No pooled funds
Donations are addressed to project wallets the platform does not control. There is no omnibus account and therefore no honeypot to steal or freeze.
Whitepaper · v1.0 · August 2026
A permissionless, non-custodial funding board on Cardano. Projects publish their own wallet, backers send ADA directly, wallet to wallet, and the platform never holds a single lovelace.
Abstract
Posada Fund is a public board where anyone can list a project and receive support in ADA. A creator connects a Cardano wallet, proves they control it, publishes the wallet they want to be paid to, and goes live. Backers send ADA straight to that wallet. No account holds the funds, no escrow sits in the middle, and no percentage is skimmed from what supporters give.
The platform's only economic touchpoint is a single flat fee paid once, at listing time, to put a project on the board. Everything after that is wallet-to-wallet and fully visible on-chain. This document sets out what Posada Fund is, what it deliberately is not, and the architecture that makes those claims true rather than aspirational.
01 · Problem
Conventional crowdfunding platforms take custody of every contribution, hold it, take a cut, and can freeze, reverse, or gate it. The backer's money passes through a company that can fail, change its rules, or simply decide a campaign no longer fits. "Where did my money actually go?" is a question the platform answers, not the chain.
Cardano has treasury and grant mechanisms, but no simple retail-facing door: a place where someone who just wants to back a cause can do so directly, and then verify for themselves that the funds arrived. Posada Fund is that door.
02 · Boundaries
These are not disclaimers bolted on after the fact — they are properties enforced by the architecture below. There is no code path in which the platform can move a backer's donation.
03 · How it works
CIP-30 browser interface.CIP-8, keyed on the wallet's stake credential. This is the login — no email, no password. The stake credential is stable across a wallet's addresses, so the owner can always return.04 · Identity
Posada Fund has no user table of emails and passwords. Identity is the Cardano wallet itself, established through a CIP-8 signature and anchored on the stake credential rather than a payment address — a payment address can change and would otherwise lock an owner out on return.
Two roles are kept distinct. The owner wallet signs in and manages the listing. The donation wallet is the published payout address; it is frozen on the first donation, so the address backers trusted cannot be swapped out from under them. The two can be the same wallet, with a shortcut for that common case.
05 · Architecture
The non-custodial claim holds because there is nowhere for donations to accumulate and no key with which the platform could move them.
Donations are addressed to project wallets the platform does not control. There is no omnibus account and therefore no honeypot to steal or freeze.
Listing fees go to addresses derived per-listing from an extended public key (PLATFORM_FEE_XPUB). The service can see and verify fee payments but cannot spend from a private key it never holds.
Chain data comes from Koios. Fee payment and funding progress are read from the ledger, not from platform-internal bookkeeping.
The fee quote is persisted and enforced on the server. A listing cannot publish until its fee is confirmed on-chain — it is not a client-side check that can be skipped.
Actively-viewed listings refresh their on-chain total in near-real-time over a server-driven stream, within fixed provider budgets.
Next.js, Prisma, and Postgres, with a scheduled worker, running in containers behind Caddy on dedicated infrastructure.
06 · Transparency
Because donations land at a published on-chain address, any backer can confirm — independently, in any explorer — that their ADA arrived and how much a project has raised. The platform is not the source of truth about the money; the chain is.
Two obligations keep a listing honest over time. The required video puts a real face and a specific ask behind each cause at the outset. The monthly report keeps the creator accountable afterward, and the dark-on-lapse rule means a project that stops reporting stops being seen. Visibility is earned continuously, not granted once.
07 · The cause funnel
Posada Fund is built to be understood by people who have never touched a blockchain. Someone backs a cause they care about, then naturally asks where the money went — and the honest, verifiable answer is on-chain. That question is the funnel: transparency is the feature that turns a first-time backer into someone who understands why this runs on Cardano at all.
To widen that door, a card on-ramp is planned so that non-crypto supporters can back a project with familiar payment methods, with the ADA reaching the project wallet on the other side. It is in development, pending the legal and compliance groundwork required to offer fiat payments responsibly. The voice here is deliberately distinct from treasury-proposal language: this is for the supporter, not the committee.
08 · Economics
The platform charges a single flat listing fee, paid once when a project is listed. It does not take a percentage of anything supporters give — a project that raises a large amount and a project that raises little pay the same fee. Because donations never route through the platform, there is nothing to skim and no per-transaction margin. The model is a board with an entry fee, not a payment rail that meters the flow.
09 · Ecosystem
Posada Fund sits alongside the other Posada products — Lovelace (privacy-first dating), Byron (decentralized social), and Shelley (encrypted messaging) — with $LILY as the ecosystem's native token. The board's first live listing is Lovelace itself, raising funds for the $LILY smart-contract audit: the platform funding the security of its own ecosystem, in public, on the same terms as anyone else.
10 · Roadmap
The board is running. Wallet-as-identity, per-listing HD fee derivation, server-enforced fee gate, on-chain funding counter, publish flow, and the first real listing are all deployed at fund.posada.io.
Card on-ramp. Fiat-to-ADA backing for non-crypto supporters, pending the legal and compliance groundwork to offer it responsibly.
Deeper ecosystem ties. Tighter integration with the wider Posada products and $LILY as those platforms mature.
11 · Security
The most important security property is structural: there is no custodial balance to compromise. An attacker who fully controlled the platform still could not move a backer's donation, because those funds only ever exist at wallets the platform has no key for, and the fee keys are watch-only.
This design places responsibility where it belongs. Backers send funds directly and at their own discretion; a creator's published wallet is theirs to secure. Posada Fund makes the flow transparent and the parties accountable — it does not, and by design cannot, act as a safety net for either side.