Wallet & Contract Guide
Every wallet and smart contract in the IFR ecosystem — explained. From genesis to Phase 4.
8
Wallets
17
Contracts
4
Upcoming
3-of-5
Multisig
👛 Project Wallets
Project wallets and operational roles are listed below. Active wallets manage protocol operations; historical wallets are retained to explain the migration to multisig infrastructure.
🚀 Deployer EOA
Transferred
Genesis Balance: 1,000,000,000 IFR (100% — then distributed)
Current Balance: 0 IFR — 400.6M transferred to LP Reserve Safe on 18.03.2026 (TX)
Ecosystem Role: Genesis deployer. Received all 1B IFR at deploy, distributed to all protocol wallets and contracts. LP reserve (400.6M) transferred to LP Reserve Safe (Gnosis 3-of-5) on 18.03.2026. Former Governance Owner — ownership transferred to TreasurySafe 3-of-5 on 20.03.2026.
Access Control: EOA — former Governance Owner (transferred to TreasurySafe 3-of-5 on 20.03.2026)
feeExempt: ✅ Active since 18.03.2026
💰 IFR LP Reserve Safe
Multisig 3-of-5
Balance: 400,600,000 IFR
Current Role: LP Reserve for Phase 2 (100M) + Phase 3 (150M) Uniswap expansion. Received from Deployer on 18.03.2026.
Ecosystem Role: Holds the separate DEX liquidity allocation under multisig control. Any LP expansion requires an explicit 3-of-5 decision. The distinct LiquidityReserve below still holds its full 200M IFR and is limited to 50M IFR per 90-day period.
Access Control: Gnosis Safe — 3-of-5 (same signers as Treasury + Community)
🏛️ Treasury Safe
Multisig 3-of-5
Genesis Balance: 150,000,000 IFR (15%)
Current Role: Protocol treasury. Funded Bootstrap Plan B with 144.75M IFR on 11.03.2026 and a 5.25M IFR top-up on 15.03.2026. Current balance: 0 IFR.
Ecosystem Role: Controls protocol development spend AND Governance ownership (since 20.03.2026). All transactions require 3-of-5 multisig approval.
Access Control: Gnosis Safe — 3-of-5 (G.M./M.G./A.M./Y.K./A.P.) active since 15.03.2026
feeExempt: ✅ Active since 18.03.2026
👥 Community Safe
Multisig 3-of-5
Genesis Balance: 57,900,000 IFR (received after 2.1M burn)
Current Role: 50M sent to Bootstrap Plan B. ~7.9M permanent Community Operations Reserve.
Ecosystem Role: Bug bounties, grants, ecosystem incentives, DAO seed funding. All spends publicly announced.
Access Control: Gnosis Safe — 3-of-5 active
feeExempt: ✅ Active since 18.03.2026
⏳ Team Beneficiary
Vesting — Locked
Genesis Balance: 0 IFR (receives from Vesting Contract)
Current Role: Designated beneficiary of the Vesting Contract. Core Developer acting as trustee for entire team allocation (150M IFR).
Ecosystem Role: Cannot claim until March 2027 (cliff). Then ~4.17M IFR/month linear over 36 months. Planned: migrate to Gnosis Safe after cliff.
Access Control: Single EOA — immutable in Vesting Contract
✍️ Voucher Signer
Backend Signer
Genesis Balance: 0 IFR
Current Role: Signs EIP-712 vouchers for FeeRouterV1 fee discounts. Backend-only — never holds IFR.
Ecosystem Role: Points system backend generates vouchers signed by this wallet. Users redeem on-chain via FeeRouterV1 for fee discounts. Rotatable via Governance; rotated to this dedicated key by Proposal #18 (05.10.2026, block 26124623). It is not a Safe signer.
Access Control: EOA — Backend wallet (not multisig)
📦 Community EOA (Historical)
Migrated
Genesis Balance: 60,000,000 IFR
History: Interim wallet before Community Safe deployment. Migrated 07.03.2026: sent 60M IFR, received 57.9M (2.1M permanently burned — EOA was not feeExempt).
Current Role: Inactive — 0 IFR. Historical only.
Access Control: EOA — no longer in use
📦 Treasury EOA (Historical)
Migrated
Genesis Balance: 150,000,000 IFR
History: Interim wallet before Treasury Safe deployment. Migrated 07.03.2026: sent 150M, received 150M (feeExempt transfer — zero burn).
Current Role: Inactive — 0 IFR. Historical only.
Access Control: EOA — no longer in use
⛓ Smart Contracts
Core protocol contracts and project Safes on Ethereum Mainnet; the full list of all 15 deployed protocol contracts is in the Contracts reference. Every contract is open source and verified on Etherscan.
🔥 InfernoToken
Core Token
Owner: Governance (Timelock)
feeExempt: ✅ Self (yes)
Function: The deflationary ERC-20 token. Every standard transfer between non-exempt addresses applies a 3.5% fee: 2% sender burn + 0.5% recipient burn + 1% to FeeRouterV1. If either endpoint is fee-exempt, the complete fee is bypassed. No mint function — supply decreases permanently.
Phase: Active since 05.03.2026
⚖️ Governance
Timelock Controller
Owner: TreasurySafe 3-of-5 (transferred 20.03.2026 — TX)
feeExempt: ✅ Yes
Function: governance proposals use the 48-hour timelock. The untimelocked exceptions are owner-only guardian rotation through
setGuardian and transferring the deployed Governance contract’s ownership through owner-only setOwner (tracked as CWA-25). Guardian can emergency-cancel any pending proposal.
Proposals: History documented through #16; #1, #2, #3 and #10 were cancelled or replaced, while #11–#16 were executed.
Phase: Active — controls all protocol parameters
🔒 IFRLock
Access Gate
Owner: Guardian = TreasurySafe (pause-only; since 03.10.2026)
feeExempt: ✅ Yes
Function: Users lock IFR here to activate premium access while the product-required amount remains locked and that integration remains available. Any builder product can query
isLocked() to verify access. No admin can touch user funds.
Phase: Active — gateway to all premium features
🚀 BootstrapVaultV3
✅ FINALIZED
Owner: Permissionless (no admin)
feeExempt: ✅ Yes (since Proposal #4)
Function: Community price discovery. 100M IFR paired with 0.030 ETH raised → Uniswap V2 LP created; 100M IFR reserved for contributor claims. Team.Finance was disabled on Mainnet; LP remains in BootstrapVaultV3, which exposes no LP withdrawal function.
✅ FINALIZED 05.06.2026 23:51 UTC — Block 25254575 — TX: 0x949848bd…
LP Token:
✅ FINALIZED 05.06.2026 23:51 UTC — Block 25254575 — TX: 0x949848bd…
LP Token:
0xbE495E9c0d8cc2DCf95570cf95B63c4844dF31A0
Phase: ✅ FINALIZED — Bootstrap ENDED 05.06.2026
💧 LiquidityReserve
Staged Governance
Owner: Governance
feeExempt: ✅ Yes
Function: Holds 200M IFR for possible Phase 2/3 liquidity use. The initial lock ended 01.09.2026; all 200M IFR remains held. Governance can withdraw at most 50M IFR per 90-day period under the current cap, and no withdrawal has occurred.
Phase: Staged availability — 50M IFR current cap, 0 withdrawn, no pending proposal
⏳ Vesting
Cliff Active
Owner: Guardian = TreasurySafe (pause-only; since 03.10.2026)
feeExempt: ✅ Yes
Function: Team allocation locked 4 years. 12-month cliff (no release before March 2027), then linear over 36 months until March 2030.
Balance: 150,000,000 IFR
Phase: Cliff active — first release March 2027
🏗️ PartnerVault
Rewards not active
Owner: Governance
feeExempt: ✅ Yes
Function: 40M IFR — Governance-locked. Cannot be withdrawn directly by anyone.
How it works:
→ Not active yet: no partner registered, no reward paid
→ Planned: pilot partners earn IFR only for verified checkout redemptions (EUR-valued, fixed budget)
→ Each settlement is a Governance proposal; rewards vest linearly over 6–12 months
→ No refill: unused IFR stays in the vault
All parameters controlled by Governance (48h timelock).
How it works:
→ Not active yet: no partner registered, no reward paid
→ Planned: pilot partners earn IFR only for verified checkout redemptions (EUR-valued, fixed budget)
→ Each settlement is a Governance proposal; rewards vest linearly over 6–12 months
→ No refill: unused IFR stays in the vault
All parameters controlled by Governance (48h timelock).
Balance: 40,000,000 IFR
Phase: Active
🔀 FeeRouterV1
Fee Accumulator
Owner: Governance
feeExempt: ✅ Yes
Function: Received the IFR pool-fee flow until Proposal #21 (05.10.2026); since then the pool fee goes to BuybackController and the IFR already here stays without a withdrawal path. FeeRouterV1 sends native-ETH swap fees to the deployed BuybackController; controller execution remains subject to its on-chain threshold and cooldown rather than an automatic timer.
Phase: Pool-fee inflow stopped (block 26,124,660)
♻️ BuybackVault
Phase 3
Owner: Governance
feeExempt: ✅ Yes
Function: Governance-owned IFR custody contract. It is separate from BuybackController; the deployed controller contains no PartnerVault or BuybackVault refill path.
Balance: 0 IFR
Phase: Inactive — activates Phase 3
🔥 BurnReserve
Permanent Burns
Owner: Governance
feeExempt: ✅ Yes
Function: Permanent burn pool. Burns IFR forever via
burn(). Accumulates from protocol fee share (Phase 3).
Balance: 0 IFR
Phase: Inactive — activates Phase 3
🏛️ Treasury Safe (Gnosis)
Multisig 3-of-5
Note: Same address as Wallet 2 — this is both a wallet AND a smart contract (Gnosis Safe).
Function: Controls Treasury funds AND Governance (owner since 20.03.2026). Requires 3-of-5 signatures.
feeExempt: ✅ Active since 18.03.2026
👥 Community Safe (Gnosis)
Multisig 3-of-5
Function: Gnosis Safe multisig for community funds. 7.9M IFR permanent reserve for grants/bounties/DAO.
feeExempt: ✅ Active since 18.03.2026
🔮 Recently Activated / Upcoming Contracts
Bootstrap LP, CommitmentVault, LendingVault, and BuybackController are deployed on Ethereum Mainnet. Remaining items in this section are future integrations unless marked live.
💱 Uniswap V2 LP Pair
Live
Created via:
BootstrapVaultV3.finalise()Timeline: Created 05.06.2026
Function: IFR/ETH trading pair on Uniswap V2. Created by BootstrapVaultV3.finalise() with 100M IFR + 0.030 ETH. LP tokens remain in BootstrapVaultV3; Team.Finance was not configured and the vault exposes no LP withdrawal function.
💧 LiquidityVault.sol
Concept only
Purpose: Earlier Phase 2 LP-management concept
Timeline: Not deployed and not scheduled
Current boundary: No LiquidityVault contract is deployed. Governance directly controls the existing LiquidityReserve, whose 200M IFR remains held under the 50M-per-90-day cap. Any future manager requires separate design, audit, deployment and Governance approval.
🏗️ BuilderRegistry.sol
Mainnet
Owner: Governance (0xc43d...D041) — controlled by TreasurySafe 3-of-5
Function: On-chain registry for approved builders. Maps builder addresses to product metadata and reward eligibility. Registration via Governance proposals (48h timelock).
Deployed: 20.03.2026 | 27/27 tests passing
🔀 BuybackController.sol
Mainnet
Purpose: Uses eligible native ETH fee balance for buyback-to-BurnReserve and attempted LP deepening; it does not forward IFR transfer fees or refill PartnerVault
Function: Automates fee distribution from FeeRouterV1. Deployed 14.04.2026, feeExempt via Proposal #13 and FeeRouter collector via Proposal #14.
🗳️ RatVoting.sol
Phase 4
Purpose: Council governance
Function: Merkle tree-based council voting with on-chain anchoring. Enables trusted council members to vote on protocol proposals.
💬 ForumVoting.sol
Phase 4
Purpose: Community voting
Function: Community-wide voting using ecrecover signatures. Gasless off-chain signature collection with on-chain verification.
🛡️ IFRSpamProtection.sol
Phase 4
Purpose: Proposal spam prevention
Function: Requires 10 IFR per proposal submission (burned permanently). Deflationary mechanism that prevents governance spam.
🔄 Ecosystem Flow
How tokens flow from genesis through the entire IFR protocol infrastructure.