The Safe

A treasury is locked behind fourteen shards held by twelve parties. Opening it requires signatures from a threshold of those shards. The threshold falls on a published schedule over forty-eight hours.

The pot is split among the shards that signed. Everyone else receives nothing.

The rule that matters

There is one rule and everything follows from it.

Only signers are paid.

If nine shards open the safe, those nine split the pot. The other five receive nothing. Not a reduced share. Nothing.

This makes waiting rational and dangerous at the same time. Every hour you wait, the threshold drops and the pot grows, so your slice would be larger. Every hour you wait, more coalitions become capable of opening the safe without you.

The schedule

The threshold begins at twelve of fourteen. At that level only two shards can dissent, so an open is close to impossible. It falls every few hours until it reaches two.

The threshold never rises. The schedule is fixed at deployment and cannot be changed by anyone, including the people who wrote it.

Why the pressure builds

At a threshold of twelve, almost no group can open the safe without any given holder. Every holder is close to essential.

At a threshold of six, hundreds of groups can. Most of them exclude you.

The number of coalitions that can open the safe without you is displayed on the front page at all times. It does not rise gradually. It goes vertical.

The leak

From hour thirty-eight, the treasury loses six percent of its value every hour. The leaked value is used to buy and burn the token.

Waiting stops being merely risky at that point and starts being expensive. The leak exists so that the game cannot end in a stalemate.

If nobody has opened the safe by hour forty-eight, the remainder is split equally across all fourteen shards. Nobody wins. Everyone recovers scraps. This is a failure state.

Pledges

A shard holder can publicly pledge to a coalition. The pledge is recorded on-chain and costs gas.

Pledges are not binding. A holder who has pledged to one coalition can sign for a different one. The contract does not read pledges when verifying an open.

Broken pledges are recorded permanently and displayed on the party's page. Reputation is the only thing holding a pledge together.

Cooldown

A shard cannot sign for three hours after it changes hands. Transfers themselves are never blocked — a shard can be bought and sold freely.

This exists to stop a single buyer quietly accumulating enough shards to open the safe alone. Accumulation is visible for hours before it becomes usable, which gives the rest of the table time to respond.

It also means the first three hours of the campaign are unsignable, because minting counts as a transfer.

How an open actually happens

Coalitions assemble privately.

Each participating holder signs a message committing to a specific set of token IDs and an expiry. The signatures are collected off-chain — by direct message, by group chat, by whatever means the coalition prefers. This site never holds them and never brokers them.

When one member has the full set, they submit a single transaction. The safe verifies every signature against the current owner of each shard, checks the count against the current threshold, and pays out.

There is no public counter of accumulating signatures. A coalition can assemble in complete secrecy and open the safe without warning.

Adding or removing any member invalidates every signature already collected. The signed message commits to the exact set. A coalition that changes its membership starts over from zero.

What can go wrong

A signature from a former owner. Signatures are checked against the owner at the moment of submission. If a shard is sold after signing, that signature is dead.

A shard in cooldown. The transaction reverts and names the offending token. Wait, or open without it.

An expired deadline. Signatures carry an expiry of at most thirty minutes. Collect and submit promptly.

Someone else opens first. There is no second place.

Who holds the shards

Twelve accounts, chosen and contacted before launch. They are public. Their negotiating happens in the open, on their own accounts, in front of their own audiences.

You can watch. You cannot vote.

For everyone else

Holding the token does not give you a shard or a say. It gives you a claim on the burn — the leaked value flows into buying and burning supply, so a long stalemate concentrates what remains.

The rest of what you get is the show.