Contracts and chains
The contracts behind drops, escrow and bonds, and the network they run on.
Network
| Item | Value |
|---|---|
| Chain | Base Sepolia (test network, private beta) |
| Token standard | ERC-721 (drops), ERC-2981 royalties |
| Gas | Paid by xnft.money — collectors and creators never need ETH for a purchase |
| DropFactory | 0xbbf726bcc6eb08c1dfce5f0fe4716a0c7bf7f1d4 |
| XnftVault | 0x54c6DFB71ff30F095B0e559A962949187E63619a |
These are test-network contracts for the private beta. The contracts will be audited before they are deployed on Base.
Drop contracts
Every drop is its own XnftDrop contract (ERC-721A with ERC-2981 royalties), created by our DropFactory and owned by the creator.
- The creator is the owner; our relayer is only the minter. The owner can revoke the minter or pause minting at any time.
- The contract remembers every order it minted, so an order can never be minted twice; up to 5 editions per order.
- Limited editions have a fixed cap that can’t be exceeded or changed.
- Metadata can be frozen by the owner; blind drops can be revealed only with the committed reveal.
- Each token’s seed is derived on-chain from the payment, the order and the previous block.
A PFP collection is an XnftCollection contract from our CollectionFactory: the same roles and order checks, plus an item per token. Instant collections draw each token’s item on-chain at mint; blind ones are sealed at close and revealed with an offset from a later block’s hash, only with the folder committed at deploy. Both carry the provenance hash and collection metadata (ERC-7572) for marketplaces.
Escrow vault
XnftVault holds NFTs listed for resale.
- An NFT can only leave the vault to its seller or to the buyer holding the reservation.
- A checkout reserves the deposit for one buyer for at most two and a half hours, signed by a dedicated key.
- Releases need a signature from that key and are rate-limited per collection.
- The seller can withdraw any deposit that isn’t reserved — even while the vault is paused.
SellerCredit
SellerCredit holds creators’ refund bonds and prepaid fee credit in USDC.
- A fee can be settled once per order and a refund paid once per refund, within per-transaction and hourly limits.
- Bond withdrawals have a 4-day delay so refunds still owed can be paid; withdrawals always work, even while paused.
- The contract always holds at least as much USDC as it owes.
The relayer
One platform account sends every transaction (mints, releases, settlements) and pays the gas. It holds only the minter role on drops, and escrow releases also need a signature from a separate matcher key. On Base, both keys will be held in a hardware-backed key service and never exist in plain form.