Tokens

Global Supply Accounting.

Tenzro-issued tokens move across rails; each rail mints and burns its own representation. The global supply registry is the single integrity log: monotone sequence per (asset, rail), per-asset hard cap, no burn underflow. A misbehaving relayer cannot mint more than the canonical supply because the next delta is rejected at the registry, not on the rail.

STATUS: Testnet
CRATE: tenzro-vm::global_supply
PRECOMPILE: 0x1021
TYPE: Registry

Invariants

per-asset:  Σ mints − Σ burns  ≤  max_supply
per-rail:   sequence strictly monotone increasing
per-burn:   amount ≤ circulating  (no underflow)

Delta

GlobalSupplyDelta {
    asset_id,
    rail,            // LayerZero / Wormhole / CCIP / deBridge / IBC / Stargate
    sequence,        // monotone per (asset, rail)
    kind,            // Mint | Burn
    amount,          // u128 base units
    source_chain,    // CAIP-2 or adapter chain id
}

Operator escape hatch

GlobalSupplyPolicy::min_accepted_seq lets governance jump the per-(asset, rail) sequence cursor forward on rail compromise without rewriting history. Older deltas are rejected even if their sequence is higher than the current pointer.

← All docs