OXO Protocol
Building Bitcoin-Backed DeFi
From digital gold to a living, breathing financial ecosystem — OXO brings Bitcoin into everyday use without changing Bitcoin.
Abstract
Bitcoin holds over $1 trillion in value yet participates in almost none of the decentralized finance ecosystem. The dominant narrative — "digital gold" — has kept BTC inert while every other major asset has found productive use on-chain.
OXO Protocol is a Layer-1.5 infrastructure built on Ethereum that bridges Bitcoin into BTC-backed DeFi around oxoBTC. L1.5 is OXO's internal architecture term for coordinating Bitcoin-backed liquidity with EVM execution. Users deposit BTC and receive oxoBTC, a 1:1 backed on-chain representation that can be swapped, lent, staked, or used in swap and Bitcoin exit flows during the protocol roadmap - all while redeemable for real BTC through the Phase 1 OXO bridge redemption flow.
The protocol is in early access / pre-public testnet and is an audit candidate built in public. Sepolia components may exist for internal review, and public participation opens later through the waitlist. Mainnet launch will follow public testnet, third-party audit, final ZK/security review, and deployment validation. No arbitrary deadline - security first.
The Bitcoin Problem
Digital Gold, Frozen in Place
Bitcoin was designed to be peer-to-peer electronic cash. In practice, the vast majority of BTC sits idle in wallets — appreciated in value but generating no yield, participating in no protocol, and spending no fees back into any ecosystem. The Lightning Network addressed micropayments but did not solve DeFi participation.
Existing Solutions Fall Short
| Protocol | Model | Problem |
|---|---|---|
| WBTC | Custodial (BitGo) | KYC required, centralized custody, no native DeFi |
| tBTC | Threshold signatures | 6-hour mint delay, complex UX, limited integrations |
| cbBTC | Coinbase custodial | Requires Coinbase account, US-centric |
| OXO oxoBTC | Relayer + 3-of-5 multisig | Signer-attested minting, EVM DeFi modules, explicit Phase 1 custody assumptions |
The Missing Layer
Ethereum has its DeFi layer. Bitcoin - the largest crypto asset by market cap — has no native, fully integrated DeFi and payments layer. OXO is being built as an early BTC-backed DeFi layer focused on oxoBTC utility, treasury-routed yield, and controlled Bitcoin redemption flows.
The OXO Solution
The Ecosystem Loop
Once a user bridges BTC into OXO Protocol, they enter a BTC-backed financial ecosystem. They can stay entirely within OXO, use configured EVM modules, and request a return to BTC through the OXO bridge. Future cross-chain transfers of oxoBTC are planned, while BTC redemption remains through the OXO bridge path. The protocol is designed so that OXO is the primary entry and redeem path for Bitcoin liquidity.
Key Design Principles
- EVM-side self-custody with explicit BTC custody. Users hold oxoBTC directly on EVM. BTC reserves are managed by a 3-of-5 multisig bridge custody model in Phase 1, with later roadmap custody upgrades targeted to reduce custody assumptions.
- OXO as the redeem path. Future cross-chain transfers of oxoBTC are planned, while BTC redemption remains through the OXO bridge path and Phase 1 relayer settlement.
- Protocol fee yield. By depositing oxoBTC into staking or staking OXO, users can earn configured rewards and protocol fee revenue where treasury routing is enabled.
Protocol Architecture
oxoBTC Token
oxoBTC is an ERC-20 token with 8 decimal places (matching Bitcoin's satoshi precision).
oxoBTC is designed as a 1:1 BTC-backed representation, with BTC reserves held under the Phase 1 bridge custody model.
The token is minted exclusively by BridgeV3 upon signer-attested deposit and burned when a redeem request is created.
BridgeV3
The bridge operates as a relayer + 3-of-5 signer-attested mint system. When a user sends BTC to the protocol deposit address, an off-chain relayer detects the confirmed transaction, collects signer attestations, and submits it to mintAndTransfer(). Replay attacks are prevented via unique deposit IDs stored on-chain.
A 0.1% bridge fee is charged on every mint and routed to the Protocol Treasury, which distributes it to stakers (70%), POL (20%), reserve (5%), and OXO buyback-burn (5%).
ZK Rollup
The OXO ZK Rollup component is under active testnet development. Production-grade ZK security requires the final circuit, proving key, generated verifier, and public input binding before it should secure real value.
| Parameter | Phase 1 (testnet) | Phase 2 (roadmap) |
|---|---|---|
| Tx per batch | 256 | 1,024+ |
| Account state | 8 accounts | Unbounded (Merkle tree) |
| Proof system | Mock/dev verifier separated from production path | Generated verifier with final circuit |
| Sequencer | Centralized (low cost) | Decentralized (DAO) |
| Public inputs | Batch ID enforced on-chain; full circuit binding pending | Final binding required |
| Circuit upgrade | Experimental | Formal upgrade process required |
Core Modules
Protocol Fee Flow
Configured protocol fees route through ProtocolTreasury and use the 70% stakers / 20% POL / 5% reserve / 5% buyback-burn split. Bridge deposit fees, configured lending interest share, and configured FlashExit fees are protocol revenue. AMM swap fees remain LP revenue unless a protocol fee switch is explicitly added.
Tokenomics
Architecture & Value Capture
The exact supply, emission schedules, and distribution percentages are currently undergoing rigorous optimization and will be published closer to the Mainnet Genesis event. OXO Protocol is committed to a community-first distribution model.
Dual-Token Ecosystem
| Token | Role | Supply | Decimals |
|---|---|---|---|
| oxoBTC | The core liquid asset. 1:1 BTC-backed, redeemable through the Phase 1 bridge path, non-yield-bearing by itself but highly composable across DeFi. | Dynamic (mint/burn) | 8 |
| OXO Token | The native protocol asset. Designed for value capture, governance, and fee utility. | Fixed — revealed at TGE | 18 |
OXO Value Drivers
OXO Utility
| Action | Benefit |
|---|---|
| Stake OXO | Earn a share of protocol fee revenue (ETH + oxoBTC) |
| Hold OXO | Lending LTV boost — borrow more against your oxoBTC |
| Stake OXO (large) | Deposit bridge fee discount for BTC entry/mint; redemption fee design remains future roadmap work |
| OXO Governance | Vote on protocol parameters, fee rates, and treasury allocation |
Security Model
Bridge Custody
Phase 1 (current): 3-of-5 multisig relayer. Five independent key holders must co-sign any mint operation. This reduces single-signer risk while retaining explicit Phase 1 custody assumptions.
Phase 2 (roadmap): Roadmap custody upgrade research — a cryptographic protocol where the private key is never assembled in one place. This is intended to reduce custody assumptions while maintaining operational speed.
Smart Contract Security
All core contracts use OpenZeppelin v5 audited libraries. Specific protections include:
| Risk | Mitigation |
|---|---|
| Replay attacks (bridge) | On-chain deposit ID mapping based on BTC txid, vout, deposit address, and BTC amount |
| Reentrancy | ReentrancyGuard on all fund-moving functions |
| Oracle manipulation | Chainlink feeds with 1-hour staleness check |
| Unauthorized mint | Role-based access (MINTER_ROLE + ECDSA signature) |
| Undercollateralized borrow | Health factor check on every borrow and withdraw |
| Admin key risk | Multisig admin (roadmap: DAO timelock) |
Liquidity Bootstrapping
OXO Protocol plans to address the cold-start problem through a phased, protocol-owned liquidity (POL) strategy rather than relying solely on external LPs.
| Pool | Phase | Source |
|---|---|---|
| oxoBTC / ETH | Launch | Treasury POL + protocol allocation |
| oxoBTC / USDT | Phase 2 | Treasury POL + LP incentives |
| OXO / ETH | Launch | Liquidity allocation (% of supply) |
| OXO / oxoBTC | Phase 2 | Staking rewards flywheel |
Audit Plan
Pre-mainnet, OXO Protocol will run third-party security review, including smart contract audit and final ZK circuit/security review. Any public contest scope and reward pool will be confirmed before launch.
Roadmap
The Path to L1.5
OXO Protocol development follows a strict milestone-driven approach, prioritizing security and architectural robustness over arbitrary deadlines.
Contracts Under Review (Pre-Public Testnet)
| Contract | Address |
|---|---|
| oxoBTC Token | 0xA6fB891D117ce6C03880168bADE140067ED44D78 |
| OXO Token | 0xca0cd5448fabdfdc33f0795c871901c5e2bb60a8 |
| BridgeV3 | 0xF89105BD4e016Dcc88bca896d43a4aD3C64c6083 |
| OXO Swap Factory | 0xe969090d30f76e8b7969db2113d7572b5944e842 |
| OXO Swap Router | 0xb898537873ab341557963db261563092c784e725 |
| OXO Lending | 0xd8f802BBeD0DB111f917C318caC196452da8DBb5 |
| OXO Staking | 0x54e8f0348EB1E531f72d94E89FF877bA6B9b460A |
| Protocol Treasury | 0x9aB88742B75Cc82732df2648406cC52C9901985D |
| Flash Exit | 0x7aD326031a056e87d78178F8e08Fb998Cb8131F1 |
| OXO Rollup | 0xb76f2de1fC31A374986B7622a4d89f6CBB3b89c9 |
| ZK Verifier (test/dev) | 0x9111fecE6167b1c12f84627D90A7E40aF07319FF |
Ready to be early?
Join the waitlist. Be among the first to access OXO when we launch.