The token that
buys access,
not expectations.

The thesis

Most tokens ask you to believe something. OKTO asks you to check something.

Oktombo operates an autonomous trading system. The system publishes what it does, in real time, to everyone who holds an account — entries, stops, targets, outcomes, including the losses. OKTO is the instrument that allocates access to that platform: who gets in, at what depth, and with what priority when capacity is scarce.

The token does three things, and deliberately nothing more.

It unlocks. Membership tiers, feature access, the H60 engine, early access to new markets, and priority for the genuinely scarce resource: capacity slots. Holding thresholds define tiers; holding duration defines anchor standing.

It is consumed. Wallet registration and every wallet sign-in burn OKTO permanently — the signed burn is the proof the wallet is yours. Both burns are indexed to market capitalisation, so the cost of joining stays stable in fiat terms across the token's entire life. Email sign-in costs nothing, ever.

It is verifiable. Every burn, buyback and liquidity deposit is a public XRPL transaction. Each day's closing calculation is hashed and anchored on-chain before it is published. The chain of evidence runs from published trading accounts to published formula to published record to on-chain hash to executed transaction — end to end, checkable by anyone, requiring trust in nobody.

Supply falls when the platform is used. Liquidity deepens when the system earns. Both are automatic, daily, and public.

What OKTO is not

Token fundamentals

2.1 Supply and finality

One billion OKTO are issued once, at genesis, on the XRP Ledger. After the genesis distribution the issuing account is blackholed: the regular key is disabled and the master key permanently disabled, which makes further issuance cryptographically impossible. This is not a commitment that could be revisited — it is a state of the ledger, publicly verifiable by anyone, forever.

2.2 Why the XRP Ledger

Deterministic settlement in three to five seconds. Transaction costs measured in fractions of a cent, which is what makes a daily mechanism economically sensible rather than a quarterly one. A native decentralised exchange and automated market maker, so liquidity requires no external protocol. Native trustlines, which make holding explicit and auditable. And a consensus mechanism without mining, whose energy footprint per transaction is negligible.

2.3 Burn semantics

On the XRP Ledger, issued tokens returned to their issuing account are extinguished: the issuer's obligation is reduced and the tokens cease to exist. Because the issuing account is blackholed, tokens sent there can never be reissued or moved. Every burn in this document is destruction in that technical sense — not a transfer to an address someone claims to have lost the keys to.

2.4 Holding OKTO

Holding requires an XRPL trustline to the issuer, which reserves a small amount of XRP in the holder's account under standard ledger rules. Users who never intend to hold OKTO use Oktombo with email sign-in and never touch the ledger at all.

2.5 The issuer

OKTO is issued by Oktombo GmbH, Munich, Germany. The company operates the platform, holds the treasury, and executes the mechanisms described in this document. Commercial register details, the management board, the registered address and the contact route for enquiries and complaints are published in the legal area of the platform and kept current there.

The utility architecture

A utility token is only honest if the utility is specific, real, and the sole reason to hold it. Here is the complete list.

3.1 The scarce good is capacity

This is the foundation of the design. A trading system that publishes its signals has a natural capacity limit: the more accounts mirror the same entries, the more the edge degrades for everyone. Oktombo therefore operates with hard membership caps — a physical constraint of the product, not a marketing device. OKTO is how that finite capacity is allocated: by tier, by tenure, by priority.

This is the difference between a token that allocates something genuinely scarce and one that merely exists alongside a product.

The seat count is capped at 1,000 in Chapter 1 and 10,000 in Chapter 2, and both are ceilings rather than waypoints. A seat is kept by using it, by funding it once a managed connection exists, and by paying what is owed — and Sterling and above, from 0.5% of circulating supply, are exempt from the first two of those obligations permanently. That is the most concrete thing OKTO does: it converts a holding into standing that cannot be taken away by absence.

3.2 What each tier unlocks

The whole ladder in one view — closed trades open before running ones, and the slow engine opens before the fast one:

Model names are hidden at Sand and appear from Aqua. Every tier sees every trade exist — the ladder decides how deep each row opens.

3.3 Anchor standing: tenure over size

Thresholds alone reward whoever buys the most in a single moment. Anchor standing rewards duration. Bronze, silver and gold anchors accrue with uninterrupted holding time, and they act as the tie-breaker in capacity allocation, as a grace period when a balance dips below a threshold, and as the proposal right in governance at the top level. It is the deliberate counterweight to mercenary capital.

3.4 The fee model

Watching is free, for everyone, forever. Money changes hands only where the system works for you.

Ten percent of all platform revenue is routed to buyback-and-burn. The five percent is charged on realised net gains above the account's high-water mark — losses are earned back before another cent is owed. Every verified account holds Aqua: sight is free, work is priced, and the highest tier works for nothing.

And one thing this model deliberately does not sell: the trades themselves. The main account lives on a public chain at a published address — it has to, because the proof layer depends on it. Anyone can watch it raw and copy it by hand, carrying the lag, the slippage and none of the context; on the fast engine, that lag is the whole edge. What the chain never shows is attribution — which engine ran which trade lives off-chain, and the tier ladder prices that lens. What the chain never gives is simultaneous execution on your own account. That is the SaaS Trader, and it is the only thing that will ever cost money.

Distribution & release

4.1 Nothing unlocks on a calendar alone

The community allocation is released by delivered adoption, not by elapsed time. Each tranche carries a condition that is externally verifiable: member counts derived from on-chain registration burns, or a shipped milestone. A milestone that never ships releases nothing.

4.2 The working escrow — thirty percent that works

Three hundred million OKTO sit in four on-chain escrows from genesis. Two of them are conventional: the founder allocation vests monthly over forty-two months after a six-month cliff and is the only compensation the founder takes from the token; the community program escrow funds rewards and campaigns in quarterly tranches. The other two are the unusual part — and the reason this section exists.

Two conversion escrows, one hundred million OKTO each, are sold over time on purpose. The proceeds of the first buy HYPE, which is staked. The proceeds of the second become the trading capital of the system's main account. Selling treasury tokens is normally a red flag, so the rules below are written to be checked, not trusted.

4.3 Conversion rules — how treasury OKTO may be sold

• Throttled. Per calendar month, each conversion escrow may release at most 4 million OKTO or 10% of the trailing 30-day spot volume, whichever is smaller. At the maximum pace, each escrow takes just over two years to convert.
• Gated. No conversion executes while pool depth sits below the published floor, or while the price trades more than 20% below its own 30-day average. The treasury does not sell into weakness, ever.
• Executed quietly. Time-weighted execution across the whole month, or over-the-counter to buyers who accept a 12-month lock. Never a single market order.
• Announced and attested. Each month's conversion plan is published seven days in advance; each executed conversion appears in the daily attest with transaction links, purpose-tagged to its destination address.
• Purpose-locked. Proceeds of the HYPE escrow can only reach the published reserve route; proceeds of the capital escrow can only reach the published main trading account. The addresses are in the parameter book; any deviation is visible to anyone.
• Net-flow reported. Every month the pendulum balance is published: OKTO sold by the treasury versus OKTO bought back and burned by the engine and the reserve, side by side, cumulatively.

The Pendulum

The working escrow swings out exactly once — throttled, gated, public. What it buys swings back forever.

Both conversion escrows sell OKTO, and it would be dishonest to pretend that is not sell pressure. The design accepts a finite, rule-bound outflow in exchange for two permanent engines of inflow: trading capital whose realised profits feed the Daily Engine every day, and a staked HYPE reserve whose fee discounts raise every future profit and whose rewards split between compounding and buying OKTO back to burn. The outflow ends when the escrows are empty. The inflow never ends, and it grows with the capital it built.

5.1 Why the swing back outlasts the swing out

The comparison that matters is not size but shape. The outflow is a fixed quantity — two hundred million OKTO, ever — released under caps and gates, and then it is over. The inflow is a rate: a tenth of every day's realised net profit, plus half of every staking reward, for as long as the system trades. Rates beat quantities over time, and the rate itself grows, because ninety percent of profits remain in the trading capital, half the rewards compound the reserve — and two points of every day's engine flow buy HYPE directly, so the reserve grows from profits as well as rewards. The pendulum swings out once. It swings back every day after.

The outflow is a number. The inflow is a rate. Rates win.

5.2 The Reactor — the HYPE reserve

Oktombo trades perpetual futures on Hyperliquid, which grants fee reductions based on staked HYPE. A system executing tens of trades per day across nine or more markets pays fees on every single trade, forever. A permanent reduction in the fee rate is therefore a permanent improvement to the economics of every future trade — a compounding structural advantage rather than a one-off saving.

The HYPE conversion escrow, 100 million OKTO, funds the Reactor reserve. It is converted under the §4.3 rules and staked natively — natively, because the fee tiers attach to the account's own stake. Staking rewards split by rule: half compound the reserve, half buy OKTO on the open market and burn it.

And one rule closes the loop honestly: bought-back OKTO is burned — never re-escrowed, never resold. A treasury that re-sold what it bought back would place a permanent seller above its own market and quietly undo every burn it ever announced. The machine perpetuates through direct flows instead: profits compound the capital, profits and rewards grow the reserve, and the token itself only ever sees buying.

5.3 Hard rules for the reserve

• Never leveraged. Never lent. Never posted as collateral.
• Conversion executed in published tranches, never as a single market order.
• Reserve market value is reported in full, including drawdowns.
• Any unstaking is announced thirty days in advance, with the reason.

The Daily Engine

One rule, executed every day, with nothing left to discretion: ten percent of what the system actually earned goes to work — four points into liquidity depth, four into buyback-and-burn, two straight into the HYPE reserve.

6.1 Realised net profit — the binding definition

For each UTC day: the sum of realised profit and loss on all positions closed that day on the published system accounts, net of every cost — trading fees on both entry and exit, funding payments, and the direct operating cost of the trading system as a published daily fixed block. Slippage is inherent in realised profit and loss. Unrealised positions never count toward the calculation.

6.2 The high-water mark

Negative days accumulate. The engine runs only on profit above the highest cumulative level previously reached. A losing month followed by a recovery produces no buyback until the previous peak is exceeded — the mechanism cannot be fed by merely recovering lost ground.

The high-water mark is what makes the engine impossible to game.

6.3 The liquidity leg

Depositing XRP alone into the OKTO/XRP automated market maker increases depth on the side every buyer arrives from. For a user who needs OKTO to unlock a tier, the practical consequence is a smaller price impact when acquiring it.

Thin liquidity is the most common reason a utility token fails at its actual job — becoming expensive and erratic exactly when demand for access rises. This leg addresses that directly, permanently, and daily. The resulting LP position stays with the treasury under a 24-month lock, after which any change passes through the governance process.

6.4 The burn leg

• Purchases are sliced across the following day using a time-weighted average, with published parameters — never a single market order.
• Every purchase and every burn transaction is linked in the daily record.
• Burned tokens go to the blackholed issuer and cease to exist.
• When daily liquidity is too thin for the slice size, the amount carries to the next day and the carry is disclosed. We do not push a market to make a number look good.

6.5 Every flow in the economy

Consumption burns

The mechanism that makes OKTO a credit rather than a certificate: to sign in through the wallet door, you spend the token.

7.1 The problem with fixed burns

A burn fixed at a token amount becomes trivially cheap when the price falls and prohibitively expensive when it rises. The more successful the platform, the more it excludes newcomers — a design failure dressed as tokenomics. Oktombo indexes the burn to market capitalisation instead, so the cost of joining stays stable in fiat terms across the token's entire life.

7.2 Where burns apply

The burn is the price of the wallet door. Email is free forever.

The two doors are a choice, not a hierarchy. Sign in with email and nothing ever burns — registration, sessions, all of it, permanently. Sign in with the wallet and every session burns: the signed transaction is simultaneously the cryptographic proof that the wallet is yours, and its cost belongs to whoever chooses that door. Tier standing is independent of the door — it is read from the linked wallet at every sign-in either way, and reading costs nothing. The mechanism keeps bot-farmed accounts expensive while keeping genuine access free — and every token it consumes is destroyed, which means the platform's own growth is the most reliable source of supply reduction in the entire economy.

Supply dynamics

8.1 The self-adjusting property

Because tier thresholds are defined as a share of circulating supply, burns do more than reduce a number: they raise the absolute holding required for every tier over time. A member whose balance stays untouched holds a proportionally larger share of a smaller supply as the years pass. Standing accrues to those who stay.

8.2 The honest shape of the early years

Vesting unlocks and adoption tranches are large and front-weighted, while burns scale with registrations and trading results that begin small. Circulating supply therefore expands in the early phase. The mechanisms in this document are built for the decade, not the first quarter, and the daily record shows exactly where the balance stands at any moment.

The Attest Loop

The trading happens on one venue. The token lives on another. Bridging that gap with a claim would be worthless, so we bridge it with a hash.

9.1 Published every day

• The aggregate realised result, and each cost block separately.
• The high-water-mark state before and after.
• The ten percent amount and each of its three legs.
• Transaction links: the XRP deposit, the OKTO purchases, the burn.
• Running totals: OKTO destroyed to date, XRP added to pool depth to date.

On days without profit the record still publishes, stating zero. A mechanism that only reports its good days is not a proof system.

The 999

999 unique pieces on the XRP Ledger, minted at a flat five XRP with random allocation, across nine material families — from the single Obsidian Genesis piece to the four hundred of the standard edition. Before the first mint, a single SHA-256 hash over the complete metadata of all 999 pieces is published, which proves that every property of every piece was fixed before anyone could mint. Rarity cannot be shifted afterwards by anyone, including us.

Thirty percent of mint proceeds flow directly into OKTO/XRP liquidity at a published address. Utility is sealed rather than announced: the hashes of several written utility chapters are published at mint, and a seal is opened only once its function has shipped — at which point anyone can verify it was written from the start. Sterling combined with one of The 999 unlocks the SaaS prototype for the entire build era — the first autonomous execution that exists at all.

Governance

Advisory, from Aqua upwards, with double weight at Pearl and above and a proposal right for the longest anchor standing. All voting happens in the Oktombo cockpit — no external tooling, no separate platform. Voting weight is read from the ledger at a snapshot, and results are published together with the reasoned decision that follows them.

11.1 What governance covers

The parameters of the flows in §6.5, the release cadence within the constraints of Part 04, the timing of feature openings, and the use of the community allocation.

11.2 What governance never covers

Trading logic, model behaviour, risk limits, security, and legal obligations. These are not community decisions and never will be. No vote can instruct the system to take more risk.

11.3 Changing the Daily Engine

Any change to the ten percent rate or its 4-4-2 split requires publication of the proposal with reasons, a thirty-day notice period, an advisory vote, and a final reasoned decision recorded in the daily statement. The engine is an operating policy of the treasury, and holders acquire no legal claim to its continuation.

Risk disclosure

Every mechanism in this document operates in markets. Markets are uncertain. These are the risks a holder carries.

Regulatory information

13.1 The offeror

Oktombo GmbH, Munich, Germany, offers OKTO and is responsible for the content of this whitepaper. Register details, management and registered address are published in the legal area of the platform.

13.2 The crypto-asset

OKTO is a utility token issued natively on the XRP Ledger. The rights it conveys are limited to access to the Oktombo platform, standing within its tier system, and participation in advisory governance. OKTO conveys no claim against the issuer, no interest, no dividend, no share of profits, no participation in the company, and no right of redemption. There is no obligation on any holder to contribute further funds.

13.3 The project and the use of proceeds

Oktombo operates an autonomous trading system and the platform that publishes its activity. The liquidity allocation establishes and maintains the OKTO/XRP market. Community allocations fund referral rewards, liquidity incentives, campaigns and contributor grants. The working escrow funds, through rule-bound conversions, the staked HYPE reserve and the trading capital of the system's main account; founder compensation and community programs vest from the same escrow on published schedules. Conversion proceeds serve no other purpose.

13.4 Rights and obligations of holders

OKTO is acquired on the open market. Holding requires an XRPL trustline. Tier standing is dynamic and follows both the holder's balance and circulating supply; a balance falling below a threshold enters a grace period, extended by anchor standing, after which standing adjusts. Burns arise only at the wallet door — wallet registration and wallet sign-ins; email access never burns.

13.5 Technology

XRP Ledger consensus, native trustlines, escrow-based vesting created at genesis, permanent disabling of the issuing account, and the daily attestation described in Part 09.

13.6 Sustainability

The XRP Ledger reaches consensus without mining. Energy consumption per transaction is negligible by comparison with proof-of-work systems, and the quantitative indicators required under the applicable technical standards are published alongside this document in the legal area of the platform.

13.7 Complaints

Complaints are submitted through the contact route in the legal area of the platform. Receipt is acknowledged, the matter is examined, and a reasoned response is provided within the period stated there.

13.8 Statements

This whitepaper has not been approved by any competent authority in any Member State of the European Union. Oktombo GmbH is solely responsible for its content. All marketing communications relating to OKTO are fair, clear and not misleading, are identifiable as marketing communications, and are consistent with this whitepaper.

The parameter book

Every number in this economy, in one place.

FAQ & glossary

Frequently asked

Glossary