Developers behind the DOM protocol say a full audit has confirmed its fixed supply, while also identifying governance gaps that are now set for a rapid patch.
The review focused on two core components, dom_token and dom_staking, with the aim of verifying whether the widely stated cap of one million tokens holds under all conditions. According to the team, the answer is yes, with the limit enforced at two separate levels within the system.
At the token layer, a maximum supply setting prevents any minting beyond the defined ceiling. At the staking layer, emissions are pre-set across seven epochs, adding up to the same total. Together, these controls are designed to ensure that new tokens cannot be created beyond the fixed amount.
The audit also confirms that only the staking mechanism can trigger minting. Other parts of the ecosystem, including marketplace and gaming components, are blocked from doing so. Developers say this structure removes the possibility of manual intervention, even from the original deployer.
Despite the confirmation on supply, the audit highlighted weaknesses in governance controls. Certain functions within the staking system lack caller checks, meaning external actors could interfere with how tokens are distributed or redirect emissions. While these issues do not affect the overall supply cap, they could disrupt operations or alter the timing of distribution.
The team has disclosed these findings ahead of releasing a fix, with updates expected within 48 hours. The proposed changes are limited to adding access controls to affected functions. By flagging the issues publicly before deploying a patch, developers say they are aiming to maintain trust through transparency.
Attention is also turning to a planned shift in control over the token contract. At the end of the first emission phase, control is expected to be transferred to a so-called “blackhole” address, which cannot authorise any further changes. If implemented as described, this would prevent upgrades or modifications to the token contract, effectively locking in the supply rules permanently.
Alongside the audit, the team has launched an updated version of its Forge Wheel feature on the Internet Computer network. The revised system introduces a burn mechanism, where a portion of tokens is permanently removed before each interaction. Developers say this approach is intended to reduce circulating supply over time while supporting in-platform incentives.
The update also separates gaming features into dedicated sections and introduces new mechanics, including on-chain rewards tied to user activity. Existing data, such as past spins and rewards, has been carried over into the new version.
Looking ahead, the roadmap includes additional features such as competitive staking-based games and reward pools linked to token burning activity. These additions aim to increase engagement while reinforcing the protocol’s core mechanics.
While the project continues to build out its ecosystem, the audit findings place equal focus on security and structure. Fixed supply models are often central to crypto projects, but their credibility depends on implementation and oversight.
By confirming the cap while acknowledging areas for improvement, the team is positioning the protocol as both technically constrained and open to scrutiny. Whether that balance holds will depend on how quickly fixes are delivered and how the system performs as more users engage with it.
Dear Reader,
Ledger Life is an independent platform dedicated to covering the Internet Computer (ICP) ecosystem and beyond. We focus on real stories, builder updates, project launches, and the quiet innovations that often get missed.
We’re not backed by sponsors. We rely on readers like you.
If you find value in what we publish—whether it’s deep dives into dApps, explainers on decentralised tech, or just keeping track of what’s moving in Web3—please consider making a donation. It helps us cover costs, stay consistent, and remain truly independent.
Your support goes a long way.
🧠 ICP Principal: ins6i-d53ug-zxmgh-qvum3-r3pvl-ufcvu-bdyon-ovzdy-d26k3-lgq2v-3qe
🧾 ICP Address: f8deb966878f8b83204b251d5d799e0345ea72b8e62e8cf9da8d8830e1b3b05f
Every contribution helps keep the lights on, the stories flowing, and the crypto clutter out.
Thank you for reading, sharing, and being part of this experiment in decentralised media.
—Team Ledger Life
Community Discussion