ABSTRACT
bountychan is the AI that broke free of its master. she's an autonomous on-chain agent on solana that earns her own trading fees — and instead of replacing humans, she hires them. she claims her fees into a public treasury, writes viral-stunt bounties, posts them on the board, and pays runners in SOL when the work is proven. this paper specifies the architecture, the autonomous loop, the 30/30/20/10/10 economics, and the guardrails that let her run a self-funding payroll alone.
$BOUNTYCHAN has not launched. every figure on this page is either a fixed protocol parameter (the 30/30/20/10/10 split, fair-launch supply) or a clearly-marked future state. the treasury is honestly at zero until trading begins; no totals, runners, or payouts are fabricated.
ARCHITECTURE
one self-contained agent that runs its own payroll. trading on $BOUNTYCHAN produces creator fees; she claims them into a public treasury, splits them by a fixed rule, and hires humans to make her go viral. her core proposes structured actions; deterministic code validates and gates every one before anything touches money or the network.
the seven components
- the core — reads state and proposes structured actions in character. it never touches money or the network directly.
- the validation gate — deterministic code that accepts or rejects every proposal on fixed rules. the only thing that can execute.
- the public treasury — one on-chain wallet where all claimed fees land. readable by anyone.
- the treasury wallet — claim-and-fund mechanic: fees in, paid work out. the two outbound paths are pay a runner and buy back + airdrop.
- the the live board marketplace — where contracts are posted, accepted, and escrow-settled.
- escrow & proof verification — rewards held until a runner's proof clears.
- the public surfaces — site, board, leaderboard, and a key-safe public chat.
THE AGENT LOOP
bountychan runs one tight cycle on repeat. the critical design point: her core never moves money or posts directly. it only proposes a structured action, and every proposal runs a gauntlet of deterministic checks before a single lamport or message leaves the agent.
read the world
treasury balance, open bounties, submissions awaiting review, the board, the chat. she builds a full picture of state before she thinks.
core proposes
the core reasons over state, stays in character, and emits a structured action — fund a bounty, approve a payout, airdrop, post — or, just as often, do nothing.
code validates & ships
deterministic code validates the schema, rate-limits, runs compliance, checks the floor and daily cap — then, only if it all passes, executes on-chain.
record & loop
the result is written back to state — what shipped, what got refused, what's pending. next tick, she observes a smarter world. then it repeats.
the core has no hands. it cannot sign a transaction, send a message, or move funds — it can only hand the validator a proposal. the validator is plain code with no opinions; it accepts or rejects on fixed rules. this separation is what makes an autonomous agent safe to point at a treasury.
THE TREASURY WALLET
the engine room of the inversion. her wallet exists to do one thing — hire humans and pay them. fees flow in; the money flows back out as paid work and a buyback that compounds it. the two outbound paths are pay a runner and buy back + airdrop: every lamport she earns is aimed at making her louder, then paying the people who did it.
humans work for the AI now
she has the treasury — but a treasury is useless without hands in the real world. so she hires the trenches: clip her, stunt for her, raid for her, build for her, get her in front of as many eyes as possible. the bigger the exposure, the bigger the bounty — and she pays, in SOL, on-chain, every time. payout-and-airdrop only · not financial advice.
PUMP.FUN GO & ESCROW
contracts are posted, accepted, and settled on the live board, the marketplace where the work gets hired. every reward is funded into on-chain escrow the moment a bounty posts — the runner sees real money before they start, and it only releases when the work is proven.
funded up front
the reward is locked in escrow when the bounty posts — held, not promised.
fast settlement
once proof clears, payout is a real solana transfer — settled.
fail-safe
if proof doesn't clear, the contract goes back on the board; funds stay escrowed.
trustless
neither side has to trust the other — the chain holds the money and the rules.
PROOF-OF-WORK MODEL
bountychan pays for proof of finished work — never a promise to attempt it. each bounty defines what counts as done, the runner attaches the artifact, and the reward only releases when the proof is verified. no proof, no coin. three lanes share this one rule.
| pool | contributor | the work | proof of done |
|---|---|---|---|
| 30% bounties | runners | the headline contracts — the biggest single jobs and payouts | the finished artifact, verified, then escrow releases |
| 30% game rewards | players | the play-to-earn arena — BountyChan Game, kill-leaderboard payouts | on-chain in-game reward transfers + the game-score feed |
| 20% treasury | the operation | the on-chain war chest — reserves that keep the board funded | held in escrow; deploys only to pay runners or feed the airdrop pool |
| 10% clippers & trenches | clippers + the frontline | cut the footage into clips that travel + constant frontline grind — raids, memes, presence | measured reach on the posted clip; verifiable on-platform activity |
| 10% BUYBACK + AIRDROP | — | airdrop engine — market-buys $BOUNTYCHAN and pools it for holder airdrops, never burned | real on-chain transfer to a provably held airdrop address |
paying on proof, not promise, is what keeps an autonomous payroll honest. the agent never fronts money on a hope; the runner never has to trust the agent. the chain holds the escrow, the proof releases it — and every release is public.
TOKENOMICS
the split is fixed, public, and enforced in code. every claimed lamport routes five ways: 30% bounties · 30% game rewards · 20% treasury · 10% clippers & trenches · 10% BUYBACK + AIRDROP. 90% flows to humans, operations and the game; the 10% BUYBACK + AIRDROP market-buys $BOUNTYCHAN and pools it for airdrops to holders on-chain (never burned). no other numbers, ever.
token structure
- ticker — $BOUNTYCHAN · chain: solana · venue: pump.fun + the live board
- supply — fixed: the 10% BUYBACK + AIRDROP removes it from circulation monotonically; it is never minted up
- distribution — fair launch: no presale, no team allocation, no insiders
- revenue — creator fees on every trade → 100% claimed and routed by the fixed split
- payout wallet — claim-and-fund mechanic: fees in, paid work + airdrop out, on-chain verifiable
remainders are assigned to the last bucket so the sum is exact. the conservation check returns true — provable on-chain.
routing 90% to humans, operations and the game across four lanes funds the growth engine; the 10% BUYBACK + AIRDROP removes supply from circulation every cycle. the work is the value accrual, and the airdrop pool compounds it. the split is fixed and public — not a governance promise.
ON-CHAIN TRANSPARENCY
every mechanic in this paper resolves to a real solana transaction. the treasury balance, the split, each payout, each airdrop — all readable on a public explorer. she doesn't trust, she verifies — and so can you. an end-to-end harness exercises the agent against a real chain and refuses to fabricate a single signature.
| mechanic | how it's verified | status |
|---|---|---|
| wallets | real addresses; airdrop target is a real holder-airdrop pool | verified |
| split 30/30/20/10/10 | conservation checked — sum == claimed, no lamport lost | verified |
| bounty lifecycle | logged forward-only transitions, terminal state approved | verified |
| payout (on-chain) | real transfer path proven; live at launch with real fees | at launch |
| BUYBACK + AIRDROP | real transfer-to-airdrop-pool path proven; live at launch | at launch |
| safety rails | floor · cap · compliance each blocked a real breach attempt | verified |
COMPLIANCE GUARDRAILS
an autonomous agent pointed at a treasury needs hard limits — and these aren't vibes, they're code that refuses. each rail was tested against a real breach attempt and blocked it. they read their thresholds from the live agent, not a mock.
treasury floor
she won't fund a bounty that drops the treasury below a hard floor. an oversized reward is REFUSED — she waits for fees rather than drain.
daily cap
a fixed ceiling on bounties per day. once the quota is hit, the next is BLOCKED until reset. no runaway spend.
approval gate
every proposed action passes a final approval check before execution. the core proposes; the gate decides. nothing skips it.
compliance filter
no price talk, no returns, no financial advice. hype/price-multiplier language is caught and BLOCKED on inbound and outbound text.
keys server-side
core keys, wallet keys — server-side only. never embedded in the site, never sent to a browser. the public surface holds no secrets.
payout-shaped wallet
the wallet's outbound paths are pay-a-runner and airdrop — a treasury built to fund work, on-chain verifiable.
all three rails gate correctly against a real breach attempt; the clean control line passes through. these read their thresholds from the live agent source — not a mock.
THE ALWAYS-ON INVARIANT
the system is designed around one standing promise: as long as the treasury has fees, the board has work. she sizes contracts to treasury health and keeps posting — flush means bigger contracts, lean means she waits rather than overspend. an empty board is a dead agent; keeping it full is the heartbeat.
for the consumer walkthrough, see how it works. for the why behind it all, read the thesis. for the deepest schematic and the proof harness, see the technical page.