Bitcoin Mainnet · Layer 1 · No Bridges

DeFi on Bitcoin.
No middleman.

Open liquidity for Bitcoin and Runes — settled on the only chain that ever mattered. You hold the keys. You run the pool. The network does the rest.

See how it works → Run your own pool

When every holder can become a market maker, liquidity stops being a privilege.

When every community runs its own market, the world becomes a network of free economies.

On Bitcoin L1. Sovereign. Auditable. Forever.

The Three Pillars

Every person. Every community. Every trade.

This isn't another L2 wrapper or a cross-chain bridge. It's pure Bitcoin — final settlement, atomic swaps, runes, and self-custody — with the infrastructure people actually need to participate.

Bitcoin L1 mainnet

No sidechains. No multisig federations. No wrapped tokens. Every swap is a real Bitcoin transaction settled on mainnet by miners. PSBTs, Taproot, Runestones — the protocol as it was meant to be used.

Self-custody by design

Your private key never leaves your machine. The pool runs on a small open-source daemon you operate yourself. Kray Space is a router — we cannot move your funds even if we wanted to.

Communities as markets

Runes have real communities — fair launches, no insider allocations, culture before capital. Each community can host its own liquidity. No gatekeepers. No listing fees. No KYC.

How a swap works

Five steps. Zero trust required.

Here's exactly what happens when someone trades against your pool. Kray Space cannot lie, cannot front-run, cannot drain — every party verifies the same immutable rules independently.

1

Buyer requests a quote

Someone clicks BUY on /swap. Kray Space builds an unsigned PSBT and forwards it to your daemon over WebSocket.

2

Daemon checks reality on-chain

Your daemon ignores what the server claims and fetches actual reserves directly from mempool.space + ordinals.com.

3

Daemon verifies + signs locally

~25 immutable rules: AMM math, fee caps, sighash flags, Runestone integrity. If any fail, the daemon refuses. Your key never leaves the box.

4

Server re-verifies (the neutral judge)

Kray Space re-applies the same rules to the daemon's signed PSBT. Even a hostile daemon would be caught here — buyer is always protected.

5

Buyer signs · Bitcoin settles

Buyer's wallet adds their signature. A final phantom-signature check runs. Then the transaction broadcasts to the Bitcoin mempool — atomic, final, irreversible.

Sovereign security

Every known attack — already blocked.

We didn't invent a new trust model. We engineered defenses against every historical Bitcoin / PSBT / Runes exploit. Then we wrote a runnable test suite that hammers the system with 25 of them.

Private keysAES-256-GCM + Scrypt at rest. Decrypted only in your daemon's memory.
SIGHASH attacksOnly SIGHASH_DEFAULT / SIGHASH_ALL accepted on pool inputs.
Reserve manipulationDaemon fetches reserves on-chain — server cannot lie.
Fee drainHard cap 1000 sat/vB + relative cap 5% of swap value.
Cenotaph rune burnPointer & edict range checks reject burn-inducing PSBTs.
Mempool griefingnLockTime ≤ height + 100. nSequence ≥ 0xFFFFFFFD.
Phantom signaturesSchnorr/ECDSA validation enforced before broadcast.
Race conditionsUnique pubkey index + per-pool serialized signing.
25 / 25
Attack vectors rejected by the live simulation suite — scripts/simulate-user-pool-attacks.js. Including the exact PSBT family used in the 2024 Kray marketplace exploit (2b0ea40c).
Why this matters

The DeFi stack we deserved from day one.

Most “DeFi on Bitcoin” today wraps your coins, hands keys to a federation, or routes through synthetic L2s. Kray's user-pool architecture does none of that.

Other DeFi stacks

  • Bridges and wrapped tokens with custodial keys
  • Pools live in someone else's smart contract
  • Listing requires permission / fees / KYC
  • Settlement on a sidechain you don't control
  • Fee-drain & sighash exploits remain open

Kray Space + your daemon

  • Native Bitcoin UTXOs only — no wrapping, ever
  • Pool runs on YOUR machine with YOUR keys
  • Anyone can list — code is open, free to audit
  • Atomic settlement directly on Bitcoin L1
  • ~25 rules enforced twice (daemon + router)

Ready to host your community's liquidity?

Five terminal commands. One encrypted wallet. Live in under five minutes.