Docs

One seller, one buyer, one fixed price. No order book, no pool – the sale itself doesn't move a chart.

1. 01/List

   The seller deposits a fixed amount of a classic SPL token into an escrow account owned by the order. Price is fixed in SOL. Optional: expiry, and a single wallet that may buy (private deal).

2. 02/Fill

   A buyer pays the full price in one transaction. Fee to the vaults, the rest to the seller, tokens to the buyer – all at once or not at all.

3. 03/Cancel

   Until it is filled, the seller can cancel any active order and take the tokens back – also after expiry and while the protocol is paused.

Full fills only. Terms can't be edited after listing – cancel and list again.

The escrow program (otc-escrow) holds the listed tokens in an associated token account whose authority is the order PDA. Only two instructions can release them: fill_order and cancel_order.

What the contract does

• create_order moves the tokens into escrow and checks the escrow balance equals the offered amount.
• It copies fee rate, buyback share and vault addresses into the order (snapshot). Later config changes don't touch existing orders.
• fill_order pays fee, seller and buyer in one transaction and closes the escrow account.
• cancel_order returns the full escrow content to the seller and closes the escrow account.

Trust anchor is the program's upgrade authority: whoever can upgrade the program can change every rule. Accepted on devnet; before mainnet: multisig/timelock or immutable.

Rent: who pays, who gets it back

Order accounts stay as permanent records after fill or cancel. That is what makes this feed verifiable – and why the order rent is not refunded.

One protocol fee: 0.50 % (50 bps) of the price, paid by the seller, charged only on a successful fill. The buyer pays exactly the price shown.

fee     = floor(price × 50 / 10 000)
buyback = floor(fee × 7 000 / 10 000)   // 70 %
ops     = fee − buyback                 // 30 %, gets the rounding rest
seller  = price − fee

Example: 10 SOL

Fee snapshot: the rate stored in your order at listing is the rate charged at fill.

Fee vaults (devnet)

Plain system accounts that only receive SOL. The buyback vault collects SOL – no code buys or burns anything with it. There is no BlockDesk token.

Free actions (no protocol fee)

• Listing an order – only rent and network fee.
• Cancelling – also after expiry and during a pause; escrow rent comes back.
• Viewing orders and price comparisons.

A fill is a single Solana transaction. Either every transfer in it succeeds or none does – there is no state where the buyer paid and didn't get the tokens.

Inside one fill

• Buyback share → buyback vault, ops share → ops vault.
• Price minus fee → seller.
• Escrow tokens → buyer's token account (created if missing).
• Escrow account closed, rent → seller. Order status → Filled, with buyer and time.

TermsMismatch protection

The amount and price you saw on the deal page go into the signed transaction as expected values. If the order on chain doesn't match them exactly, the program rejects the fill with TermsMismatch – nothing is paid. This blocks bait-and-switch between seeing a deal and signing it.

Other checks before a fill

• Order active and not expired (now ≥ expires_at counts as expired).
• Private deal: only the allowed wallet. Sellers can't fill their own order.
• Escrow balance equals the offered amount – otherwise EscrowMismatch; the deal page disables buying and shows cancel only.
• Vaults equal the order's snapshot.

The app simulates every transaction before you sign and shows the program logs if it fails.

Read this before you trade.

Freeze authority

A classic SPL mint can have a freeze authority. If the issuer freezes the escrow account, both fill and cancel are blocked until it is thawed. The app warns on create and on the deal page; the program does not reject such mints.

Token-2022 unsupported

Only the classic Token Program. Token-2022 mints (transfer hooks, transfer fees) are rejected.

Estimates ≠ quotes

The DEX comparison is information, not an offer. The DEX exit is a Jupiter quote at request time, subject to slippage and MEV. The DEX buy cost is an estimate and is marked as one. Prices come from mainnet even on devnet.

Devnet only

BlockDesk runs on devnet. Devnet tokens and SOL have no value. No audit yet – no mainnet without audit, legal review and multisig.

No guaranteed profit

A lower price than on a DEX today says nothing about tomorrow. Nothing here is investment advice or a promise of return.

Upgrade authority

Whoever controls the program's upgrade authority can change its rules. Check the authority in the explorer.

You never need this site to get your tokens back. Any client that can sign a Solana transaction can call the program directly.

cancel_order (no arguments)

[95, 129, 237, 240, 8, 49, 223, 132]

seeds = ["order", maker, order_id as u64 little-endian]

Accounts, in order

Find your order: the deal URL is /deal/<maker>/<order_id>; or list the program's accounts with getProgramAccounts and filter on maker at byte offset 8.

The on-chain IDL is published with the program; fetch it with `anchor idl fetch <program id>`.

Addresses of this deployment. Verify them in the explorer before you sign anything.

Fee vaults