How the eXRD Unlocking Vault Works
This publication is made on behalf of Radix Tokens Jersey Limited, a company registered in Jersey with registration number 132555 and the expressions “Radix”, "RTJL", “we”, “us”, “our” or "team" shall be construed accordingly Radix Tokens (Jersey) Limited is incorporated and operated under the supervision of the Jersey Financial Services Commission.
eXRD tokens are subject to our unique price-based unlocking mechanism where tokens are progressively unlocked as eXRD reaches price thresholds set out in our Economics paper. To do this unlocking securely, transparently, and efficiently, we have created a custom smart contract that we call the Unlocking Vault.
The Unlocking Vault contains all locked eXRD tokens as well as the listing of how many tokens are owned by each beneficiary (such as members of our Genesis Community, and those who bought eXRD tokens in our public sale).
Timing of Price-based Unlocks
Tokens will be unlocked and made available for buyers to withdraw them when the price of eXRD reaches certain thresholds (which are listed in our Economics whitepaper). Rather than using the highly-volatile spot price, we use what’s called a Simple Moving Average (SMA) of the price. Our SMA is an average of the hourly token price over the last 7 days, using CoinGecko which provides a reliable price feed across multiple exchanges.
When the SMA price reaches one of the price thresholds, this is considered an “unlock trigger”. When a trigger happens, within 24 hours an unlock will be requested to the Unlocking Vault smart contract. The unlock will then happen randomly during the following 24 hours (see the following section for more explanation on this delay). This randomized delay means that no one – not even Radix – can know exactly when tokens will unlock and have an unfair advantage.
When an “unlock trigger” is reached, we reset the SMA and wait 7 days to get a new average price. Unlock triggers can only happen one at a time, so the minimum delay between each unlock at each price threshold is 7 days.
Example:
Let’s say that the SMA price reaches an unlock threshold at noon on Monday the 1st. The “unlock trigger” happens at noon and is announced to everyone. The actual unlock of tokens will happen sometime between then and noon on Wednesday the 3rd – randomly, up to 48 hours after the unlock trigger. Buyers can watch their allocation at unlock.radixtokens.com to see when the unlock happens and new tokens are available to withdraw.
The SMA price resets and is reestablished at noon on Monday the 8th – exactly 7 days after the previous unlock trigger. If that first SMA is already higher than the next unlock threshold, the next unlock trigger happens immediately. If not, then the SMA is continuously updated until the next threshold is reached.
Unlocking Vault Security
The Unlocking Vault has a special protected “unlock” method that allows a percentage of locked eXRD tokens – for all beneficiaries – to be unlocked and made available to withdraw to each beneficiary’s ethereum wallet address that they provided.
Control of this unlock method is very important, and so we’ve put in place a two-layer system to ensure that it is used correctly and reliably to unlock tokens.
The first layer of control is via multisig provided by trusted HSM-based key management company Trustology. HSMs (hardware security modules) are proven systems relied on by enterprise to protect security-critical data - like signatures using private keys. Trustology has provided a system where 2-of-3 of the directors of Radix Tokens Jersey, the entity entrusted with administering distribution of the eXRD token, must sign any unlocks. The moment that a price-based unlock threshold has been reached, all three directors are instantly notified and they are obligated to proceed with the corresponding unlock.
Trustology provides us with an additional benefit: a custom “policy” ruleset to make unlocks more fair and secure. Only unlocks that follow the sequence of thresholds may be approved, and any unlock is randomly delayed by up to 24 hours before it is submitted to the Ethereum network (as described above in the section on timing).
The second layer is a more traditional on-ledger multisig structure using Gnosis-safe. Here, we have another 2-of-3 structure between the Trustology system above, a Radix operator (able to assist with creating complex smart contract transactions), and a recovery key held by a bonded legal fiduciary. This means that we may address any problems, recover keys, or even remove Trustology if any problems arise – but only with the agreement of the Radix Tokens Jersey directors in order to access the fiduciary’s recovery key.
Here is an illustration of the full signature structure:
