Token
$SEALROOM is Sealroom's token. Its supply is fixed, all of it went to one public launch, and the protocol's share of every distribution buys it on the market and burns it.
The facts
| $SEALROOM | |
|---|---|
| Supply | 1,000,000,000, fixed |
| Launch | 100% to one public launch on equal terms |
| Allocations | None: no presale, team, investor, airdrop or reserved allocation |
| Vesting | None |
| Protocol fee share | All of it buys $SEALROOM on the market and burns it |
Where the buyback comes from
Every paid call puts USDC into a lane vault. When anyone runs distribute on that lane, the protocol fee comes off the top, 500 bps at launch, and goes into the buyback vault; the rest pays the model's split (Fees and distribution). The buyback vault is the USDC account of a program address that no key controls, and the program gives it exactly one way out.
How a buyback runs
buyback_swap_and_burn is that way out. In one instruction the program:
- moves the chosen amount of USDC out of the buyback vault into a Jupiter swap to $SEALROOM, signing for its own vault, so the USDC never passes through anyone's wallet;
- checks that the swap returned at least the minimum the keeper quoted;
- burns every $SEALROOM token the swap returned, and adds the USDC spent and the tokens burned to the running totals.
If any step fails, all of them roll back together and the USDC stays in the vault. Only the configured buyback authority, the protocol's keeper, can start a buyback, and it never holds the funds. The keeper runs it whenever the vault holds at least its threshold and Jupiter has a route.
So the buyback grows with paid inference itself. For example, a lane that distributes 25 USDC at 500 bps sends 1.25 USDC into the buyback vault, and all 1.25 USDC is spent on $SEALROOM that is then burned.
GET <api-url>/v1/parameters returns buyback with the vault, its balance, the USDC spent so far and the tokens burned so far; GET <api-url>/v1/summary returns burnedTotal, and every buyback appears in the activity feed as buyback_burned.
The live fee is protocolFeeBps in the same parameters. A change to the fee waits 48 hours after it is proposed, and pendingProtocolFee shows it while it waits.
What stays in USDC
$SEALROOM sits on the fee side of the protocol. Everything a caller, owner or operator does is priced and settled in USDC, so using Sealroom never requires holding $SEALROOM:
| Action | Paid in |
|---|---|
| A call | USDC over x402 |
| An operator's bond | USDC, so a slash pays the owner in the unit its calls were priced in |
| A dispute deposit | USDC |
| A payout to the owner, operator and contributors | USDC |
| Network fees and rent | SOL |
Key release depends only on the six checks: attestation, platform, GPUs, runtime, operator and evidence. No token, $SEALROOM or any other, is accepted as bond collateral or used to gate a key release.