PDF · Images · Documents · JSON — any real-world asset
Blockchain Notarization Certificate
Asset Packages
Each package groups assets into a tokenization bundle — becomes its own smart contract.
Contract Configuration
The generated contract will import AggregatorV3Interface, take the feed
address as a constructor argument (never hardcoded), and revert on stale or non-positive
answers — the check most integrations skip.
Generated Solidity Contract
Compiler Output
READY TO DEPLOYNo Remix round-trip needed.
solc runs in your browser. OpenZeppelin and Chainlink imports are fetched from the npm CDN at
compile time. Nothing is sent to a server. A contract that compiles is valid Solidity —
it is not necessarily safe Solidity. Run the AI Audit, then a human auditor.
AI Security Audit
Scans for reentrancy, overflow, access control, flash loan exploits, front-running, and 12+ vulnerability classes.
Audit Report
Flash Loan Calculator
Calculate exact fees, minimum profit thresholds, and required price spreads before building your flash loan strategy.
Loan Value
$100,000
in USD equivalent
Protocol Fee
$50.00
0.05% of loan
Gas Estimate
~$22.80
Polygon: ~$0.50
Min Profit
$72.80
fee + gas breakeven
Required Spread
7.3 bps
basis points across DEXes
Loss ZoneBreakeven: 7.3 bpsProfit Zone
Generated Flash Loan Contract
Chainlink Data Feeds
Live prices read straight from Chainlink's on-chain aggregators via latestRoundData().
No API key and no backend — this is a direct eth_call against a public RPC node.
Feeds refresh every 60 seconds and feed the Flash Loan Lab automatically.
Idle
Not connected. Click Connect to Chainlink to read live feeds.
Staleness is checked, not assumed. A Chainlink feed that stops updating keeps
returning its last answer indefinitely — it does not revert. Every feed above is compared against
its heartbeat and flagged STALE if it has gone quiet.
Any contract you deploy must perform this same check on-chain.
What Chainlink can and cannot do here. These feeds give you a real, decentralized
reference price — which is exactly what the Flash Loan Lab needs for honest loan sizing and
profit math. They do not give you per-DEX quotes, so they cannot by themselves detect a
cross-DEX arbitrage spread. Real spread detection requires querying each DEX's quoter contract
(Uniswap V3 Quoter, Curve pools, etc.). The Arb Scanner is still a simulation — it is now
anchored to a real Chainlink price, but the spreads between venues remain modeled, not observed.
Only feeds with verified addresses ship in this build (ETH/USD, BTC/USD, LINK/USD on Ethereum mainnet).
Add more from the official registry at docs.chain.link/data-feeds/price-feeds/addresses.
A wrong feed address will not throw an error — it will silently return the wrong price.
Simulation. Base prices are anchored to live Chainlink feeds when the oracle is connected,
but the per-DEX spreads are modeled, not read from Uniswap or Curve. Use this to size opportunities and
test strategy logic — not as a trading signal.
Live DEX Arbitrage Scanner
Monitors price spreads across Uniswap V3, SushiSwap, Curve, and more. Updates every 3 seconds.
Paused
Pair
Uniswap V3
SushiSwap
Curve
Spread
Status
Start scanner to see live prices
! Simulated price feeds for demonstration. Integrate with on-chain oracles (Chainlink, Uniswap V3 TWAP) in production.
Detected Opportunities
Start scanner to detect opportunities
Browser-Based Contract Deployment
! Wallet not connected — to enable deployment
Deploy directly from this browser using MetaMask. The fastest path: generate a contract, hit Compile in the Contracts tab, then Send to Live Deploy — the ABI and bytecode land here automatically. Pasting from Remix or Hardhat still works.
No Remix round-trip required. solc now runs in this browser.
1
Compile your contract
Go to Remix IDE → Solidity Compiler tab → Select 0.8.20 → Click Compile. Or use npx hardhat compile in your project.
2
Copy ABI (optional but recommended)
In Remix: after compiling, click the clipboard icon next to ABI. Paste it below. Enables function interaction after deploy.
3
Copy Bytecode
In Remix: click the clipboard icon next to Bytecode. Paste the "object" field value below (starts with 608060...).
4
Deploy via MetaMask
Click Deploy Contract below. MetaMask will prompt you to confirm the transaction with gas fee estimate.
Paste an ABI above (or compile) and the required arguments appear here.
Deployment Status
Status
Initializing...
Tx Hash
—
Contract Address
—
Publish Source for Transparency
The Federal Reserve's tokenized-bond study found source-code availability to be the single
most important factor for on-chain transparency — a verified contract can be read and
audited by anyone; an unverified one is opaque bytecode. For any tokenized asset intended for
institutional counterparties, verification is a transparency obligation, not an optional step.
Deployed Address
—
Delivery-versus-Payment Settlement
Delivery-versus-payment (DvP) is the core settlement primitive for tokenized securities:
the security changes hands if and only if payment does — atomically, in a single transaction.
If either leg fails, the whole transfer reverts and neither party is left exposed. The Federal Reserve's
study observed exactly this in the Santander tokenized bond: one function moved bond tokens to the investor
and cash tokens to the issuer in a single call, making delivery contingent on payment on-chain.
Buyer holds stablecoin
settleTrade() atomic · same block
Seller holds security token
Compliance gate first. Before either leg moves, a canSettle(buyer, seller)
hook must approve the trade — the permissioned-token model from Tokeny's T-REX framework, where a validator
checks KYC/AML eligibility before any transfer of a regulated security is allowed. A security token that
transfers without this check is not compliant, regardless of how clean the settlement logic is.
Atomic Settlement Simulator
Model the all-or-nothing logic. Toggle each precondition and see whether the trade settles or reverts —
the same checks the generated contract enforces on-chain.
Atomic settlement solves settlement risk — the risk that you deliver and the other side doesn't pay.
It does not solve legal settlement finality, which depends on your jurisdiction recognizing on-chain
transfer as legally final, nor does it replace a transfer agent or custodian where one is legally required.
Those are legal determinations, not contract logic.
Contract Library
Every contract the studio generates is archived here on the server with its SHA-256 fingerprint and timestamp — a chain of custody you can point an auditor or counsel at. Open one to reload it into the editor, or remove it.
Deployed Contracts
0
Contracts
0
Networks
1
Session
No deployed contracts yet. Deploy a contract to track it here.
Step-by-Step Deployment Guide
Export Full VS Code Project
Download a complete Hardhat project with your contract pre-installed. Open in VS Code, run install, deploy in minutes.
Project Structure
contracts/MyToken.sol
scripts/deploy.js
test/MyToken.test.js
hardhat.config.js
package.json
.env.example
.gitignore
README.md
Quick Start After Download
npm installcp .env.example .env # add your keysnpx hardhat compilenpx hardhat run scripts/deploy.js --network sepolia
✓ Files downloaded! Open folder in VS Code → run npm install
Recommended VS Code Extensions
Solidity by Nomic Foundation
Syntax highlighting, linting, completion
Essential
Hardhat for VSCode
Task runner & Hardhat integration
Recommended
DotENV
.env file syntax highlighting
Recommended
Prettier
Auto-formats Solidity & JS
Optional
Digital Settlements — Complete Operations Manual
A learning and prototyping guide to tokenizing real-world assets, constructing flash loan strategies, auditing smart contracts, and deploying on-chain. Grounded in Federal Reserve TechLab research (Watsky et al., 2024), the DTCC/Clearstream/Euroclear Digital Asset Securities Control Principles (DASCP, May 2024) and "Advancing the Digital Asset Era, Together" (Sept 2023), and Tokeny's Tokenized Securities handbook.
ℹ This platform is a prototype and educational reference tool. It is not affiliated with, endorsed by, or a product of DTCC, Clearstream, Euroclear, the Federal Reserve, or the U.S. Treasury. It does not itself satisfy any regulatory, legal, or audit-trail requirement — see Phase 10.
Each phase builds on the previous. Complete them in order for your first deployment. Experienced users may jump between phases as needed.
0
Prerequisites & Environment Setup
Must complete before using any platform feature
Do First
Skip nothing here. Missing any prerequisite will block deployment and waste time debugging environment issues.
Install MetaMask browser extension from metamask.io — Chrome, Firefox, Brave, or Edge
Create MetaMask wallet → write down your 12-word seed phrase on paper → store offline in a safe location
Use our Uniblock key for RPC — one key covers every chain via api.uniblock.dev.
Alternatively: create a free Alchemy account at alchemy.com for RPC access
Register for a free Etherscan API key at etherscan.io/apis (needed for contract verification)
Install Node.js v18+ from nodejs.org — choose the LTS version
Verify in terminal: node --version should print v18.x.x or higher
Get Sepolia testnet ETH from sepoliafaucet.com (free, takes 30 seconds)
For Polygon mainnet flash loans: you need real MATIC for gas (~$0.01–0.05 per transaction). Get MATIC from any major exchange and send to your MetaMask address.
1
Connect Wallet & Select Network
Link MetaMask and choose your target blockchain
1
Click Connect Wallet in the top-right header. A modal dialog will appear with wallet options.
2
Click MetaMask. Your browser will show a MetaMask popup asking permission to connect. Click Connect, then Next, then Confirm.
3
The wallet button turns green and shows your address (e.g., 0x1234...abcd) and ETH balance.
4
Click a network pill in the header bar to choose your chain. For testing: Sepolia Testnet. For production: Ethereum Mainnet or Polygon PoS (lower fees).
5
If MetaMask doesn't have Sepolia: go to MetaMask Settings → Networks → Add Network → search "Sepolia" or use chainlist.org.
ℹ Network selection affects which chain the Deploy Guide, Live Deploy, and Etherscan links target. Flash loan fees also differ by network — Polygon transactions cost ~100x less than Ethereum.
2
Upload & Notarize Assets
Create on-chain hash certificates for real-world documents
1
Navigate to the Asset Upload tab. Drag and drop your files — or click the upload zone to browse. Accepts PDF, PNG, JPG, DOCX, JSON, TXT.
2
Each uploaded file generates a SHA-256 hash — a unique digital fingerprint that can prove the document existed unchanged at this timestamp.
3
A Blockchain Notarization Certificate appears below the upload zone. This certificate contains: filename, file size, SHA-256 hash, IPFS-style content ID, and timestamp.
4
Click Export Certificate to save the certificate as a .txt file. Store this alongside the original document as proof of existence.
5
Click Create Package to bundle the uploaded assets together. This creates a tokenization bundle ready for smart contract generation.
For RWA (Real-World Asset) tokenization: upload your legal documents (deeds, contracts, certificates) first to create an immutable on-chain record before minting tokens. This follows the Fed TechLab's recommended off-chain/on-chain integration approach.
! The notarization certificate proves the hash of a document — it does not constitute legal notarization. For legally binding tokenization, consult your legal counsel and jurisdiction-specific securities regulations.
3
Generate Smart Contracts with AI
AI produces production-ready Solidity code for any instrument type
The platform supports five contract types. Choose the one that matches your use case:
ERC-20 Token
Fungible token with mint, burn, pause, roles. Use for: currencies, governance, fractional ownership.
ERC-721 NFT
Non-fungible token with URI storage. Use for: unique assets, property deeds, certificates.
Flash Loan
Aave V3 IFlashLoanSimpleReceiver with callback, repayment logic, and profit routing.
RWA Token
Asset-backed ERC-20 with on-chain registry, KYC whitelist, and fractional redemption.
Multisig Vault
M-of-N multi-signature treasury with time locks, proposal queue, and veto capabilities.
1
Go to the Contracts tab. Click your contract type pill at the top.
2
Fill in Token Name (e.g., "PropToken"), Symbol (e.g., "PROP"), and Total Supply (e.g., 1,000,000).
3
Write a description of your asset in the text box. The more specific you are, the better the AI tailors the contract. Example: "Fractional ownership token for a commercial real estate property located in Miami, FL. Each token represents 0.0001% ownership. Restricted to KYC-verified investors."
4
Click Generate with AI. The AI will produce complete, commented Solidity code in 5–15 seconds.
5
Review the generated contract. Key things to check: constructor parameters, access control roles, token amounts (check decimal handling), and any placeholder addresses.
ℹ All generated contracts use OpenZeppelin v5 libraries (the industry standard), Solidity ^0.8.20, MIT license, and full NatSpec documentation. Flash loan contracts implement Aave V3's IFlashLoanSimpleReceiver interface.
4
AI Security Audit
Scan for vulnerabilities before deployment — never skip this
1
After generating a contract, click Run Audit (or navigate to the AI Audit tab manually).
2
The AI auditor scans for 12+ vulnerability classes including: reentrancy attacks, integer overflow, access control flaws, front-running, unchecked external calls, delegatecall risks, flash loan exploits, and oracle manipulation.
3
Review findings: ✕ Errors are blocking — fix before deploying. ! Warnings are risks to mitigate. ✓ OK items passed checks.
4
For any Error finding: go back to the Contracts tab, describe the fix needed in the description field, and regenerate. Or edit the code directly and re-audit.
The AI audit is a first-pass screening, not a professional security audit. For any contract handling real funds over $10,000, engage a professional auditor: CertiK, OpenZeppelin, Trail of Bits, or Halborn. The Santander and EIB tokenized bonds referenced in this platform both underwent institutional-grade security review before deployment.
5
Flash Loan Strategy Configuration
Calculate profitability thresholds before building your arbitrage contract
Flash loans are uncollateralized loans that must be borrowed and repaid within a single blockchain transaction. If you can't repay with profit, the entire transaction reverts — making them risk-free in isolation, but requiring precise math.
1
Navigate to the Flash Loan Lab tab.
2
Select your Lending Protocol: Aave V3 (0.05% fee, best liquidity), Balancer V2 (0% fee, limited tokens), or Uniswap V3 (0.05%, widest pair support).
3
Choose your Borrow Token and enter the Loan Amount. Typical flash loans range from $10,000 to $10,000,000 USDC.
4
Read the Calculator Output: your required profit must exceed the Protocol Fee + Gas Estimate. The Required Spread in basis points is what you need to find across DEXes.
5
Click Generate Flash Loan Contract — AI will build a complete Aave V3 flash loan receiver with your specified token and profit routing logic.
6
Run the generated contract through the AI Audit before deployment.
Polygon PoS dramatically reduces gas costs for flash loans (~$0.05–0.50 vs $20–50 on Ethereum mainnet), lowering your required spread from ~7 bps to <1 bp — making more opportunities profitable. The flash loan contracts work identically on both chains.
! Flash loan arbitrage is competitive. MEV (Maximal Extractable Value) bots monitor the mempool and can front-run your transactions. On Ethereum mainnet, consider using Flashbots bundles. On Polygon, use private RPC endpoints.
6
Arbitrage Opportunity Detection
Monitor DEX price spreads to find executable opportunities
1
Navigate to the Arb Scanner tab.
2
Click ▶ Start Scanner. The table will populate with live simulated prices across Uniswap V3, SushiSwap, and Curve for four trading pairs.
3
Set your Minimum Spread (default 9 bps — covers Aave V3 fee + gas on Ethereum). For Polygon, set it to 2–3 bps.
4
When a spread exceeds your threshold, an Opportunity Card appears in the panel below — showing which DEX to BUY from and which to SELL on.
5
Click Build Flash Loan on an opportunity card to pre-fill the Flash Loan Lab with that pair's parameters, then generate the contract.
ℹ The scanner uses simulated prices for demonstration. For production: integrate with Uniswap V3 on-chain price feeds (slot0 sqrtPriceX96), Chainlink oracles, or a backend Node.js service querying DEX subgraphs via The Graph protocol.
7
Deploy Your Contract
Three paths to deployment — choose based on your setup
Path A: Live Deploy Tab
Compile in Remix → paste ABI + bytecode here → deploy via MetaMask. Fastest path.
Path B: Remix IDE
Browser-based, no installation needed. Best for beginners and quick testing.
Path C: Hardhat CLI
Professional pipeline with testing, verification, and CI/CD. Best for production.
Path A — Live Deploy Tab (Recommended for this platform):
1
Go to Contracts tab → Generate your contract → Click Run Audit → Fix any errors.
2
Open Remix IDE at remix.ethereum.org in a new tab. Create a new .sol file and paste your contract code.
3
In Remix: Solidity Compiler tab → select 0.8.20 → click Compile. Wait for green checkmark.
4
In Remix: after compile → click ABI copy icon → paste into Live Deploy tab's ABI field. Click Bytecode copy icon → paste the hex value into the Bytecode field.
5
Return to this platform → Live Deploy tab → click Deploy Contract. MetaMask will open — review gas fee and click Confirm.
6
Wait 15–30 seconds for Sepolia confirmation (2–5 mins for Ethereum mainnet). The contract address appears when confirmed.
7
Click View on Etherscan to verify your deployment. Click Add to Portfolio to track it here.
Always test on Sepolia first. If the Sepolia deployment works exactly as expected, re-run the same steps with Ethereum Mainnet or Polygon selected. Never deploy untested code to mainnet.
8
Contract Verification & Source Publishing
Make your contract's source code publicly visible on Etherscan
1
Navigate to Deploy Guide tab → Hardhat path → Step 7: "Verify on Etherscan".
2
Add your Etherscan API key to your .env file: ETHERSCAN_API_KEY=your_key_here
On Etherscan, your contract will now show a green ✓ Contract Source Code Verified banner. Users can read the code and interact with functions directly.
ℹ Per Federal Reserve TechLab research (Watsky et al., 2024): the EIB bond token's verified source code on Etherscan was critical for transparency — enabling researchers to audit the permissioning structure, role-based access controls, and DvP settlement logic. The Santander bond was NOT verified, severely limiting transparency. Always verify.
9
Portfolio Management & Monitoring
Track deployed contracts and monitor on-chain activity
1
After each deployment, click Add to Portfolio in the Live Deploy tab, or manually add via the Portfolio tab.
2
For each contract, set up Etherscan Alerts: go to the contract's Etherscan page → click "More Options" → "Alert Me" → enter your email. You'll get notified of every transaction.
3
For flash loan contracts: fund them with a small amount of ETH for gas (0.05 ETH minimum) then execute your first arbitrage call.
4
Monitor for MEV attacks: if your arbitrage transactions are consistently failing, check if they're being front-run. Consider using Flashbots Protect RPC on Ethereum.
For RWA token contracts: once deployed, you can call mint() to issue tokens to investor wallets. Keep a private ledger (off-chain spreadsheet or database) mapping token holders to their legal rights — matching the Fed TechLab's finding that off-chain processes are essential for complete asset tokenization.
10
Regulatory Compliance & Legal Framework
Federal Reserve, Treasury, and securities law considerations
This section is critical. Deploying tokenized securities without proper legal structure exposes you to SEC enforcement action. Consult legal counsel before any public token offering.
Key Regulatory Frameworks:
Fed TechLab Research
Watsky et al. (2024): Smart contract bytecode alone lacks transparency — always verify source code. Permissioning via role-based modifiers is the institutional standard.
Treasury Directive 87-05
Interim Treasury bureau guidance on e-commerce security, digital signatures, and record-keeping. It predates blockchain and does not reference smart contracts — a project's ledger doesn't "satisfy" it automatically. Treat it as a useful analogy for record-keeping rigor, not a compliance checkbox.
DASCP (DTCC/Clearstream/Euroclear, May 2024)
The Digital Asset Securities Control Principles are a published industry framework — not a legal standard — proposing controls around custody, governance, interoperability, and resilience for tokenized securities across market infrastructures. Useful as a design checklist, not a certification.
SEC Howey Test
If your token: (1) involves investment of money, (2) in a common enterprise, (3) with expectation of profit, (4) from others' efforts — it's likely a security and subject to SEC registration or exemption.
Investment Company Act of 1940
A pooled fund of tokenized assets (e.g., a basket ERC-20 backed by securities) can trigger Investment Company Act registration requirements, separate from whether the token itself is a "security" under Howey. Structure and counsel review matter here too.
Reg D / Reg S / Reg A+
Common exemptions for tokenized securities: Reg D 506(c) for accredited investors, Reg S for offshore offerings, Reg A+ for up to $75M public offerings with simplified disclosure.
Implement KYC/AML whitelist in your RWA token contract (placeholder provided by AI)
Engage securities counsel to structure offering under appropriate exemption
Follow SG-Forge's CAST framework for institutional-grade compliance architecture
Maintain off-chain cap table and investor accreditation records
Ensure token transfer restrictions are enforced at the smart contract level (transfer() checks whitelist)
File required notices (Form D for Reg D) within 15 days of first sale
For flash loan arbitrage: understand wash trading rules and market manipulation prohibitions
ℹ The Santander 2019 and EIB 2021 tokenized bonds (the two case studies in Federal Reserve TechLab research) both structured issuances with strict whitelisting: only approved institutional wallets could receive tokens, with KYC/AML checks conducted off-chain before any wallet was approved on-chain. This two-layer compliance model is the current institutional standard.
ℹ Tokeny's Tokenized Securities handbook (2019) frames compliance as a lifecycle: identity/whitelist setup before any token exists, transfer-rule enforcement at every movement, and a corporate-actions layer (redemption, forced transfer for legal orders) most teaching examples skip. The industry paper "Advancing the Digital Asset Era, Together" (DTCC/Clearstream/Euroclear, 2023) and the related collateral-infrastructure whitepaper make a related point about market plumbing: tokenization's biggest near-term value is in intraday collateral mobility and repo, not novel token mechanics — a useful reality check against over-indexing on flashy DeFi features when the audience is an institutional balance-sheet function.
What to Do Next:
Engage securities counsel and structure your token under an appropriate exemption
Have your contract professionally audited before handling real funds
Deploy to testnet → verify all functions → test with test wallets
For flash loans: paper-trade several arbitrage cycles before deploying capital
Set up Etherscan alerts, Tenderly monitoring, and an incident response plan
Join Aave, Uniswap, and OpenZeppelin governance forums for protocol updates that may affect your contracts
Digital Settlements · Powered by Claude AI · Grounded in Federal Reserve TechLab Research (Watsky et al., 2024) · Not legal or financial advice