecture

🔑

Non-Custodial by Design

MoneyFund never holds, accesses, or transmits your private keys. All signing happens locally in the browser.

  • Ethereum private keys are derived from user-provided mnemonic phrases and encrypted with AES-GCM before storage
  • Arweave JWK keypairs are generated using Web Crypto API (RSA-PSS, 4096-bit) and stored encrypted in the vault
  • The encrypted vault is locked with a user-chosen password — losing the password means the vault is irrecoverable
  • No server-side key storage — Supabase stores only public metadata (addresses, upload records, bookmarks)
🛡

Smart Contract Safety

All factory contracts follow battle-tested patterns to prevent common attack vectors.

  • ReentrancyGuard on all state-changing functions that handle ETH or token transfers
  • Checks-Effects-Interactions pattern enforced throughout the codebase
  • Immutable parameters: once a dividend pool, token, or storefront is deployed, core settings cannot be altered
  • 62,000+ lines of Solidity — full source will be open-sourced at $1M market cap for public audit
🔒

Transport & Session Security

All network communication is encrypted and sessions are scoped with minimal privilege.

  • Supabase Auth with JWT tokens — sessions expire and refresh automatically
  • Row-level security (RLS) policies on all Supabase tables — users can only access their own data
  • Arweave transactions are signed client-side using RSA-PSS + SHA-256 before submission
  • HTTPS-only communication with all external services (Arweave gateways, Turbo, AO, Warp DRE)
📋

Transparency & Immutability

On-chain contracts are transparent by default — every function call and event is publicly auditable.

  • All contract actions emit events that are permanently recorded on Ethereum
  • No admin keys or upgrade proxies — deployed contracts are immutable
  • Fee splits are hardcoded in factory bytecode and cannot be changed post-deployment
  • Storefront listing timelocks provide verifiable minimum listing durations for investor confidence

Audit Status

MoneyFund smart contracts have not yet undergone a formal third-party audit. The full Solidity source code (62,000+ lines) will be released for public audit once the MONEY token reaches a $1 million market cap.

In the meantime, all contract actions are transparent on-chain — every function call, event emission, and state change is publicly verifiable via Etherscan. The contracts use established patterns (OpenZeppelin ReentrancyGuard, Checks-Effects-Interactions) and have been internally reviewed.

Arweave Infrastructure

Permanent storage, decentralized compute, and peer-to-peer networking on Arweave

Arweave is a permanent data storage network that pays miners to store data forever in a single upfront transaction. MoneyFund integrates a full Arweave stack — from low-level peer networking and bundled uploads to high-level smart contract interactions and a permanent file archival system. All integrations use direct REST APIs with zero SDK dependencies, keeping the bundle lean and giving full control over request routing, error handling, and failover logic.

Storage

Network

Compute

Wallet

📜

PermaWrite

Private storage with permanent Arweave archival. Files and text are uploaded to the Arweave blockchain where they persist forever — no hosting fees, no expiration, no takedowns.

  • 44 categories across 9 groups (Media, Documents, Code, Creative, Data, Web, Social, Science, Other) with automatic content-type detection
  • Smart upload: tries Turbo (bundled, instant) first, falls back to L1 base layer
  • Metadata logged to Supabase for search, filtering, and category browsing
  • Custom tags and suggested tags per category for rich on-chain metadata
  • Visibility toggle: private (Supabase only) or permawrite (Arweave + Supabase)
  • PermaFeed view with Arweave TX IDs and direct links to ViewBlock explorer
🌐

Gateway Infrastructure

Direct peer-to-peer access to the Arweave network. Requests route through discovered peer nodes — public gateways are only used as a last resort.

  • Supabase Edge Function proxy for server-side Arweave API access
  • Dynamic peer pool with health monitoring and automatic failover
  • Block explorer: browse blocks, view transactions, inspect tags and data
  • GraphQL console for querying the Arweave transaction index (GQL)
  • Transaction browser with owner, recipient, tag, and block range filters
  • Upload history tracking with Supabase-backed bookmarks
🔗

ar.io Network

Integration with the decentralized ar.io gateway network for smart gateway selection, health monitoring, and ArNS name resolution.

  • Gateway discovery from curated high-quality nodes (arweave.net, ar-io.net, arweave.dev, g8way.io)
  • Health checks with latency measurement and block height verification
  • Network statistics: total gateways, average stake, best latency, highest block
  • ArNS (Arweave Name System) resolution: resolve ar://name to TX IDs
  • ArNS URLs formatted as https://{name}.arweave.dev or https://{name}.ar-io.net
  • Best-gateway selection algorithm based on health and latency

Turbo Bundled Uploads

Instant Arweave confirmations via ar.io's Turbo bundler service. Uploads are bundled into ANS-104 data items for near-instant finality instead of waiting for L1 block confirmations.

  • ANS-104 data item creation with cryptographic signing (RSA-PSS + SHA-256)
  • Deep hash anchoring for tamper-proof content addressing
  • Price estimation in winc (winston credits) before upload
  • Balance checking and top-up URL generation via ArDrive
  • Supports both raw data and file uploads with content-type tags
  • Automatic fallback to L1 base layer if Turbo credits are insufficient
🔐

ArConnect Wallet

Browser extension wallet integration via ArConnect (Wander). Provides a unified interface for both JWK file wallets and ArConnect browser wallets.

  • Auto-detection of window.arweaveWallet injection with event listener fallback
  • Permission-scoped connection: ACCESS_ADDRESS, ACCESS_PUBLIC_KEY, SIGN_TRANSACTION, DISPATCH
  • Transaction dispatch with automatic bundling for instant finality
  • JWK import/export for portable wallet management
  • Balance display in AR with winston precision
  • Dual wallet source support: JWK files or ArConnect extension
🧠

AO Compute Layer

Integration with AO, a hyper-parallel compute environment built on Arweave. Processes run as permanent on-chain programs with message-passing architecture.

  • Direct REST API integration — no aoconnect SDK dependency
  • Dryrun execution via Compute Units (CU) for reading process state
  • Message sending via Messenger Units (MU) with signed ANS-104 data items
  • Token operations: balance queries, transfers, and multi-token portfolio views
  • Well-known AO tokens: ARIO, TRUNK, LLAMA, BARK
  • Process info lookup and result reading by message ID
📄

Warp SmartWeave

Warp SmartWeave contract integration for reading contract state, browsing interactions, parsing Atomic Assets, and checking PST balances — all via direct REST API calls.

  • Contract state reading via DRE (Distributed Resolution Environment) nodes with automatic failover
  • Interaction browsing via Warp Gateway with pagination support
  • Atomic Asset (NFT) parsing: single transaction that is both content AND contract
  • PST (Profit Sharing Token) balance checking for known contracts (ARDRIVE, U, BAZAR)
  • Vouch Protocol integration for wallet reputation verification
  • Contract explorer links to Sonar (Warp's block explorer)

System Architecture

How the frontend, backend, Ethereum, and Arweave layers connect

MoneyFund is a multi-chain application spanning two blockchains (Ethereum and Arweave) with a Supabase backend for authentication, metadata storage, and serverless gateway proxying. The frontend is a single Next.js 16 application that communicates directly with both chains from the browser — private keys never leave the client. The architecture is designed for zero SDK dependencies on the Arweave side, using direct HTTP and GraphQL calls for maximum control and minimal bundle size.

BrowserSupabaseEthereum+Arweave

Client Signing

All TX signing happens in the browser. Keys are AES-GCM encrypted in local vault.

Edge Proxy

Supabase Edge Functions route Arweave requests through the peer pool.

Direct Peers

Arweave data fetched from discovered peer nodes. Public gateways as fallback only.

Multi-RPC

Ethereum calls load-balanced across Infura, Ankr, and Cloudflare RPCs.

Frontend

Next.js 16 (App Router)

Server and client components with file-based routing, server actions, and Turbopack for fast builds.

React 19

Client-side interactivity with hooks, Suspense boundaries, and dynamic imports for code-split Arweave modules.

Tailwind CSS v4

Utility-first styling with custom design tokens (brand-*, gold), dark theme, and responsive breakpoints.

Chart.js

Interactive fee distribution charts, gas comparison visualizations, and data-driven dashboards.

Backend & Auth

Supabase (Auth + Postgres)

Email/password authentication with JWT sessions, row-level security, and Postgres for upload records, bookmarks, and PermaWrite metadata.

Supabase Edge Functions

Serverless Arweave gateway proxy that handles peer discovery, request routing, caching, and cost estimation without exposing infrastructure.

Encrypted Vault

AES-GCM encrypted local storage for private keys. Ethereum keys and Arweave JWKs are encrypted with a user-derived key and never leave the browser unencrypted.

Ethereum (L1)

ethers.js v6

Ethereum wallet management, contract interaction, transaction signing, and ENS resolution via Infura and Ankr RPC endpoints.

8 Factory Contracts

Coin Launcher, ETF Launcher, Dividend Launcher, DAO Launcher, Multisig Launcher, Storefront, Ad Space, and Multiswap — each deploying customizable child contracts.

MoneyFund DEX

Custom constant-product AMM with its own liquidity pools, separate from Uniswap routing used by Multiswap.

Chainlink Price Feeds

ETH/USD oracle integration for ETF share pricing and USD-denominated fee calculations.

Arweave (Permaweb)

ArweaveGateway (custom)

Full Arweave HTTP client with peer pool management, block browsing, GraphQL queries, transaction submission, and content rendering — zero SDK dependencies.

Turbo Bundler (ar.io)

ANS-104 data item creation, deep hash signing, and instant bundled uploads via ArDrive's Turbo service.

AO Compute Layer

Hyper-parallel process messaging via Compute Units (read) and Messenger Units (write) with token balance management.

Warp SmartWeave

Contract state reading via DRE nodes, Atomic Asset parsing, PST balance queries, and Vouch Protocol integration.

Platform Stats

A snapshot of the platform's codebase, infrastructure, and on-chain footprint

27,500+

Lines of Code

TypeScript, SQL, CSS

85

Source Files

Components, libraries, scripts

23

App Routes

Next.js pages

18

Library Modules

Shared logic layer

8

Factory Contracts

On-chain launchers

16

Smart Contracts

Deployed on Ethereum + Solana

8

Supabase Tables

Database schema

3

Blockchains

Ethereum, Arweave, Solana

Codebase Breakdown

React / TSX20,500+ lines
TypeScript / TS6,400+ lines
SQL migrations285 lines
Scripts / CSS360 lines

Deployed Contracts

8

Factory Launchers

Fund, Dividend, Coin, DAO, Multisig, Storefront, Ad-space, Multiswap

5

Standalone Contracts

DEX, Airdropper, MONEY Dividends, MONEY DAO, MONEY Multiswap

1

Token Contracts

MONEY (ERC-20)

2

Cross-chain

Arweave wallet, Solana Wormhole

Supabase Tables (8)

user_wallets

user_preferences

tx_history

arweave_uploads

arweave_bookmarks

permawrite_items

permawrite_repos

permawrite_repo_commits

Fee Structure

How fees are distributed across the platform

Coin Launcher

0.2% Launch

Wallet: 0.1%Dividends: 0.1%
ETF Launcher

0.35% Transaction

Wallet: 0.125%Dividends: 0.125%
Dividend Launcher

0.5% Stake/Unstake/Claim

Wallet: 0.5%Dividends: None
DAO Launcher

0.5% Swap

Wallet: 0.25%Dividends: 0.25%
Storefront Launcher

0.4% Sale

Wallet: 0.2%Dividends: 0.2%
Ad Space Launcher

0.4% Platform

Wallet: 0.2%Dividends: 0.2%
Multiswap Launcher

0.1% Primary

Wallet: 0.05%Dividends: 0.05%
MoneyFund DEX

0.5% Swap

Wallet: 0.1%Dividends: 0.1%
MoneyFund Airdrop

0.2% Airdrop

Wallet: 0.1%Dividends: 0.1%

Frequently Asked Questions

Common questions about MoneyFund contracts

Multiswap Gas Calculator

Compare bundled vs individual transaction gas costs

ETH → Multiple Tokens

Tokens → ETH

Tokens → Tokens

Token → Multiple Addresses

Tokens → Multiple Addresses

Tokens → Single Address

ETH → Multiple Addresses

Glossary

Definitions of key terms used throughout the documentation

Ethereum

ERC-20

The standard interface for fungible tokens on Ethereum. All tokens launched via Coin Launcher and ETFs follow this standard.

ERC-721

The standard for non-fungible tokens (NFTs). MoneyFund uses ERC-721 for dividend staking receipts and storefront listings.

AMM

Automated Market Maker — a decentralized exchange mechanism that uses liquidity pools and a mathematical formula (constant product: x × y = k) instead of an order book.

LP

Liquidity Provider — a user who deposits tokens into an AMM pool to earn a share of trading fees.

Gas

The unit measuring computational effort on Ethereum. Each operation costs a specific amount of gas, paid in ETH. Multiswap bundles operations to reduce total gas.

Wei / Gwei

Units of ETH. 1 ETH = 10¹⁸ wei = 10⁹ gwei. Gas prices are typically quoted in gwei.

Basis Points (bps)

A unit equal to 1/100th of a percent. 10,000 bps = 100%. MoneyFund uses bps for fee shares and allocation weights.

ReentrancyGuard

A smart contract pattern that prevents a function from being called again before it finishes executing. Prevents the classic reentrancy attack vector.

Factory Contract

A smart contract that deploys other smart contracts. Each MoneyFund launcher is a factory that creates customized child contracts.

Arweave

Arweave

A permanent data storage blockchain. Unlike IPFS (content-addressed but not guaranteed persistent), Arweave pays miners to store data forever via a one-time endowment fee.

Permaweb

The permanent web built on Arweave. Once data is uploaded, it is accessible forever via its transaction ID through any Arweave gateway.

JWK

JSON Web Key — the RSA keypair format used by Arweave wallets. Contains the public key (n) and private key components (d, p, q, dp, dq, qi).

Winston

The smallest unit of AR (Arweave's native token). 1 AR = 10¹² winston. Named after Winston Churchill.

ANS-104

Arweave Network Standard for bundled data items. Allows multiple data items to be bundled into a single L1 transaction for efficiency.

ArNS

Arweave Name System — maps human-readable names to Arweave transaction IDs, similar to DNS for the permaweb.

Turbo

ar.io's bundling service for instant Arweave uploads. Data items are signed locally and bundled by the service, providing near-instant confirmation.

AO

Arweave Operating System — a hyper-parallel compute environment where processes run as permanent on-chain programs with message-passing architecture.

CU / MU

Compute Unit and Messenger Unit — the two core AO services. CU executes read-only evaluations (dryrun), MU handles signed message delivery.

SmartWeave

A smart contract protocol on Arweave where contract logic is stored on-chain and state is lazily evaluated by reading interaction transactions.

DRE

Distributed Resolution Environment — Warp's network of nodes that pre-compute and cache SmartWeave contract states for fast reads.

PST

Profit Sharing Token — an Arweave SmartWeave token standard where holders earn a share of usage fees paid to the associated application.

Atomic Asset

An Arweave NFT standard where the content data and the SmartWeave contract state live in a single transaction — the asset is its own contract.

Platform

Supabase

An open-source Firebase alternative providing Postgres database, authentication, edge functions, and row-level security. MoneyFund uses it for user accounts and metadata.

Vault

MoneyFund's encrypted local key store. Private keys are AES-GCM encrypted with a user password and stored in the browser. Non-custodial — no server backup.

MFTL Token

MoneyFund Tri-Layer Token — any ERC-20 token deployed through the MoneyFund launchpad that connects to the tri-layer ecosystem.

PermaWrite

MoneyFund's permanent file storage system built on Arweave. Files are categorized, tagged, and stored forever with optional private/public visibility.

Powered by MoneyFund