The RWA primitive.
Physical truth, on-chain.
Keryx assigns every physical object its own ERC-4337 smart account — signed by hardware, anchored permanently on-chain, composable with any EVM protocol. The physical object IS the cryptographic authority.
On-chain ownership of physical assets has always been a lie.
Every RWA protocol faces the same fundamental flaw: the on-chain token is only as trustworthy as the off-chain link. A QR sticker, a paper certificate, a centralised database entry — all clonable, all server-dependent, all forgeable without detection.
Keryx solves the oracle problem at the hardware level. The chip embedded in the physical object generates a non-extractable ECDSA key pair. Every tap produces a unique, non-replayable signature. The physical presence of the object IS the cryptographic proof.
Three token layers. One physical object.
Token 1 — The Soulbound Anchor
Non-transferable. Chip-bound. Issued by Keryx at provisioning. Permanently anchored to the chip's ECDSA P-256 keypair. Token 1 is the ground truth — it records chip binding, ownership history, status flags, lifecycle events, and provenance media, all append-only. It cannot be sold, transferred, or burned. It exists for every object, regardless of tier. It survives any platform, company, or server — including Keryx.
LOST · STOLEN · FOUND · CLAIM · DISPUTED
Token 2 — The Digital Twin
Optional. Creator-deployed ERC-721. References Token 1 as its immutable parent. Can be minted at provisioning or years after physical delivery. PHYSICAL_BONDED is the recommended default — the digital twin cannot be sold without physically holding the object and producing a chip ECDSA signature.
Tokens 3–N — The Experience Layer
Creator-issued. Always children of Token 1. Mintable at any point after Token 1 exists — months or years after delivery. Creator retains perpetual minting rights regardless of who currently owns the object. The physical object becomes a permanent channel for creator-to-collector engagement.
Readable in 2050. Zero dependency on Keryx.
data:text/html;base64,... // self-contained tokenURI
https://api.keryx.xyz/token/<tokenId> // operational (keryx-dependent)
“Every chip tap reads from the on-chain registry. If keryx.xyz disappears tomorrow, every authenticated object retains its full provenance — verifiable via any EVM node or ERC-4804 gateway, for as long as Base exists.”
One protocol. Three chains. Value-appropriate settlement.
Maximum security, deepest liquidity. EIP-7951 activated December 2025 — native P-256 verification.
RIP-7212 live since July 2024. ~$0.001/tx. Keryx paymaster covers all consumer gas. EVM-equivalent.
Lowest cost for frequent state updates. RIP-7212 live since March 2024 (Napoli hard fork).
Two factors. Neither alone is sufficient.
No single party can mint a Keryx token alone. Two independent signatures are required simultaneously:
— The chip's ECDSA P-256 signature (Key 1): generated on-chip, non-extractable, proves physical presence of the object.
— The creator's ERC-4337 wallet signature (Key 3): proves certified identity is attached to the mint. A stolen passphrase without the chip fails. A physical chip without the wallet fails. Counterfeit chips fail at P-256 signature verification.
Build on Keryx.
Ready to build on Keryx?
Protocol access is available to qualified builders. Tell us about your project and use case — we respond within 48 hours.
docs.keryx.xyz →