In ancient Greece, when a hero was consecrated, a Heroon was built — a permanent shrine, bound to one name, forever.
On Solana, every symbol deserves its Heroon. The provenance layer for Solana assets.
Every launch platform accepts these defaults. Heroon does not. What follows is the protocol that replaces them.
Every ticker enters the registry through a public auction. Anyone can open one. Anyone can bid. The winner becomes the Genesis creator and earns a permanent onchain right to mint the token bound to that symbol. The countdown is part of the product.
Every Genesis token is recorded against a canonical symbol in the Heroon registry. Browse by ticker. Verify by mint. The pairing of name to mint to creator is derived from program- owned accounts — not a database we control.
The Genesis Verified seal verifies origin, not value.
Heroon hosts two fundamentally different kinds of assets. The market never confuses them. Verified Genesis assets sit inside the canonical registry; Open assets sit alongside the market, fast and ephemeral. The platform tells you which is which at first glance.
Auction-born. Registry-backed. Bound to a canonical symbol forever, with a permanent Genesis creator and a public provenance trail. Verified Genesis assets are historical records — not just markets.
Anyone can launch. No symbol auction, no registry record, no Genesis creator. Open Assets trade on Heroon alongside the canonical class — fast, alive, ephemeral. They never wear the Genesis Verified seal.
Open assets are markets. Genesis assets are history.
A passkey for identity. A canonical symbol won at auction. A bonding curve that migrates to Raydium without a human in the loop. Every step is a single on-chain instruction — no multisig, no off-chain orchestrator, no custodian holding the keys.
Create a wallet with a username + a passkey (TouchID, FaceID, Windows Hello, hardware key). The Solana keypair is AES-GCM encrypted under a 32-byte PRF secret that never leaves your authenticator. No extension, no seed phrase on a post-it.
Symbols live in an onchain registry. To launch one you open a public Genesis Auction. The winner becomes the Genesis creator. Once the token is minted the symbol closes — it cannot be reissued, re-auctioned, or freed up by anyone.
When the curve fills its threshold, a single instruction transfers the vault reserves, initialises a Raydium CPMM pool, and closes the LP exit atomically. Post-grad trades route directly to that pool — no middleman surface, no creator-controlled LP exit.
Every Genesis token opens on the Heroon curve. Constant-product math over virtual base + quote reserves means a real price from the first lamport — no silent LP seeding, no waiting room. Progress toward graduation is visible on-chain and in the UI.
When the curve hits its SOL threshold, one instruction drains the market vaults, opens a Raydium CPMM pool with those reserves, and closes the LP exit atomically. Permanent liquidity on a public AMM — no admin, no unlock window, no creator-controlled LP exit.
The token trades on Raydium under Raydium's rules. Every Solana aggregator can reach it. The Heroon token page keeps the Genesis Verified seal, the chart, the trust stack — the swap form just calls the pool directly.
Auctions ending. Curves filling. Migrations landing on Raydium. The feed is part of the product — anticipation, countdown tension, social proof, all in one surface.
Onchain identity is not a one-time stamp. It accumulates. Every launch under a wallet, every settled auction, every graduation adds to a permanent record. The roadmap moves in one direction.
A public history of every market a wallet has launched — what graduated, what stalled, what got abandoned. Provenance carries forward across launches.
The full timeline of a Genesis token from auction open to migration, replayable on a public surface. Every bid, every state change, every fee.
Browse the registry by creator, by date, by ticker class. A canonical index of every symbol ever born on Heroon.
Optional sybil-resistant identity attached to a wallet. Genesis Verified status for symbols. Verified status for the human behind the keys.
Public dashboards for the protocol — symbols minted, total volume, graduation rates, anti-snipe extensions fired. Numbers that prove the system works.
Integrate, fork, audit. The full Anchor program and IDL live on GitHub. The program is deployed on devnet and verifiable on Explorer.
1// Anchor program, deployed on Solana devnet2program_id = 3thUuqi2Pob3hzU2rKFGyCXzb3t214bYKjCiF2FsjKp434// One market PDA per (base_mint, quote_mint) pair5e (market_pda, _bump) = Pubkey::find_program_address(6 &[bmarket, base_mint.as_ref(), quote_mint.as_ref()],7 &program_id,8);910// Bonding curves graduate by CPI into Raydium CPMM.11// LP is burned in the same transaction — no unlock path.12u nu CurveType {13 // 0, 1 reserved for legacy inventory markets14 Bonding = 2, // fair launch → graduates to Raydium15}1617u nu LaunchPreset {18 Degen = 0, // fast curve, low cap, minimal creator lock19 Fair = 1, // linear-ish curve, longer creator lock20 Community = 2, // balanced; default recommendation21 Custom = 255, // explicit params22}3thUuqi2Pob3hzU2rKFGyCXzb3t214bYKjCiF2FsjKp4The Solana keypair is AES-GCM encrypted in your browser under a 32-byte secret derived by the WebAuthn PRF extension. Heroon stores ciphertext for cross-device login. The unlock key lives in your authenticator.
Migration to Raydium opens the CPMM pool and closes the LP exit in the same transaction. No creator-controlled liquidity pull, no human deciding when to unlock.
Market accounts are deterministic PDAs. Curve params, graduation threshold, and launch profile are written once at create time — the program has no instruction that mutates them later.
Program ID, market PDAs, registry records, Raydium pool state — every address the UI shows is derivable and inspectable on Solana Explorer, Orb, and any DAS-aware client.
If you can find a dishonest answer below, open an issue. We'd like to know.
When you create a wallet, the browser asks your authenticator (TouchID, FaceID, Windows Hello, security key) to register a passkey and emit a 32-byte PRF secret for a wallet-specific salt. We derive an AES-GCM key from that secret via HKDF, encrypt your Solana keypair with it, and store the ciphertext in localStorage. Each unlock re-derives the key from a fresh biometric prompt — your private key is only plaintext in memory while you're actively signing.
Yes. On wallet creation we push the encrypted blob + the passkey credential handle to Heroon's server (no private key, no AES key — just ciphertext your passkey can decrypt). On the new browser, type your username, press Log in: we fetch the blob and your authenticator decrypts it locally. This works as long as the passkey itself is reachable on the new device — platform passkeys (iCloud Keychain, Google Password Manager) sync automatically; hardware keys need to be plugged in.
If you still have your passkey reachable on another device (synced via iCloud Keychain or similar), just log in there. If not, use the backup raw secret you saved at create time — Recover imports it on any device and registers a fresh passkey.
A public auction for an available symbol in the registry. Anyone can open one; anyone can bid. The auction runs for thirty minutes with a last-minute anti-snipe extension. When it settles, the highest bidder becomes the Genesis creator and earns a permanent onchain right to mint the Genesis token for that symbol. Once minted, the symbol closes forever — it cannot be reissued or re-auctioned.
Every market has a SOL threshold encoded in its account. When the bonding curve hits that threshold, a single instruction transfers the vault reserves, opens a Raydium CPMM pool with those reserves, and closes the LP exit atomically. No human in the loop, no migration window, no creator-controlled LP exit. From that point on the token trades on Raydium under Raydium's rules.
The creator. Raydium charges ~0.15 SOL to open a CPMM pool; the Heroon graduation instruction pays it out of the signer's wallet, and that signer is the market creator. This keeps the bonded reserves fully available for the pool without Heroon siphoning a fee cut.
Yes. The token page swap form keeps working: on mainnet it routes through Jupiter (best route across all AMMs), on devnet it calls Raydium CPMM directly — same UX, native SOL in, native SOL out. The Genesis Verified seal, the chart, and the trust stack stay attached to the token across both stages.
No. The Genesis Verified seal verifies origin, not value. It proves that a token is the canonical Heroon Genesis asset for that symbol — that the symbol was won at auction and bound to the mint forever. It does not mean the asset is safe, profitable, endorsed, or risk-free. Always do your own research before trading.
Not yet. Heroon is live on Solana devnet while we harden the graduation path and UX. A formal audit is a prerequisite for mainnet; we will publish the report when it exists.
The Anchor program and IDL are public on GitHub. Derive the market PDA from the base mint, pick a launch profile, open a Genesis Auction to win the symbol, and bind the claim at mint time. Graduation is automatic once the threshold hits. The dashboard app is also open source — fork it.
Register a passkey, win a symbol at auction, mint the Genesis token. The curve is fair from the first lamport. When the threshold hits, the market migrates to Raydium under protocol rules — no human in the loop, no creator-controlled LP exit.