Who holds the keys

YOUR MONEY What no one can do

No one can touch your deposit. When you park funds, the backing sits in the Aave lending pool and your withdrawal is yours alone. The contracts have no drain, sweep, or rescue function — there is no admin path to your principal. This is fork-tested, and the source is public.

LOCKED FOREVER Already given up, on-chain

• The 20 launch liquidity pools. The manager holding the network's launch liquidity had its withdraw switch thrown permanently — those pools can never be pulled out, and their trading fees only auto-compound back into the locked liquidity. Proof: renounce transaction · manager on BaseScan.
• The CEN token itself. No owner, no mint function, no tax, fixed supply — verify. It can never be inflated or changed.

STILL HELD Permissions on the CEN contracts — and their revoke status

One operational wallet — 0xE2a4A8b9d77080c57799A94BA8eDeb2Dd6e0aC10, run by the founder's automation — still holds these powers over the CEN contracts. None of them can move your deposits, unlock the pools, or create CEN tokens. Each has a one-way revoke that we throw once its tool has proven it works live:

• Re-point where harvested yield flows (which cause vault, which pool) on the 15 endowments — until each sink is frozen. Revoke: after the first live harvest proves each leg routes correctly.
• Manage the keyed allowlist on the deposit-receipt tokens (add/remove the backend contracts allowed to mint/redeem). Revoke: once the deposit + deepen tools are wired and proven.
• Seat founding members — an owner-mint on the founder NFT to help onboard the first 100. Revoke: after the founding cohort is seated.
• Tune governance settings — the humanity-check keys and the passing score. Revoke: handed to the community's on-chain timelock as membership grows.
• Administer the public deposit vaults — admin key live, network/cause sinks set-able, not yet frozen. Still no path to deposited principal. Revoke: after the vaults' yield flow is proven live.

The network also runs automated re-balancers that keep each deposit receipt tradable at its backing value. They trade only deposit receipts against their backing asset — they never trade CEN.

FAIR LAUNCH What the CEN is

CEN launched fair: 100% of the supply went straight into 20 liquidity pools at launch — 5% into each. No sale round, no pre-mine, no allocation set aside for the team, no founder bag. The 20 pools pair CEN against 15 endowment tokens + 2 legacy community tokens (MfT, RWI) + 3 blue chips (ETH, cbBTC, USDC), all renounce-locked, fees auto-compounding into the lock. That — the 20 pools and the contracts above — is the CEN, and it's what we promise and are responsible for. What the operator or anyone else buys, holds, or builds on top afterward is ordinary market and community activity, not part of the project's promise.

THE PLAN Control shrinks, and we publish it

The commitment: less control over time, never more. The pools and the token are already locked forever. Every remaining permission above gets a one-way revoke, thrown as each tool proves it works live — we revoke what we no longer need, exactly as it's proven — and every revoke transaction is published here, so you never have to take our word for it.

CEN is humanity-weighted and renounce-capable — governance weight comes from proving you are a real person, and the admin keys are being retired on-chain. We are early and honest about it rather than claiming to be finished.