Introducing Lotless

Options infrastructure for tokenized stocks.

Technical documentation for fully covered calls with fixed strikes, tapering notional, and Stock Token delivery.
Protocol docs

Start here

System overview

Lotless separates option economics, collateral, settlement, and network coordination into a small set of explicit components.

OptionFully covered callCore primitive
StrikeFixed per seriesImmutable
NotionalTapers with timeDeterministic
SettlementStock TokenToken delivery
PaymentUSDGPremium + strike
Network$LOTLESSCoordination
Core invariant

Locked raw Stock Token units remain greater than or equal to aggregate remaining exercisable raw units.

Design decision

Three assets, three jobs

Lotless separates the delivery asset, the option right, and the network token so one token never pretends to be everything.

Stock Token

Collateral and delivery. Writers lock canonical raw units; exercise delivers those units. Stock Tokens provide economic exposure but are not underlying company shares.

Lotless claim

The option right. A transferable record of the fixed strike, immutable taper rate, and remaining raw notional.

$LOTLESS

Network coordination. Operators lock it to activate approved markets. Holders may time-lock it into veLOTLESS to govern bounded future decisions.

USDG

Money and performance security. Pays premiums, strikes, protocol fees, and separate operator bonds.

Plain-English walkthrough

Pay once. Keep the strike.

  1. 1

    A writer locks 0.10 NVDA Stock Token.

  2. 2

    A buyer pays an example 4.80 USDG premium.

  3. 3

    The buyer receives a claim with a fixed 180 USDG strike.

  4. 4

    After 90 days at the example taper, approximately 0.071 NVDA remains exercisable.

  5. 5

    Exercise collects approximately 12.78 USDG and delivers the remaining NVDA Stock Token amount.

The 4.80 USDG premium remains part of the buyer’s economics. A market price above the strike does not automatically mean the complete position is profitable.

Protocol concepts

Series anatomy

A Lotless series is the smallest independently priced market. Its economic terms are fixed before the first claim opens.

ParameterMeaningMutation rule
Collateral addressCanonical Stock Token contractImmutable
StrikeUSDG due per raw Stock Token unitImmutable
Opening notional conventionRaw units represented at claim creationImmutable
Taper rateHow remaining raw notional changes with timeImmutable
Corporate-action adapterPredeclared event handlingImmutable for live claims
Fee bandOpening and exercise fee boundsFuture series only
Invariant

Governance may define a template for a future series. It cannot rewrite a live claim’s strike, taper, collateral, settlement asset, or exercise rights.

Protocol concepts

Taper mathematics

Lotless uses a deterministic exponential curve:

R(t) = R₀ × e^(−λt)

R₀  opening raw Stock Token notional
λ   immutable taper parameter
t   elapsed time
R(t) remaining exercisable raw notional

Exercise payment uses stored contract terms rather than a spot-price oracle:

USDG due = fixed strike × R(t)

External prices remain important for quoting and user decisions. They are not required to calculate the contractual delivery amount and strike payment.

Series configuration

Each series defines curve precision, rounding direction, minimum claim size, maximum taper, and time source.

Protocol concepts

Physical Stock Token settlement

“Physical settlement” means delivery of the referenced Stock Token contract. It does not mean delivery of the underlying company share.

  1. 1

    Settle elapsed-time accounting and read remaining raw notional.

  2. 2

    Collect strike × remaining notional in USDG.

  3. 3

    Burn or reduce the exercised Lotless claim.

  4. 4

    Transfer the corresponding locked raw Stock Token units to the claimant.

  5. 5

    Update aggregate coverage before any collateral release.

Buyer boundary

Before exercise, the buyer posts no margin and cannot be liquidated. The buyer can lose the premium paid. Gas, fees, liquidity, and taper still affect outcomes.

Stock Token accounting

Raw units before display units

Contract solvency must use canonical raw ERC-20 balances. Display multipliers may represent splits or other adjustments without changing raw balances. Interfaces can format; vault accounting cannot guess.

EventRequired approachProtocol handling
Split / multiplier changePreserve raw-unit claims and derive display values from the canonical multiplier.Multiplier-aware
Dividend-related display changeFollow issuer contract behavior; never double-adjust.Issuer-defined
Merger / acquisitionUse a preapproved adapter or block the market.Adapter required
Delisting / redemptionPredeclare delivery, closeout, and withdrawal behavior.Fail-safe required
Issuer pausePause new claims without blocking valid customer exits where technically possible.Exit-first

Market coordination

Market approval

A token vote is not a substitute for professional review. A market reaches governance only after four independent checks:

01Canonical asset

Address, transfer behavior, raw units, multiplier, issuer dependencies.

02Technical template

Coverage, taper, exercise, rounding, corporate-action adapter, retirement.

03Liquidity plan

Real buyers, writers, executable quotes, exit depth, budget caps.

04Legal perimeter

Eligible users, jurisdictions, marketing, derivatives and securities analysis.

After review, veLOTLESS may approve bounded parameters. A timelock publishes them before the market accepts collateral.

Market coordination

Auction operators and performance bonds

An approved operator locks `$LOTLESS` to activate the market and posts a separate USDG bond to compensate objectively provable operational harm. Neither stake collateralizes an option.

Slashable

  • Two conflicting signed clearing roots
  • Commitment without reveal after the deadline
  • Provably invalid clearing result
  • Missed deadline with an available sequencer

Never slashable

  • A subjective “bad price” judgment
  • Low quote activity
  • A governance disagreement
  • Market loss borne under valid signed terms

Anyone may quote. Operator stake never buys order priority, and a permissionless fallback path must exist when the operator fails.

Market coordination

Maker Quality Budget

veLOTLESS voters can allocate a capped USDG budget among already approved markets. Makers earn from verified performance rather than token balances.

MeasurementWhy it matters
Firm filled notionalRewards executable liquidity, not screenshots.
Fill ratioPenalizes quotes that disappear when touched.
Valid quoted sizeMeasures useful depth inside a published band.
Commit / reveal completionMeasures operational reliability.
Settlement successRequires clean payment and delivery.
Manipulation risk

Wash volume and self-trading can imitate useful liquidity. The final metric set needs identity-independent anti-manipulation tests, market caps, global caps, and unused-budget recovery.

$LOTLESS

Token overview

`$LOTLESS` is the fixed-supply coordination asset. It activates approved markets through operator locks, creates veLOTLESS governance power, and connects genuine fee activity to a rules-based router.

Maximum supplyFixed at genesisCore rule
AllocationPublic allocationTransparent
Contributor vestingMulti-year scheduleAligned
Future mintingNone after genesisImmutable
Transfer taxNoneZero tax

`$LOTLESS` is not a Stock Token, option, company share, settlement asset, option collateral, or claim on protocol revenue.

$LOTLESS

veLOTLESS

Time-locking `$LOTLESS` creates non-transferable voting power. Lock duration, voting decay, delegation, early exit, and concentration limits define the vote-escrow configuration.

Intended scope

  • Future protocol versions
  • Approved market activation
  • Capped Maker Quality Budgets
  • Published fee bands
  • Treasury budgets and risk-council elections

Forbidden scope

  • Existing customer claim terms
  • Customer collateral and withdrawals
  • Exercise and settlement outcomes
  • Unreviewed legal-market approval
  • Arbitrary minting or direct voter-selected payouts

$LOTLESS

USDG fee router

  1. 1

    Collect disclosed USDG opening and exercise fees.

  2. 2

    Fund published operating requirements.

  3. 3

    Fill the safety reserve to an independently reviewed target.

  4. 4

    Fund the globally and per-market capped Maker Quality Budget.

  5. 5

    Identify genuine surplus above every prior requirement.

  6. 6

    Route the disclosed surplus share to transparent purchases and permanent `$LOTLESS` burns.

Surplus only

Operations, reserves, and market quality are funded before any purchase-and-burn allocation.

Governance

Proposal lifecycle and safeguards

The intended path is: discussion → independent review → formal proposal → voting delay → veLOTLESS vote → timelock → bounded execution.

DelaySeven-day minimum target

Published changes need time for technical review and user response.

ConflictsPublic disclosure

Delegates, operators, budget recipients, and reviewers disclose relationships.

EmergencyPause new risk only

Emergency authority cannot confiscate assets or block valid withdrawal and exercise.

TransitionProtocol multisig

Administrative control stays explicit, narrow, and follows a published transition path.

Developers

Protocol architecture

Stock Token ──→ Covered Writer Vault ──→ Claim Ledger
                       │                       │
                       └──→ Exercise Router ←─┘
                                  │
                           Stock Token delivery

$LOTLESS ──→ Operator Bond / Voting Escrow
                         │
              Approved Markets / Market Gauge

USDG fees ──→ Operations ──→ Safety Reserve
                                │
                         Maker Quality Budget
                                │
                       Eligible surplus rule
Market Registry

Stores independently approved templates and activation state.

Covered Writer Vault

Custodies canonical raw Stock Token units and enforces full coverage.

Claim Ledger

Tracks transferable claim ownership, opening notional, transfers, and partial exercise.

Taper Math

Calculates remaining raw notional from immutable series parameters.

Exercise Router

Collects USDG and atomically delivers locked Stock Tokens.

Corporate Action Adapter

Handles predeclared multiplier and exceptional-event behavior.

Operator Bond

Tracks `$LOTLESS` locks, USDG bonds, and objective slashing proofs.

Voting Escrow + Gauge

Creates veLOTLESS and allocates bounded budgets across approved markets.

Fee Router + Safety Reserve

Applies the published USDG waterfall and reserve constraints.

Governance Timelock

Delays future configuration changes and constrains execution targets.

Developers

Integration sequence

  1. 1

    Read immutable series parameters and canonical collateral address.

  2. 2

    Calculate remaining raw notional for the intended block time.

  3. 3

    Quote the premium in USDG through an approved market path.

  4. 4

    Open or acquire a claim and index its series, owner, and remaining amount.

  5. 5

    Settle transfers and partial exercise before mutating aggregate balances.

  6. 6

    Calculate exact USDG due from strike × remaining raw notional.

  7. 7

    Exercise and verify atomic Stock Token delivery.

Developer principle

Settle accounting before mutation. Fail closed on unsupported corporate actions. Treat live claim economics as immutable.

Developers

Interface model

Market RegistrySeries templates and activation stateRead interface
Claim LedgerOwnership, transfers, and remaining notionalCore interface
Exercise RouterUSDG payment and Stock Token deliveryWrite interface
Event schemaSeries, claim, transfer, and exercise eventsIndexer path
TypeScript SDKTyped quoting and integration helpersClient layer
Security artifactsInvariants, test vectors, and audit outputsVerification

Security

Security model and invariants

Core solvency invariant

locked raw Stock Token units ≥ aggregate remaining exercisable raw units

  • Every mint increases claims only after collateral is locked.
  • Every collateral release settles taper accounting first.
  • Partial exercise reduces claim notional and collateral by the same raw amount.
  • Rounding never creates more exercisable units than collateral.
  • Governance cannot reach customer custody or rewrite existing series terms.
  • Spot-price oracle failure cannot corrupt the exercise arithmetic.
  • Unsupported corporate actions fail closed under a predeclared state.
  • Operator failure has a permissionless fallback path.

The security program covers formal invariants, property tests, fuzzing, fork simulations, external audit, economic review, corporate-action review, incident response, and bug bounty operations.

Security + legal

Complete risk register

Critical

IP and licensing

The AmPO paper notes a provisional U.S. patent; implementation confirms the licensing and IP position.

Critical

Legal and eligibility

Options on Stock Token economic exposures may trigger derivatives, securities, marketing, jurisdiction, and user-eligibility requirements.

High

Stock Token dependency

Availability, transfers, redemptions, pauses, and issuer behavior can affect collateral and delivery.

High

Corporate actions

Mergers, delistings, redemptions, and unsupported transformations can make delivery or closeout ambiguous.

Critical

Contract solvency

Raw-unit, rounding, transfer, partial-exercise, or collateral-release bugs can violate full coverage.

High

Liquidity

A novel taper schedule may fail to attract credible buyers, writers, or makers.

High

Token governance

Concentrated voting, bribery, delegation conflicts, or captured operators can distort budgets and future markets.

High

Maker measurement

Wash volume can imitate useful liquidity unless accounting is manipulation-resistant and capped.

High

Fee router

A buy-and-burn can create legal or market-expectation risk and can starve reserves if activated too early.

Resources

Source material and glossary

Claim
The transferable Lotless option right for one series.
Raw unit
The canonical onchain ERC-20 balance unit used for solvency accounting.
Remaining notional
The Stock Token amount still exercisable at a specific time.
Taper
The deterministic schedule that reduces remaining notional.
Physical settlement
Delivery of the Stock Token contract, not the underlying share.
veLOTLESS
Non-transferable voting power created by locking `$LOTLESS`.
Maker Quality Budget
A capped USDG budget allocated to approved markets and earned through measurable performance.
Safety reserve
Protocol-controlled USDG funds prioritized before eligible surplus routing.
Lotless Protocol Documentation · v1.0

Mechanics, architecture, markets, governance, and integration in one technical reference.

Open simulator