Components
On Kaspa L1
Section titled “On Kaspa L1”The kUSDT covenant family
Section titled “The kUSDT covenant family”One genesis transaction creates the family: one BridgeMint and one TokenSeed, and no token balance. The
family’s covenant ID is kUSDT’s identity.
| Actor | What it is | Can | Cannot |
|---|---|---|---|
KCC20 |
The standard KCC-20 token state, unmodified | Move tokens with its owner’s approval | Change the total amount in a transfer |
TokenSeed |
The reference actor for empty receiving states | Create states with amount 0 | Create a non-zero amount |
BridgeMint |
The only issuer, a singleton | Mint for consecutive deposits with 3 of 5 signer signatures, within the rate limit and hard cap | Mint a deposit twice, skip ahead, exceed the cap, or act on fewer than 3 signatures |
Details: The kUSDT token family, BridgeMint.
The KasPool covenant family
Section titled “The KasPool covenant family”| Actor | What it is |
|---|---|
Pool |
A singleton. Its UTXO holds the KAS reserve, a fixed base deposit and the protocol’s accrued KAS. Its kUSDT reserve is one KCC20 state owned by the pool’s covenant ID |
Position |
One per liquidity deposit: a number of shares and an owner key |
The pool has an admin key that can collect the protocol’s share of fees, resume a paused pool and hand the admin and guardian keys on. It cannot touch the reserves. Before mainnet, the operator holds the admin key offline. Details: KasPool.
On Ethereum and BNB Chain
Section titled “On Ethereum and BNB Chain”KusdtVault
Section titled “KusdtVault”One vault per chain holds all the USDT locked on that chain.
| Can | Cannot |
|---|---|
| Take deposits and number them 0, 1, 2, … | Pay out without 3 valid signatures from current signers |
Pay a Kaspa burn once (release) |
Pay the same burn twice |
Return a skipped deposit once (refund) |
Pay more than the release allowance allows |
| Accrue fees separately from the backing | Let the owner withdraw backing |
Details: KusdtVault.
Vault owner
Section titled “Vault owner”On mainnet, an AccessManager whose admin is a Safe multisig (48-hour delays, about 6 hours for setGuardian and unpause, independent cancellers). It sets fees and limits within hard bounds, replaces the
signer set and the guardian, unpauses, and withdraws accrued fees (never more than feesAccrued). It cannot move
backing and cannot renounce ownership. See Governance.
Off-chain
Section titled “Off-chain”The signer and the coordinator are written (bridge/services) and have run together with the monitor on one machine
(see Run the simnet flow). For the public testnet (4 to 14
November 2026) they ran on one test host, in isolated containers; only the coordinator’s API and the monitor’s
read-only status were reachable from outside (see Operations). On
mainnet each signer runs on its own operator’s machine.
Signers
Section titled “Signers”Five independent signers, each on its own machine with its own Kaspa node and its own EVM RPCs. Each holds:
| Key | Signs |
|---|---|
| One Kaspa Schnorr key (x-only) | Mint digests and governance digests for BridgeMint |
| One EVM ECDSA key | EIP-712 Release and Refund messages for the vaults |
Every signer checks every request against its own nodes before signing. It also checks rules the vault cannot see: a release names the chain and address that the burn owner commits to, a refund pays the depositor, and nothing is paid to an address the token blocks (see Blocked recipients). Each signer also has its own fuse: it refuses to sign more than its configured daily limit per rolling 24 hours, for mints and for releases and refunds together.
Coordinator
Section titled “Coordinator”The coordinator collects signatures, submits transactions and serves status. It holds nothing that moves funds. A lying coordinator can stall the bridge; it cannot redirect funds, because every signature binds the exact recipient and amount and is checked on-chain.
Monitor and guardian
Section titled “Monitor and guardian”The monitor reads every chain from its own nodes and takes nothing from the coordinator. It checks INV-1, every mint against final deposits, every release against a kUSDT burn, refunds against skipped nonces, and governance. On any alarm, the guardian keys pause both vaults, the minter and the pool. The guardian can pause and has no other power. See The monitor and Guardian and pause.
Public API
Section titled “Public API”The coordinator serves the public API, including GET /reserves for INV-1. The web app’s Reserves page showed proof of reserves live on the public testnet (4 to 14 November 2026); on mainnet it is to be published live at launch. The URL is to be published on the Status page once the launch is verified.
On the user’s device
Section titled “On the user’s device”Web app and wallet extension
Section titled “Web app and wallet extension”The web app (bridge, swap, pool, reserves) and the wallet extension, both built (the web app is served at trestly.io for the mainnet launch, 14 November 2026; during the public testnet, 4 to 14 November 2026, it ran on testnet and a testnet wallet build could be downloaded), hold the user’s keys and sign locally. Both pin the deployment, meaning the kUSDT covenant ID and the vault addresses, so they cannot be pointed at a look-alike. See The wallet.