Protocol Plan
Complete architecture of the IFR Protocol — how every wallet, contract, and mechanism works together. Written for transparency: every decision, every trade-off, every scenario documented.
1. What is IFR?
Inferno (IFR) is a deflationary ERC-20 token on Ethereum Mainnet.
Every standard transfer between non-exempt addresses automatically burns 2.5% of the amount — permanently.
An additional 1% goes to the protocol fee pool.
There is no mint() function. Supply can only decrease, never increase.
The Lock Mechanism
IFR serves as a universal access token. Users lock IFR in the IFRLock contract to gain premium access to any product that integrates the lock check, without a recurring subscription. Access remains active while the product-required IFR stays locked and that integration remains available. No renewal. While tokens are locked, the holder gets access. Unlocking is always possible — no penalty, no forced lock period.
2. All Wallets & Contracts
Every IFR token can be traced on-chain. Here is where every token lives, who controls it, and what it is for.
0x5D93E7919a71d725054e31017eCA86B026F86C04
Holds 400.6M IFR (40%) reserved for Uniswap V2 liquidity. Gnosis Safe 3-of-5 multisig (same 5 signers as Treasury and Community Safes). Transferred from Deployer EOA on 18.03.2026. Tokens will be paired on Uniswap via phased LP releases (see Section 4).
0x5ad6193eD6E1e31ed10977E73e3B609AcBfEcE3b
Protocol treasury controlled by Gnosis Safe multisig (3-of-5 active). Originally held 150M IFR — 144.75M initial funding plus a 5.25M top-up transferred to BootstrapVaultV3 (Plan B). Current balance: 0 IFR. No deployed mechanism automatically refills this Safe.
0xaC5687547B2B21d80F8fd345B51e608d476667C7
Community operations wallet. Originally 60M IFR (57.9M received after 2.1M burned on transfer — Community EOA was not fee-exempt at migration time). 50M contributed to Bootstrap Plan B. ~7.9M permanent reserve for bug bounties, grants, ecosystem incentives, DAO seed funding.
0xf72565C4cDB9575c9D3aEE6B9AE3fDBd7F56e141
Holds ~200M IFR for the Bootstrap Event. When contributors send ETH, this contract holds it.
After the event closes (June 5, 2026), anyone calls finalise() to create the Uniswap V2 LP.
Fully trustless — no admin can touch the funds. If not finalized, contributors reclaim ETH after 30-day grace period.
IFR in this vault cannot be withdrawn by anyone.
0xdc0309804803b3A105154f6073061E3185018f64
The initial lock on 200M IFR (20%) ended 01.09.2026. All 200M IFR remains in the smart contract. Governance may withdraw at most 50M IFR per 90-day period under the current cap; no withdrawal or LP deployment has executed.
0x2694Bc84e8D5251E9E4Ecd4B2Ae3f866d6106271
Smart contract holding 150M IFR (15%). 12-month cliff (zero tokens released before March 2027), then linear release over 36 months until March 2030. Tokens are locked in this contract — not accessible until the cliff ends.
Beneficiary (who receives tokens after cliff):
0x04FABC52c51d1F8ced6974E7C25a34249b1E6239 —
held by the Core Developer as trustee on behalf of the entire team.
The 150M IFR represents the collective team allocation. Usage decisions
(reinvestment, compensation, or other purposes) are made collectively.
All claims publicly announced via official governance channels.
Currently: 0 IFR (cliff not reached).
Planned (Option B, after March 2027): New multisig vesting contract with Gnosis Safe as beneficiary — placing the team allocation under shared 3-of-5 control. Migration executed transparently.
0xc6eb7714bCb035ebc2D4d9ba7B3762ef7B9d4F7D
40M IFR (4%) for partner rewards, not active yet. Pilot partners will be paid only for verified checkout redemptions, valued in EUR, within a fixed per-partner budget, vesting 6–12 months. No refill.
0x670D...F812 | 0xaA14...6fCF
BuybackVault is a separate ETH-to-IFR buyback contract whose configured execution
splits bought IFR between BurnReserve and Treasury. BuybackController separately
accepts ETH and implements the 50/50 burn/LP path described below. Neither contract
refills PartnerVault. BurnReserve destroys received IFR only when burn()
is called.
0xc43d48E7FDA576C5022d0670B652A622E8caD041
Protocol proposals go through this contract with a mandatory 48-hour Timelock.
Untimelocked exceptions: owner-only guardian rotation through setGuardian
and transferring the deployed Governance contract’s ownership through owner-only setOwner (tracked as CWA-25). Governance owns InfernoToken.
3. The Bootstrap Event
The Bootstrap Event is how IFR gets its initial Uniswap liquidity. Instead of the team funding the LP themselves (Plan A — centralized financial risk), the community contributes ETH and receives IFR pro-rata. 100% of ETH goes into the Uniswap liquidity pool. No team ETH is taken.
How It Works
- Bootstrap ENDED 05.06.2026 23:51 UTC ✅ — Contributors contributed 0.01–2 ETH during the 90-day window. Claims open via
claim(). finalise()executed 05.06.2026 23:51 UTC — Block 25254575 — LP Token: 0xbE495E9c0d8cc2DCf95570cf95B63c4844dF31A0finalise()created the Uniswap V2 IFR/ETH pool with all raised ETH + 100M IFR and reserved 100M IFR for contributor claims- Mainnet Team.Finance locker was disabled; LP tokens remain in BootstrapVaultV3, which exposes no LP withdrawal function
- Contributors claim their IFR proportional to their ETH contribution
What If Bootstrap Fails?
If zero ETH is contributed by June 5, the IFR in the vault remains locked permanently (no admin withdrawal function). The team would use the 400M LP Reserve Safe IFR + team ETH to create an initial liquidity pool directly via Governance. See Contingency Plan below.
- ETH contributed by community
- finalise() creates LP automatically
- LP retained in BootstrapVaultV3 with no LP withdrawal function
- Contributors claim IFR pro-rata
- IFR tradeable on Uniswap
- Zero ETH contributed
- 200M IFR stays locked in vault
- Team creates LP with LP Reserve Safe IFR
- Governance Proposal + 48h Timelock
- IFR tradeable via direct pairing
4. Liquidity Phases
The 400M IFR LP Reserve allocation is not all added to Uniswap at once. Flooding the pool immediately would depress the price and create poor trading conditions. Instead, it is released in 3 phases as trading volume grows.
5. The Buyback Mechanism
The deployed BuybackController implements an ETH-to-IFR market buyback plus an attempted liquidity addition. It has no PartnerVault refill, operating-pool, SOS-reserve or 12-day voting path. The controller is deployed and governance-owned, but the execution path is dormant while its native-ETH threshold is not met.
BuybackController (Phase 3 — Deployed)
BuybackController was deployed on 14.04.2026, before the LP launch, and governance-wired
through Proposals #13 and #14. Execution is permissionless only when the controller is
unpaused, its native-ETH balance reaches minTriggerAmount, and the cooldown
has elapsed. It is not an unconditional timed automation.
lpReceiver.6. Governance
Governance proposals use the mandatory 48-hour timelock, giving the community time to
review. The untimelocked exceptions: TreasurySafe 3-of-5 can call
setGuardian and, on the deployed Governance contract, setOwner (tracked as CWA-25) without the timelock. The Guardian (TreasurySafe since 03.10.2026) can cancel
proposals during the timelock window. The Governance Owner is TreasurySafe 3-of-5
(since 20.03.2026).
Multisig Signers
| # | ID | Address | Status |
|---|---|---|---|
| 1 | G.M. | 0x6b36...ed67 | Active |
| 2 | M.G. | 0x17F8...72d4 | Active |
| 3 | A.M. | 0x0c48...ED74 | Active |
| 4 | Y.K. | 0xA086...b275 | Active |
| 5 | A.P. | 0x32cF...0fE9 | Active |
7. Contingency Plan
If the Bootstrap receives zero ETH by June 5, the protocol has a clear fallback. No IFR is lost — the 400M LP Reserve Safe allocation remains available as emergency liquidity.
8. Token Distribution
| March 2026 | Bootstrap opened — 200M IFR in vault | ✅ Done |
| June 2026 | Bootstrap finalized — LP created via finalise() | ✅ Done |
| Sep 2026 | Initial LiquidityReserve lock ended — 200M IFR still held, 50M current staged capacity | No withdrawal |
| March 2027 | Team Vesting cliff ends — linear release begins | Locked |
| March 2030 | Team Vesting fully vested | Locked |
9. Known Issues & Open Points
Full transparency means documenting what is not yet perfect.
ifrPriceWei = 0, no activation planned or authorized) and lenders are withdrawing their offers; those IFR are not lost. No V2 is planned until a reviewed price source exists. See LendingVault.