DemoProduct preview. Real-money launch follows the CertiK final report.
Architecture

How JuniorShot Is Built.

The settlement path, the oracle stack, the money path and the failure modes. Written so a technical reviewer can evaluate it in one pass.

Flow

Settlement Path.

  1. 01
    Round opens
    Stakes enter the pool, capped per wallet.
  2. 02
    Lock
    Staking closes, then the strike price is read, so no late information edge exists.
  3. 03
    Oracle reads
    Median of five independent feeds at the settle timestamp.
  4. 04
    Contract settles
    Winners split the losing pool pro rata, minus a flat public rake of 3 percent, published before you stake.
  5. 05
    Rake taken
    The rake splits at settlement per the published waterfall: Backstop share, operations share, retained margin. The split is on-chain and changes only with 30 days' notice.
Collateral

Collateral And Settlement.

Users stake any supported asset. Assets convert at deposit. Every pool settles in a single denomination. Odds are never split. There is exactly one pool per market regardless of which assets were staked. Payouts return in the asset each user staked, and odds are identical for all participants.

Separate pools per currency would fragment liquidity and split odds. One shared unit avoids that, which matters most in long tail markets where depth is thin.

Accounting Unit
1 unit is about 1 USD. Every stake, pool balance and payout is tracked in units so liquidity is never split across assets.
Payout In Kind
A user who staked USDT is paid in USDT. A user who staked BTC is paid in BTC. Conversion happens only at stake time.
One Pool Per Market
A market has one pool, not four. Depth on side A is depth on side A, whatever assets contributed.
Identical Odds
The multiplier a user sees does not depend on the asset they chose. Discounts and benefits attach to the wallet, not to the pool.
Resolution

Oracle Stack.

Markets resolve from deterministic, pre-declared sources only. Median of five independent feeds at the settle timestamp. Median beats average, because one corrupted feed cannot drag the result. The three candidate feeds are Chainlink, Pyth and RedStone, subject to availability on the launch chain.

A divergence beyond tolerance or a stale feed triggers a void with full refunds and zero rake. There is no discretionary override.

Asset reference rates, used to convert stakes in all supported assets into pool units, come from the same independent feed discipline. If an asset rate is stale or divergent, new stakes in that asset are blocked rather than settled at a bad rate. Existing pool balances are unaffected because they are already denominated in units.

The Rule

AI may propose a market. Only a deterministic, pre-declared feed may resolve it. No model, and no human committee, decides an outcome.

Custody

Money Path.

User Funds
Held in user-controlled contracts. Governance cannot move them.
Pool
Pool versus pool. We hold no position in any market, ever.
Rake
Flat and public: 3 percent of every settled pool, the same number for everyone, published before you stake. It splits at settlement per the published waterfall: Backstop share, operations share, retained margin.

Custody Of Bitcoin And Stablecoins

Which BTC We Accept
At Launch Native BTC bridged through Hemi tunnels at launch, so the collateral tracks real Bitcoin rather than an operator IOU. Named fallbacks if a tunnel is unavailable at launch: cbBTC and wBTC, each listed explicitly with its issuer, never silently substituted.
Whose Bridge Risk This Is
Bridge risk sits with the bridge, and the user sees which one they are using before they deposit. We do not net it away or pretend it is zero. If a representation is impaired, deposits in that representation are halted, existing balances stay denominated in units, and the impairment is posted to the status page.
Where In-Kind Reserves Sit
At Launch Payout reserves for each representation sit in per-asset on-chain vaults on the settlement chain, sized to cover open positions denominated in that asset. Stablecoin reserves sit in the same structure. Reserves are not lent, staked, or rehypothecated.
Segregation Model
Player balances sit in segregated on-chain vaults, verifiable one to one. Operating funds and retained margin live in separate addresses, published so anyone can check that player vaults cover player liabilities.

Items marked AT LAUNCH are the intended design and are not final until the launch review and the CertiK final report.

Failure Modes

What Happens When Things Break.

ScenarioBehaviour
Oracle feed goes staleRound voids, full refund, zero rake.
Feeds disagree beyond toleranceRound voids, full refund, zero rake.
Pool is empty or one sidedRound voids, stakes returned.
Asset rate feed stale or divergentNew stakes in that asset are blocked. Existing pool and settlement are unaffected because the pool is already denominated in units.
Keeper fails to settle on timeSettlement retries, incident posted to Status.
EmergencyDocumented emergency policy, see Governance.
Chain And Stack

Where It Runs.

Chain

Launching on Hemi, an EVM layer that inherits Bitcoin security via Proof of Proof.

Contracts

Contracts immutable at deployment. No admin override on settled results or the rake waterfall.

Audit

CertiK assessment in progress.

For the commercial thesis, see the Investor Thesis.