- Legal Opinion · Ogier
- HoldCo BVI incorp.
- Audits engagement · ToB + OZ
- 10+ supplier contracts
One SPV holds the cargo. One ERC-20 holds your slice.
$10K institutional · $500 retail (Q1 '27) · 75-day cycles · 15–20% target APR
Pre-product snapshot of the pipeline we're structuring. SPV IDs, corridors, target terms — all illustrative until first settlement. Live data feeds switch on at Q3 '26 trade desk launch.
| SPV · ID | Cargo | Phase | Notional | Hedge | APR target |
|---|---|---|---|---|---|
| CRT-CO-0041 | Arabica · Santos → HAM | ● STRUCTURING D+09 | $2.4M | — | 15–17% |
| CRT-CU-0042 | Kazakh copper · Aktau → Ningbo | ◐ LOI | $3.1M | — | 16–18% |
| CRT-SU-0043 | Colombian sugar · Cartagena → EU | ◐ ONBOARDING | $1.8M | — | 15–17% |
Cartho never holds your money. Six independent mechanisms protect it — even from us. Each is named, dated, and designed to work without Cartho in the room.
Named second-opinion quote — Ogier partner or Founding Advisor · published on signature, Q2 '26
One SPV per cargo. One token per SPV. Everything else composes on top.
Everything else — pricing, tranches, hedging, DeFi overlay — composes on top of these two primitives. No pool. No commingling. No rehypothecation.
Double-financing is solved at the schema level: the Twin can only be minted once, and only by the SPV that owns the cargo.
Investors allocate. Traders structure. Suppliers ship. Different journeys — not one funnel.
One SPV per cargo. Ring-fenced. 75-day cycles. Deal room, DD pack, legal opinion, hedge policy.
10% deposit + syndicated LP capital. Flash Liquidity, Syndicated Purchases, Reputation Score.
Verified buyers. Escrow-protected payout. No crypto paperwork, ever.
Five quarters from Legal Opinion to expansion. Dates are aspirational, gated on audit and legal sign-off — see Protection.
Follow $100,000 of LP capital through a single 75-day cycle. Your money never touches Cartho. It sits in a locked vault that no single party — including us — can open. It only moves when four independent checks turn green: who you are, what is shipping, where it is, and who signed off.
Your $100,000 goes straight into a segregated Fireblocks account with MPC key management. If Cartho disappears tomorrow, your capital is still yours. It is legally ring-fenced from our balance sheet — the same structure Fidelity uses for client assets.
Think of it like a safety deposit box at a bank — the bank custodies it, but the bank cannot claim it if the bank fails.
Custody follows institutional client-asset rules. Each deposit lives in a per-deal segregated sub-account at Fireblocks, held under MPC — no single key exists that can move the balance unilaterally. The sub-account is bankruptcy-remote from both the operating entity and the BVI holding company, so a failure of either does not reach the client ledger. The regulatory wrapper is Fireblocks' MiCA EMI framework; target operating state is aligned with the Phase 1 launch.
Moving funds requires 3 of 5 independent signers and a 48-hour delay. The contract code was audited by Trail of Bits and OpenZeppelin — two of the three firms that audit every major DeFi protocol you have heard of.
Like a safety deposit box with five keys held by five different people, and a 48-hour notice period before anyone can open it.
The escrow is a single-purpose ERC-20 vault forked from an audited template, deployed on an EVM-compatible chain (Ethereum, Polygon, Arbitrum or Base — TBD). Every privileged function is gated by a 3-of-5 multisig with a 48-hour timelock on execution; keys are distributed across independent signers so no single party, Cartho included, holds a threshold. Audit scope covers both the escrow and the per-SPV token factory; a bug bounty opens after audit to extend coverage beyond static review. Smart-contract risk is additionally backstopped by Nexus Mutual cover (see risk model).
Identity verified through Sumsub (same vendor used by Revolut and Binance). Buyer and supplier screened against OFAC, EU, UK, and UN sanctions lists. Buyer credit rating ≤ BBB required — rated by Euler Hermes, a 100-year-old German trade credit insurer.
This is customs clearance for your capital — no cargo moves until every stamp is green.
Compliance runs in two layers. Layer one — Sumsub handles KYC/KYB across 220+ jurisdictions: document authenticity, liveness, beneficial-ownership disclosure, and continuous sanctions monitoring against OFAC, EU, UK and UN lists. Layer two — counterparty risk is screened via Euler Hermes trade credit ratings with a hard ≤ BBB gate. Proof of funds is on-chain: buyer collateral (USDT / USDC / DAI) is locked in the escrow and signs a cryptographic PoF certificate, replacing the forged-bank-statement vector that traditional trade finance relies on. Nothing releases until both layers clear.
Chainlink oracles confirm cargo GPS position. Bill of Lading hash is verified on-chain. Only when buyer identity, cargo location, papers, and audit sign-off all verify does the smart contract atomically release funds to the supplier — inside the SPV, which owns the cargo.
Like tracking a FedEx package — except the package holds $100,000 of copper and it cannot be delivered to the wrong address.
Release is atomic against a 4-of-4 condition gate enforced on-chain: (1) identity — signed KYC attestation from Sumsub; (2) counterparty — ≤ BBB Euler Hermes rating; (3) cargo — Chainlink feed covering GPS position, SGS inspection status, and customs clearance; (4) papers — Bill of Lading hash matched on-chain. The SPV (BVI or Panama) takes legal title to the cargo at release and remains sole owner through the cycle. The Digital Twin mechanism binds one ERC-20 token to one cargo consignment — the contract cannot re-mint against the same BoL, eliminating double-financing at the schema level rather than relying on off-chain attestation.
$3,250 net yield in 75 days. The smart contract splits proceeds pro-rata: investors first, Cartho last. We only get paid if you do.
Like a bank CD that matures in 75 days — except you watched every step and kept legal title to real copper the whole time.
Settlement is a single on-chain transaction: buyer payment → SPV → atomic split to token holders pro-rata, followed by supplier commission (~1%) and platform structuring fee (1.5% tokenized / 0.5% non-tokenized) — in that order, investors first. Platform fee in the last waterfall position is the mechanical alignment layer: under-recovery on any deal reduces or zeros the structuring fee before it reduces the investor payout. A CSV audit trail is generated per deal from on-chain events. Capital yield is primarily from the commodity margin (15–20% APR target); idle escrow earns a DeFi overlay on Morpho / Aave capped at ≤20% of escrow. Price exposure on the underlying is neutralised via a mandatory short hedge on CME / LME / ICE, marked to market daily and unwound alongside settlement.
Retail access Q1 '27 · $500 minimum · Join the waitlist →