bunk

Parameters

symbol	value	meaning
n	32	hash output in bytes
w	16	Winternitz parameter, chain length plus one
len1	64	message digits, 4 bits each
len2	3	checksum digits
len	67	chains per one time key
h	8	tree height
leaves	256	one time keys per tree
signature	2,404 B	4 + 67 x 32 + 8 x 32
public key	64 B	root and public seed
message	229 B	fixed layout, see below
keygen	274,943 hashes	256 x (67 + 1,005 + 1) + 255
verify	at most 1,014 hashes	chains, one compression, eight nodes

Address field

type	name	a	b	c
0	chain step	leaf	chain	step
1	leaf compression	leaf	0	0
2	tree node	height	index	0
3	secret derivation	leaf	chain	0

Signature bytes

Message bytes

offset	length	field	type
0	1	kind	u8
1	4	gen	u32
5	4	leaf	u32
9	32	mint	public key
41	32	previous digest	hash
73	8	claimed	u64 lamports
81	8	paid to holders	u64 lamports
89	4	wallets paid	u32
93	8	to stores	u64 lamports
101	8	to canary	u64 lamports
109	8	bought	u64 lamports
117	8	burned	u64 raw tokens
125	8	stores after	u64 lamports
133	8	supply after	u64 raw tokens
141	8	price_e12	u64
149	8	volume seen	u64 lamports
157	4	bunk opened	u32
161	4	bunk created	u32
165	32	transactions hash	hash
197	32	payload	hash

Formulas

F(seed, adrs, x)   = SHA-256(seed ‖ adrs ‖ x)
sk(i, j)           = SHA-256(sk.seed ‖ ADRS(3, i, j, 0))
pk(i, j)           = F applied 15 times from sk(i, j)
leaf(i)            = SHA-256(pk.seed ‖ ADRS(1, i, 0, 0) ‖ pk(i,0) ‖ ... ‖ pk(i,66))
node(k, j)         = SHA-256(pk.seed ‖ ADRS(2, k, j, 0) ‖ left ‖ right)
checksum           = sum of (15 minus d) over 64 digits, as 3 hex digits
sigma(j)           = F applied d(j) times from sk(i, j)
verify             = F applied 15 minus d(j) times from sigma(j), compress, climb 8
digest             = SHA-256("bunk/act/v1" ‖ message)
memo               = bunk:v1:kind:tree:leaf:digest
holder share       = 40.00% + byte0 / 255 x 20.00%
bunk share         = 95.00% minus holder share
threshold          = 20 SOL x (128 + byte1) / 256
open trigger       = 20.00% + byte2 / 255 x 15.00%
canary             = first c where SHA-256("bunk/canary/v1" ‖ mint ‖ c) is a curve point, times 8
bunk(k)            = ed25519 key from HKDF(master seed, "bunk/addr/v1", mint ‖ k)
weight             = min(coins, 2% of supply) x (1 + min(1, volume since entry / 200 SOL))
shield             = value held by exposed wallets larger than this one

Engine constants

action threshold base	20.0000 SOL traded
holder share range	40.00% to 60.00%
bunk share range	35.00% to 55.00%
canary share	5.00%
open trigger range	20.00% to 35.00% below peak
burn half on open	50.00%
cap per bunk	2.0000 SOL
smallest bunk	0.0100 SOL
most bunks sealed	12
signatures per bunk	1
smallest payout	0.0010 SOL
weight cap	2.00% of supply
full tenure	200.0000 SOL traded
risq list size	100
minimum pot	0.0200 SOL
gas floor	0.0200 SOL
slippage	5%
team share	0%

Where every number comes from

reading	source	refresh
price, value, candles	Birdeye	1 s
trades	Birdeye, kept in the trades table	1 s
supply	Solana RPC getTokenSupply	1 s
holders, 24h volume, liquidity	Birdeye token overview	1 s
unclaimed fees	Solana RPC, creator vault account	each engine pass
wallet and canary balances	Solana RPC getBalance	each engine pass
claimed, paid, sealed, bought, burned	the confirmed transactions themselves	at each action
top 100 holders	Birdeye token holders	each engine pass
wallet states, signer counts	Solana RPC getSignaturesForAddress and getTransaction	each engine pass
bunk balances	Solana RPC getBalance	each engine pass
payouts	the confirmed transfers themselves	at each action
signature checks	computed in this browser	on load
canary address, parameters	computed in this browser	on load

Live identity

bunk id
root
public seed
canary address
surface wallet
contract
current tree
next leaf
mode