Blockchain is not the source of truth — our verified accounting is. The chain is the transparency layer: immutable ownership, transfers, retirement, and pro-rata revenue distribution.
Our carbon accounting is the source of truth, validated by methodology and auditors. The blockchain just makes ownership, transfer, retirement, and revenue distribution publicly verifiable — and impossible to silently rewrite.
Every batch's audit hash, methodology version, and tokenization tx are publicly verifiable on-chain.
Once retired, credits are burned. No silent resale, no double-counting, no rug-pulls.
Revenue distribution contract splits sale proceeds across drivers by verified net contribution.
Mint, transfer, retire batches with metadata URI. Token ID = batch ID hash. Prevents transfer of retired credits.
List tokenized credits, escrow payment, transfer to buyer. Routes platform fee + driver reward pool.
Burns the token amount. Emits Retirement event with reason, certificate ID, timestamp. Resale impossible.
Receives sale proceeds. Computes per-driver pro-rata share by verified net CO₂e. Stablecoin payout.
Each credit batch has an IPFS-pinnable metadata URI containing the full accounting story — gross savings, every deduction, methodology version, audit hash, and registry reference. Auditors can verify directly from chain data.
{
"batch_id": "65f3a2…",
"vintage": "2026-Q1",
"geography": "US-CA",
"methodology_version": "v1.0",
"total_net_co2e_kg": 7050,
"gross_co2_avoided_kg": 10000,
"ev_grid_emissions_kg": 2500,
"tire_penalty_kg": 350,
"other_penalties_kg": 100,
"verification_status": "verified",
"registry_reference": null,
"audit_hash": "0x9c…ff21",
"contributors": 4128,
"issued_at": "2026-02-27T18:42:00Z"
}Privacy by design: GPS routes, KYC, and payment details remain encrypted off-chain. Only what needs to be verifiable goes on-chain.
All payable functions wrapped to block reentrancy attacks.
Role-based mint/list/retire/distribute permissions. Multisig-ready.
Emergency pause on Marketplace and RevenueDistribution.
Mint, transfer, retire, distribute all emit indexed events for off-chain indexing.
Contracts handle batch IDs and tons only — never user identity or GPS.
Hardhat suite covers mint, transfer, retire, fee routing, reentrancy guards.