Decentralized Digital Currency Protocol  ·  Deployed on Solana

The Better Money

Stable.  Private.  Unfreezable.  Open-source.

The cash analogy for the digital era — without the surveillance infrastructure. A permissionless open-source protocol for private, no-freeze stablecoins.

Read the Manifesto Why we built this
The problem is already here

Three episodes that prove the architecture is broken

The danger was not invented. It was demonstrated — by governments and institutions that would describe themselves as operating legitimately.

February 2022  ·  Ottawa, Canada

A liberal democracy froze political donors without court orders

The Canadian government invoked emergency powers to freeze the bank accounts of citizens who had donated to or participated in a lawful political protest. No individual court orders were obtained. No criminal charges were filed. Accounts were frozen by administrative directive to financial institutions — on the basis of political participation, not criminal conduct.

The accounts were unfrozen when the political situation changed — not when courts reviewed the action. Canada is a free society with an independent judiciary, a bill of rights, and a free press.

Centralized digital financial infrastructure converts payment systems into instruments of political control, exercisable at the speed of a database update by whoever holds executive power at any given moment.
March 2026  ·  Ethereum

A sanctions action froze fifteen bystanders for every target reached

Circle executed a sanctions compliance action and froze sixteen wallets. Fifteen belonged to parties with no connection to the sanctions target — caught because their funds shared an address cluster with the designated party. Among the collateral freezes: the DFINITY Foundation's ckETH Minter smart contract — public infrastructure serving thousands of users with no relationship to the underlying action whatsoever.

One compliance decision. Structurally unlimited blast radius.

A protocol-level freeze function operates on addresses, not on identified persons. It cannot limit its own blast radius. The problem is not that Circle complied. The problem is architectural.
May 2026  ·  US Court / Ethereum

A properly scoped court order caused indiscriminate harm

A US court issued a temporary restraining order directing Circle to blacklist a specific wallet connected to a civil dispute. Circle's blacklist function operates at the address layer with no visibility into pool accounting. Executing the order against a DeFi pool address froze the entire pool — locking every depositor regardless of any connection to the litigation.

The court reviewed the freeze and lifted it. The order was properly scoped. The execution mechanism could not match the order's precision.

No court order, valid sanctions action, proper court order — three different legal contexts, same architectural outcome. The infrastructure is the problem.
The design position

Your keys, YOUR money.

Not as a promise. As a structural property of the protocol.
The pattern is not new
USA · 1933
Executive Order 6102 required every American citizen to surrender privately held gold to the Federal Reserve at a fixed rate, under criminal penalty. Gold was reachable. It was confiscated from every citizen who held it.
Argentina · 2008
The government nationalized the private pension system. Individual retirement accounts accumulated over working lifetimes were converted by a single legislative majority into state social security claims. No individual recourse.

The seizure of privately held savings is a recurring feature of democratic governance when a state's financial needs converge with the structural accessibility of private assets.

DDCP is not designed to help criminals evade justice. It is designed to ensure that the tools available to governments for financial surveillance and control require the same procedural safeguards — judicial process, individual targeting, evidentiary standards — that liberal democratic societies have historically required for other forms of coercive government power.

The problem with government-compelled financial freezes is not that law enforcement should be unable to reach criminal funds. It is that centralized digital financial infrastructure makes politically motivated freezes and legitimate law enforcement freezes structurally identical and equally effortless — both are administrative database operations requiring no judicial process.

A law requiring a custodian to hand over its records — as EO 6102 directed banks, as Argentina's 2008 legislation directed pension fund managers — is a single instruction to a concentrated intermediary. A law requiring individual physical access to each holder's private keys, at the scale of a society, is a different kind of enforcement entirely.

DDCP resolves this not by making criminal funds permanently unreachable, but by making the path to reaching them require genuine legal process directed at an identified person — not executive will directed at a blockchain address.

For self-custody wallets, wallet-level seizure is impossible at the protocol layer — an architectural fact, not a policy commitment. The DDUSD mint initialization includes no Freeze Authority and no Freeze Account extension. The capability is absent by design and cannot be re-added post-initialization under Token-2022's architecture.

Access restriction through the Financial Intermediary layer — exchanges, on-ramps, custodial services — remains fully available to law enforcement acting under valid judicial authority. This reproduces digitally the same distinction that exists between physical cash and a bank account.

01
No freeze function — by architectural design
No Freeze Authority. No Freeze Account extension. No administrative key at any layer that can act on a self-custody wallet. The absence is structural — not a revoked authority, not a policy commitment. It cannot be re-added post-initialization under Token-2022's architecture.
02
Amount and balance privacy by default
Self-custody wallet transactions use the Confidential Balances suite of Solana Token Extensions via the Token-2022 program. Transfer amounts and account balances are hidden from on-chain observers using ZK ElGamal proofs verified natively on Solana. No issuer auditor decryption key is provisioned.
03
Full AML/CFT compliance without a protocol-level admin key
Compliance runs through the Financial Intermediary boundary. DDUSD, LLC possesses three compliance capabilities through co-signature authority and FI-layer coordination — covering the GENIUS Act's full set of lawful order verbs for the custodial population — without requiring an administrative key over self-custody wallets.
Structural comparison

DDCP vs. every other digital currency architecture

CBDC USDC / USDT DDCP / DDUSD
Protocol-level freeze Yes Yes Absent by design
Self-custody wallet seizure Yes Yes Impossible by design
Amount & balance privacy No No Default on
Judicial process required to restrict No No Yes
Full AML/CFT compliance capability Yes Yes Yes — without admin key
Government endorsement required Yes Implicit No
Public record

Working papers and regulatory filings

All architecture documents, regulatory comments, and working papers are published at github.com/ddcprotocol. A sophisticated reader can verify every claim.

Manifesto Why we built DDUSD: the case against programmable financial control The foundational argument. The Canadian bank freeze. The design position on financial privacy, unconditionality, and value preservation. Technical Architecture DDCP Architecture Technical Overview No-freeze architecture as structural fact. Confidential Balances Token Extension. Financial Intermediary compliance boundary. Solana deployment and Future Architecture Evolution. OCC Comment  ·  Filed May 1, 2026  ·  OCC-2025-0372-0257 Comment on GENIUS Act PPSI Framework Argues that the GENIUS Act freeze requirement, read to require protocol-level override, creates the CBDC architecture EO 14178 was designed to prevent. OCC Supplementary Comment  ·  Filed May 20, 2026  ·  OCC-2025-0372-0349 Supplementary Comment — ROAD Act, CLARITY Act, and Architectural Pluralism Addresses the ROAD Act and CLARITY Act frameworks, the two-prong reasonable particularity analysis, and the architectural pluralism argument. OCC Second Supplementary Comment  ·  Filed June 2026  ·  Docket pending confirmation Second Supplementary Comment — Reasonable Particularity Standard Argues that a blockchain address does not satisfy the reasonable particularity standard required to identify the subject of a lawful order under the GENIUS Act. Full Regulatory Record  ·  7 filings  ·  5 dockets Complete GENIUS Act Comment Record OCC (OCC-2025-0372)  ·  Treasury (RIN 1505-AC90)  ·  FDIC (RIN 3064-AG19)  ·  FinCEN/OFAC (FINCEN-2026-0100)  ·  FinCEN (RIN 1506-AB72). Full index at github.com/ddcprotocol/working-papers.