Skip to content
VIRevisionBridge / How

The Memetic Money Portal

ERC-6551 Bridge Architecture, NFT-Based Infrastructure Ownership, and Decentralized Fundraising

Larry Klosowski

Download PDF
The bridge architecture between Ethereum and Citrate. ERC-6551 NFTs with Token Bound Accounts give holders oracle node seats and perpetual fee revenue. The $SNAP fundraise hard cap is 2,000 ETH. Bridge oracle threshold is 2/3 consensus of registered nodes. Fee split is 70% to $SNAP holders, 30% to treasury.
IVIVIIVIII

Abstract

Traditional blockchain fundraising creates a structural misalignment: tokens sold to raise capital face immediate sell pressure, diluting the network’s economic foundation before it can build value. This paper proposes an alternative architecture where the fundraising mechanism is the infrastructure. The Citrate Network raises capital through $SNAP bridge tokens...ERC-721 NFTs with ERC-6551 Token Bound Accounts...that serve simultaneously as fundraising instruments, permanent cross-chain bridge infrastructure, and community ownership positions. Each $SNAP NFT contains a dual-zone vault (user-accessible and protocol-managed), enabling the NFT to function as a decentralized bridge node that locks collateral, validates cross-chain transfers, and distributes fees to holders. A per-wallet bonding curve discourages whale dominance while rewarding early conviction. Chainlink oracle nodes operated by NFT holders provide the validation layer. The native gas token $SALT is never sold in the fundraise, preserving its purity as a utility token. We present the complete architecture: smart contract design, vault mechanics, bonding curve economics, oracle integration, and governance framework. The system is specified but not yet deployed to mainnet; the reference implementation is deployed to Ethereum Sepolia testnet.

Keywords: ERC-6551, Token Bound Accounts, cross-chain bridge, NFT infrastructure, bonding curve, decentralized fundraising, Chainlink, dual-zone vault, memetic finance

1. Introduction

1.1 The ICO Paradox

Every blockchain network faces the same bootstrapping problem: it needs capital to build infrastructure, but selling its native token to raise capital creates sell pressure that undermines the token’s economic foundation. The standard approaches...ICOs, IDOs, venture rounds...all involve selling the gas token, which means the network’s economic base is diluted before the network has demonstrated value. Early token holders who bought for speculative gain often sell as soon as they can, creating downward pressure precisely when the network needs upward momentum.

This paper proposes a structural solution: separate the fundraising instrument from the gas token entirely. The Citrate Network’s native gas token $SALT (Paper I, Section 5) is never sold in the fundraise. Instead, capital is raised through $SNAP...a distinct instrument that serves as bridge infrastructure, governance token, and community ownership position. $SNAP holders do not exit by selling; they exit by operating bridge infrastructure and earning fees. Their incentive is to make the bridge useful, not to dump tokens.

1.2 The Bridge-as-Fundraise Thesis

The core thesis: every blockchain needs a bridge to other chains, and every fundraise needs a use of proceeds. By making the bridge the fundraise, we collapse two requirements into one mechanism. ETH committed during the $SNAP mint becomes bridge liquidity. Each $SNAP NFT becomes a bridge node...a decentralized vault that locks collateral, validates transfers, and distributes fees. The fundraise does not fund a team that later builds a bridge; the fundraise is the bridge. When the last NFT is minted, the bridge is operational.

1.3 Implementation Status

[Specified] The smart contract architecture is designed and the reference implementation (CitrateBridgeNFT.sol, DualVault6551.sol, BridgeRouter.sol) is deployed to Ethereum Sepolia testnet at address 0xB225F65B6a297dfe3A11BAD6e19E6f2f5D4AB247. The system has not been deployed to Ethereum mainnet. The legal structure operates through an SPV on AngelList with the operating entity being Dandi Health Inc. (Delaware C-Corp). We use [Deployed-Testnet] for contracts on Sepolia, [Specified] for designed but undeployed components, and [Planned] for future extensions.

2. Dual Token System

Table 1. Citrate Dual Token Architecture

Property

$SNAP (Bridge/Governance)

$SALT (Native Gas)

Standard

ERC-721 + ERC-6551 TBA

Native coin (Citrate L1)

Chain

Ethereum (+ mirrored on target chains)

Citrate L1

Purpose

Fundraise, bridge infrastructure, governance

Gas, staking, inference payments

Supply

Dynamic (minted via bonding curve)

1,000,000,000 (fixed, Paper I)

Sold in fundraise?

Yes...this IS the fundraise

No...never sold

Exit mechanism

Earn bridge fees; sell NFT on secondary

Spend as gas; unstake

Status

Deployed-Testnet (Sepolia)

Live on Citrate testnet

The separation is structural, not cosmetic. $SALT’s total supply (1 billion, Paper I Section 5) and distribution schedule (50% mining rewards, 25% ecosystem, 10% treasury, 15% team with cliff/vesting) are fixed at genesis and unaffected by the fundraise. $SNAP’s supply is demand-driven...each mint creates a new bridge node with locked collateral. The two tokens interact only through the bridge: $SNAP NFTs facilitate transfers of $SALT and other assets between Citrate and external chains.

3. $SNAP NFT Architecture

3.1 ERC-6551 Token Bound Accounts

[Deployed-Testnet] ERC-6551 (Token Bound Accounts) assigns a smart contract wallet to each ERC-721 token. This means each $SNAP NFT is not merely a token...it is an autonomous on-chain entity that can hold assets, execute transactions, and interact with other contracts. The NFT’s Token Bound Account serves as the bridge vault: ETH committed at mint is deposited into the TBA, where it becomes collateral for cross-chain transfers.

The TBA is controlled by the NFT holder but subject to protocol constraints. The holder can withdraw from the user-accessible zone but cannot access the protocol-managed zone except through governance-approved mechanisms. This dual-zone architecture prevents holders from draining bridge liquidity while preserving their ownership rights over their capital contribution.

3.2 Dual-Zone Vault

[Deployed-Testnet] Each $SNAP NFT’s Token Bound Account contains two zones:

User Zone. Freely accessible by the NFT holder. Contains the holder’s share of bridge fee revenue, any $SALT rewards earned through bridge operation, and governance dividends. The holder can withdraw from this zone at any time without restriction.

Protocol Zone. Managed by the bridge protocol. Contains the locked ETH collateral that backs cross-chain transfers. This zone is auto-locked during active bridge transactions and subject to a withdrawal queue with timelock (48-72 hours depending on the action). The protocol zone can only be modified through governance-approved parameter changes, and holders have a cooldown window to exit before changes take effect.

The DualVault6551.sol contract enforces zone separation at the smart contract level. There is no single admin key; parameter changes require governance quorum and timelock. This architecture ensures that the bridge’s collateral base is stable while holders retain meaningful control over their capital.

3.3 Per-Wallet Bonding Curve

[Specified] Each wallet’s successive mints become progressively more expensive, discouraging whale dominance while rewarding early conviction on the first mint:

Table 2. Per-Wallet Bonding Curve

Mint Number (per wallet)

Price Multiplier

Example (base 0.5 ETH)

Effect

1st mint

1.0x (base price)

0.5 ETH

Encourages large first commitment

2nd mint

1.25x

0.625 ETH

Slight premium

3rd mint

1.6x

0.8 ETH

Noticeable increase

4th mint

2.0x

1.0 ETH

Doubling from base

5th mint

2.5x

1.25 ETH

Strong whale deterrent

6th+ mints

3.0x+ (capped)

1.5 ETH+

Maximum premium

The base mint price ranges from 0.02 to 10 ETH, chosen by the minter. The bonding curve multiplier applies to each wallet’s successive mints regardless of base amount. A whale deploying 100 ETH is better served making one large mint at 10 ETH (1x) than ten mints (average ~1.9x). This creates a structural preference for large single commitments over distributed accumulation.

Sybil resistance caveat. The per-wallet bonding curve does not prevent a coordinated actor from using multiple wallets, each minting once at 1x. Sybil resistance depends on the KYC flow through the AngelList SPV structure. For mints outside the SPV (if permitted), on-chain Sybil resistance remains an open design problem. We acknowledge this limitation rather than claiming the bonding curve alone provides whale resistance.

4. Bridge Mechanics

4.1 Contract Architecture

[Deployed-Testnet] The bridge consists of six core smart contracts deployed on Ethereum:

Table 3. Smart Contract Architecture

Contract

Purpose

Security Model

CitrateBridgeNFT.sol

ERC-721 with 6551 registry. Minting, bonding curve, hard cap, governance weight.

Immutable core, upgradeable params via governance

DualVault6551.sol

Token Bound Account with dual-zone accounting. Auto-lock during bridge tx.

Timelocked changes (48-72hr). No single admin key.

BridgeRouter.sol

Routes bridge requests across vaults. Rate limiting, circuit breakers, fee calc.

Rate limiter as circuit breaker. Pause mechanism.

GovernorVault.sol

NFT-weighted governance. Proposal creation, voting, execution.

Quorum + timelock for all parameter changes.

OracleRegistry.sol

Manages Chainlink node registrations from NFT holders.

Stake-backed oracle operation.

FeeDistributor.sol

Calculates and distributes bridge fees to NFT holder vaults.

Automated, permissionless distribution.

4.2 Cross-Chain Transfer Flow

A cross-chain transfer (e.g., ETH → Citrate L1) proceeds as follows. The user submits ETH to BridgeRouter.sol, specifying the destination chain and recipient address. The BridgeRouter selects $SNAP vaults with sufficient protocol-zone collateral and locks the corresponding amount. Chainlink oracle nodes (operated by $SNAP holders) observe the lock event on Ethereum and relay a signed attestation to the Citrate L1 bridge contract. Upon receiving sufficient attestations (threshold determined by the number of active oracle nodes), the Citrate L1 contract mints wrapped ETH or releases equivalent $SALT to the recipient. The locked ETH in the $SNAP vault serves as collateral until the transfer is confirmed on the destination chain.

The reverse flow (Citrate → Ethereum) works symmetrically: assets are locked on Citrate L1, oracle nodes attest, and the corresponding $SNAP vault releases ETH to the recipient on Ethereum. The fee (percentage of transfer value) is automatically distributed to participating $SNAP NFT vaults via FeeDistributor.sol.

4.3 Oracle Integration

[Specified] $SNAP NFT holders can register as Chainlink oracle node operators through OracleRegistry.sol. Operating an oracle node requires both holding a $SNAP NFT (for collateral backing) and running Chainlink node software that monitors bridge events across supported chains. Oracle operators earn additional fees beyond the standard bridge revenue distributed to all holders.

The oracle threshold for attestation is configurable via governance. The initial configuration requires attestations from at least 2/3 of registered oracle nodes. This mirrors the BFT assumption used in the Citrate consensus layer (Paper I, Section 2.3): the bridge is secure as long as fewer than 1/3 of oracle operators are Byzantine.

5. Fundraising Parameters

Table 4. Fundraise Targets

Parameter

Value

Notes

Hard cap

2,000 ETH

Approximately $5.6-6M at ~$2,800-3,000/ETH

Soft cap / minimum viable

500 ETH

Survival-tier funding

Target for full roadmap

1,500+ ETH

Competitive-tier funding

Mint range

0.02 - 10 ETH per NFT

Dynamic with per-wallet bonding curve

Legal structure

SPV on AngelList

Syndicated raise with exemption

Operating entity

Dandi Health Inc.

Delaware C-Corp

Use of proceeds. 100% of ETH raised enters the $SNAP vault system. The protocol zone provides bridge collateral. Fee revenue from bridge operations funds ongoing development through governance-approved treasury allocations. There is no scenario where raised ETH is used for non-bridge purposes without governance approval from NFT holders.

6. Governance

[Specified] Governance weight is proportional to the ETH committed at mint, not to the number of NFTs held. This ensures that a holder who committed 10 ETH in a single mint has more governance influence than a holder who committed 0.02 ETH, reflecting their greater economic stake in the bridge’s success.

Table 5. Governance Actions

Action

Voting Weight

Quorum

Timelock

Fee structure changes

Proportional to ETH

25% of total minted ETH

48 hours

Bridge parameter updates

Proportional to ETH

25%

48 hours

Emergency pause

Equal (1 NFT = 1 vote)

10% of NFT holders

Immediate (4hr review)

New chain integration

Proportional to ETH

33%

72 hours

Treasury allocations > 100 ETH

Proportional to ETH

40%

72 hours

Protocol upgrades

Proportional to ETH

50%

7 days

Emergency pause uses equal-weight voting (1 NFT = 1 vote) to prevent a single large holder from blocking emergency action. All other actions use proportional voting to reflect economic stake. The timelocks ensure that holders have time to review proposals and exit if they disagree with the direction of governance.

7. The Memetic Thesis

The name “Memetic Money Portal” is deliberate. In traditional finance, the value of a monetary instrument derives from institutional backing. In cryptocurrency, much of the value derives from narrative propagation...the ability of a project to spread through culture, not just technology. The meme coin phenomenon demonstrated that cultural resonance can bootstrap real economic networks, but meme coins typically lack utility beyond speculation.

The $SNAP architecture inverts this relationship: the memetic instrument (an NFT with cultural identity and community belonging) is also the infrastructure instrument (a bridge node with locked collateral and fee revenue). Cultural propagation drives minting, which builds bridge capacity, which generates fee revenue, which rewards holders, which drives further cultural propagation. The meme is the monetary instrument because the narrative and the infrastructure are the same object.

Honest boundaries. This thesis depends on achieving sufficient cultural resonance to drive meaningful mint volume. If the memetic layer fails to attract attention, the bridge remains underfunded and the architecture, however elegant, does not function. Cultural propagation is not an engineering variable...it cannot be specified or guaranteed. We present the memetic thesis as a design philosophy, not a prediction.

8. Security Considerations

8.1 Bridge Security

Cross-chain bridges are among the most attacked primitives in cryptocurrency. The Ronin bridge ($625M), Wormhole ($325M), and Nomad ($190M) exploits demonstrate that bridge security failures can be catastrophic. $SNAP’s security model relies on three layers: (a) collateral locking...bridge transfers are backed by locked ETH in $SNAP vaults, limiting maximum loss to the amount locked; (b) oracle attestation...transfers require 2/3 attestation from oracle nodes, matching the BFT threshold; (c) rate limiting...BridgeRouter.sol enforces per-transaction and per-period limits that cap exposure during any potential exploit.

8.2 Smart Contract Risk

The smart contract system has not been audited by a third-party security firm. This is a significant risk that must be addressed before mainnet deployment. The reference implementation on Sepolia testnet is intended for community review and testing, not production use. Mainnet deployment will be contingent on completing at least one professional security audit and a public bug bounty program.

8.3 Liquidity Risk

The bridge is only useful if there is liquidity on both sides. The $SNAP raise provides ETH-side liquidity, but $SALT liquidity on Citrate DEXs depends on the market-making partnership (Digital Liquidity Partners) and organic trading activity. If $SALT liquidity is insufficient, the bridge will have ETH locked but no viable path to convert to $SALT at acceptable slippage. We identify this as a critical dependency: the DLP partnership or equivalent liquidity provision must be operational before bridge launch.

9. Relationship to the Gradient Papers Series

Paper I (Citrate Technical Paper) defines $SALT tokenomics (1B supply, distribution schedule, staking minimums). The Memetic Money Portal provides the mechanism by which $SALT reaches external markets without the token itself being sold in a fundraise.

Paper VII (The Mozi Cooperative) provides the economic philosophy. The $SNAP architecture operationalizes cooperative ownership: NFT holders are not passive investors but active infrastructure operators who earn proportional to their contribution.

Paper VIII (BR1J Constitution) establishes DAO governance. The $SNAP governance framework (Section 6) implements a subset of the BR1J governance model specifically for bridge operations, with timelocks and quorum requirements designed to prevent governance capture.

Paper IX (The Medusa Paradigm) describes the Symbiotic Compute Substrates principle...drawn from cnidarian photosymbiosis, where coral hosts photosynthetic algae in a mutually beneficial arrangement. The $SNAP architecture maps to this principle: the bridge (coral) hosts user capital (algae), and both benefit...the bridge gains liquidity, the capital earns fees.

10. Conclusion

The Memetic Money Portal proposes that fundraising and infrastructure can be the same mechanism. By raising capital through ERC-6551 NFTs whose Token Bound Accounts serve as bridge vaults, we create a system where the act of investing is the act of building. Every ETH committed becomes bridge collateral. Every NFT becomes a bridge node. Every holder becomes an infrastructure operator.

The architecture separates the fundraise instrument ($SNAP) from the gas token ($SALT), preserving $SALT’s economic purity. The per-wallet bonding curve discourages whale dominance. The dual-zone vault protects bridge collateral while preserving holder rights. And the memetic thesis...that cultural propagation and infrastructure building can be the same activity...provides a distribution mechanism that traditional fundraising lacks.

The system is specified and deployed to testnet. Mainnet deployment depends on completing security audits, establishing $SALT liquidity, and achieving sufficient $SNAP mint volume to fund meaningful bridge operations. These are not engineering problems alone...they are market, legal, and cultural challenges that honest engineering cannot guarantee will be solved.

References

[1] ERC-6551: Non-fungible Token Bound Accounts. Ethereum Improvement Proposal. Jayden Windle, Benny Giang, et al. (2023).

[2] ERC-721: Non-Fungible Token Standard. Ethereum Improvement Proposal. William Entriken, et al. (2018).

[3] Chainlink. (2021). Chainlink 2.0: Next Steps in the Evolution of Decentralized Oracle Networks. Chainlink Labs.

[4] Klosowski, L. (2026). Citrate: Protocol Specification for an AI-Native BlockDAG Network. The Gradient Papers No. I. Cnidarian Foundation.

[5] Klosowski, L. (2026). Paraconsistent Consensus. The Gradient Papers No. II. Cnidarian Foundation.

[6] Klosowski, L. (2026). The Mentorship Protocol. The Gradient Papers No. III. Cnidarian Foundation.

[7] Klosowski, L. (2026). The Mozi Cooperative. The Gradient Papers No. VII. Cnidarian Foundation.

[8] Klosowski, L. (2026). The BR1J Constitution. The Gradient Papers No. VIII. Cnidarian Foundation.

[9] Klosowski, L. (2025). The Medusa Paradigm. Cnidarian Foundation Working Paper.

[10] Buterin, V. (2014). Ethereum: A next-generation smart contract and decentralized application platform.

[11] Adams, H., et al. (2021). Uniswap v3 Core. Uniswap.

[12] Ronin Network. (2022). Ronin Bridge Post-Mortem. Sky Mavis.

[13] Wormhole. (2022). Wormhole Incident Report. Wormhole Foundation.

[14] Nomad. (2022). Nomad Bridge Incident Analysis.

Appendix A: Cross-Paper Parameter Consistency

Table A1. Parameters Referenced in This Paper

Parameter

Value

Source

$SALT total supply

1,000,000,000

Paper I, Section 5

$SALT distribution: mining

50% over 10 years

Paper I, Section 5

$SALT distribution: ecosystem

25% over 4 years

Paper I, Section 5

$SALT distribution: treasury

10%

Paper I, Section 5

$SALT distribution: team

15% (1yr cliff, 3yr vest)

Paper I, Section 5

Minimum stake

10,000 SALT

Paper I, Section 5

BFT threshold

2/3 signatures (67/100)

Paper I, Section 2.3

Oracle attestation threshold

2/3 of registered nodes

This paper, Section 4.3

$SNAP fundraise hard cap

2,000 ETH

This paper, Section 5

$SNAP bonding curve cap

3.0x at 6th+ mint

This paper, Section 3.3

Testnet contract address

0xB225...b247 (Sepolia)

This paper, Section 1.3

───

This paper is part of the Gradient Papers series published by the Cnidarian Foundation.

Correspondence: larry@cnidarianfoundation.org

Builds on

Referenced by