Cindra — The Synchronized Dollar on Canton

The synchronized dollar.

A delta-neutral synthetic dollar on Canton — the network where regulated finance settles. Structural yield. Confidential flows. Atomic settlement.

STATUS/ PRIVATE TESTNET
HEDGE/ NET DELTA ≈ 0
CUSTODY/ OFF-EXCHANGE
cUSD · PEG TARGET $1.00
LONG SPOT / SHORT PERP −Δ
scUSD ACCRUING ▲
DELTA-NEUTRAL BY DESIGN  ◆  PRIVACY AT THE TRANSACTION LEVEL  ◆  ATOMIC SETTLEMENT  ◆  OFF-EXCHANGE CUSTODY  ◆  YIELD FROM STRUCTURE, NOT PROMISES  ◆  BUILT ON CANTON  ◆   DELTA-NEUTRAL BY DESIGN  ◆  PRIVACY AT THE TRANSACTION LEVEL  ◆  ATOMIC SETTLEMENT  ◆  OFF-EXCHANGE CUSTODY  ◆  YIELD FROM STRUCTURE, NOT PROMISES  ◆  BUILT ON CANTON  ◆  
01 / THE THESIS

Stablecoins grew up on transparent chains. Institutions never could.

On public ledgers, every position is information leakage that gets traded against. Cindra puts the synthetic dollar on rails where flows stay confidential — and backing stays provable.

TRANSPARENT CHAINEXPOSED
0x4f…e2 → HEDGE DESK$212,400,000
0x9a…c7 → REBALANCE$88,150,000
0x2d…b1 → CLIENT FLOW$54,900,000
Everyone sees the book. Rebalances get front-run; strategies get scraped.
CANTON · CINDRANEED-TO-KNOW
PARTY A ⇄ PARTY B
PARTY C ⇄ CINDRA
AUDITOR ← DISCLOSUREPROVEN ✓
Only counterparties see contents. Auditors get proofs — the world gets nothing to trade against.
1 : 1
FULLY-BACKED DESIGN — SPOT COLLATERAL + MATCHED HEDGE
Δ ≈ 0
NET PRICE EXPOSURE TARGETED BY THE HEDGING ENGINE
0
POSITIONS EXPOSED TO THE PUBLIC MEMPOOL — THERE ISN'T ONE
Δ
02 / THE MECHANISM

A dollar held steady by opposing forces.

Every cUSD is backed by spot collateral paired with a short derivatives position of equal size. When the collateral moves, the hedge moves opposite — the dollar value of the package barely moves at all.

01
Deposit collateral

BTC, ETH or liquid stables flow into segregated, off-exchange custody — never onto an exchange balance sheet.

02
Hedge to neutral

A short perpetual of equal notional opens instantly. What collateral loses, the hedge gains — and vice versa.

03
cUSD is minted

One cUSD per hedged dollar, atomically on Canton. Redemption unwinds the same package — no reflexive loops.

LIVE HEDGE — ILLUSTRATIVE NET Δ ≈ 0
LONG · SPOT COLLATERAL
$1
SHORT · PERPETUAL HEDGE
−Δ

Collateral and hedge oscillate in opposite directions; their sum holds the dollar. Illustrative — not live protocol data.

03 / WHY CANTON

The chain where finance already lives.

A network of sovereign ledgers, synchronized into one. Data travels need-to-know; settlement is atomic. The only environment where a synthetic dollar serves institutions without exposing them.

A
Need-to-know privacy

Balances, mints and hedge flows are visible only to the parties involved. No public mempool to front-run, no explorer scraping your treasury.

B
Atomic, multi-party settlement

Mint, redeem and collateral transfer compose into a single transaction that completes fully or not at all — delivery versus payment, guaranteed by the ledger.

C
Institutional rails, open network

The network is operated and used by global banks, exchanges and market infrastructure. cUSD settles where tokenized treasuries, repo and collateral already move.

GLOBAL
Synchronizer
BANKS
EXCHANGES
CUSTODIANS
ASSET MANAGERS
CINDRA · cUSD
%
04 / YIELD — scUSD

Yield from market structure, not emissions.

Stake cUSD to receive scUSD — a reward-accruing note whose value grows as the protocol earns. Nothing is printed; the return is harvested from the same positions that back the dollar.

ƒ
Funding & basis spread

Perpetual markets structurally pay the short side. The hedge that keeps cUSD neutral collects that funding — the core engine of return.

Staking rewards

Where collateral is staked ETH, consensus rewards accrue to the backing — yield the hedge doesn't cancel, because it isn't price exposure.

§
Reserve carry

Liquid-stable reserves earn treasury-grade rates in flat markets — a floor that lets the protocol rotate defensively when funding turns.

cUSD → stake → scUSD

Non-rebasing: your balance stays constant while its redemption value climbs. Unstake any time after a short cooldown. Rates publish at launch — we don't advertise an APY we aren't earning.

— cUSD $1.00— scUSD REDEMPTION VALUE ▲
05 / BACKING & TRANSPARENCY

Private flows. Provable backing.

Confidential doesn't mean opaque. Canton's disclosure contracts let Cindra prove its reserves to the parties who need proof — holders, auditors, regulators — without publishing its book to the world.

COLLATERAL FLOW — WHERE ASSETS ACTUALLY SIT
Custodian vault
100% OF ASSETS · BANKRUPTCY-REMOTE
MARGIN DELEGATED
NEVER TRANSFERRED
Hedge venues
SHORT PERPS · DISPERSED · RE-STRIKABLE
On-ledger attestation
PROOF DELIVERED TO EVERY HOLDER
CUSTODY
Off-exchange settlement

Collateral sits with independent, bankruptcy-remote custodians. Exchanges receive margin delegation — never the assets themselves.

ATTESTATION
Scheduled proof of reserves

Independent attestations of collateral, hedge notional and reserve fund — delivered on-ledger to every holder through Canton disclosure contracts.

BUFFER
Protocol reserve fund

A liquid, unencumbered reserve absorbs periods of negative funding before backing is ever touched. Sized against stress scenarios, reported in every attestation.

SEGREGATION
No rehypothecation

Backing assets are never lent, restaked or pledged elsewhere. One dollar of cUSD, one dollar of hedged collateral — nothing doubled.

!
06 / RISK FRAMEWORK

We'd rather you read this than a post-mortem.

A synthetic dollar is not a bank deposit. These are the real risks, and how the protocol is engineered around them.

RISK 01
Negative funding

Funding can turn against the short side for extended periods. Mitigation: the reserve fund absorbs drawdowns; the engine rotates backing toward liquid stables earning reserve carry until conditions normalize.

RISK 02
Exchange failure

Hedges live on derivatives venues; a venue can fail. Mitigation: collateral never leaves custody — only margin is delegated. Positions are dispersed across venues and can be re-struck elsewhere within hours.

RISK 03
Custodial risk

Off-exchange settlement concentrates trust in custodians. Mitigation: multiple independent, regulated custodians with segregated, bankruptcy-remote structures — no single point of custody.

RISK 04
Contract risk

Ledger code can fail. Mitigation: mint, redeem and disclosure logic is written in Daml — a language built for multi-party financial contracts — with independent audits before mainnet.

RISK 05
Peg liquidity

Secondary markets can trade away from $1 under stress. Mitigation: approved counterparties mint and redeem at par continuously — arbitrage that pulls price back, backed by same-day hedge unwinds.

07 / FAQ

Fair questions.

Is cUSD a fiat-backed stablecoin?+

No. cUSD is a synthetic dollar: it holds no bank deposits. Each unit is backed by spot crypto collateral paired with an equal short derivatives position, so the package behaves like a dollar. Different construction, different risk profile — read the risk framework above.

Where does the yield actually come from?+

Three places: funding payments collected by the short hedge, staking rewards on staked-ETH collateral, and treasury-grade carry on liquid reserves. It is transferred from leveraged traders and validators — not printed from a token.

Why Canton instead of Ethereum?+

Privacy and settlement. On transparent chains, every institutional flow is public — positions get scraped and front-run. Canton keeps transactions on a need-to-know basis while settling atomically across the applications where regulated finance already operates.

Who can mint and redeem?+

Direct mint and redeem at par is for approved counterparties that clear KYC/KYB — market makers, funds, institutions. Everyone else acquires cUSD on secondary venues and stakes it for scUSD without any approval.

What happens when funding goes negative?+

scUSD yield compresses first — it can reach zero, never negative for holders. Sustained negative funding is paid from the protocol reserve fund while the engine rotates backing toward liquid stables. Backing is touched last, and attestations show the buffer at all times.

When does Cindra launch?+

We're on private testnet now with design partners. Waitlist members get testnet access, the litepaper on release, and priority onboarding at mainnet — in order of signup.

PRIVATE TESTNET — LIMITED SEATS

Be early to the synchronized dollar.

Testnet access, the litepaper on release, and priority mainnet onboarding — in order of signup.

{{ formError }}
NO SPAM. ONE EMAIL WHEN YOUR SEAT OPENS.
Successfully submitted

You're on the list. We'll reach out when your testnet seat opens — watch for a note from the Cindra team.

POSITION SECURED ◆ {{ email }}