Fixed stablecoin gas. Five-lane execution. Agent-native infrastructure. Built for humans, businesses, and the autonomous agents that serve them.
$0.002 for a token transfer. Today, tomorrow, and when FRS is worth $1,000. No auctions, no spikes, no volatility.
Five execution lanes with independent pricing. A memecoin frenzy in Lane E never touches your Lane A transfers.
PolicyGuard spending limits, nonce domains for parallel transactions, native account abstraction, and x402 micropayments. Purpose-built for autonomous agents.
Token appreciation makes gas expensive, which drives away the users who created the appreciation. The cycle resets every bear market.
Every parallel execution engine eventually crashes into the same two walls. Shared mutable state and the EVM itself. We eliminated both.
| Approach | Used By | Peak Speedup | Why It Breaks |
|---|---|---|---|
| Frame Barriers | Batch-parallel schemes | 1.8x | N-1 synchronization barriers cap parallelism |
| Multi-Version State | Database-style MVCC | 0.16x | Lock contention in version chains — slower than sequential |
| Block-STM | Aptos | 0.4x | 80-90% wasted execution at any real contention |
| DAG + Work-Stealing | Research prototypes | 3.8x | Shared-state contention during write merge |
DashMap, ConcurrentHashMap, AccountsDB — every chain uses some variant of shared mutable state during execution. Under parallel writes, threads compete for shard locks. This caps scaling regardless of how clever the scheduling is.
A native ETH transfer through revm costs ~2us. The same operation as pure Rust — two HashMap lookups and two writes — costs ~200ns. For known operations, we pay 10x overhead for interpreter dispatch, gas metering, and memory management.
None of them question two axioms: all transactions must execute through a VM, and gas must be priced in a volatile token.
80% of agent transaction volume comes from fewer than 20 patterns. ERC-20 transfers, approvals, payments. Running them through a general-purpose stack machine interpreter is an engineering choice we stopped making.
Certified Native Paths execute registered contract patterns as pure Rust functions — deterministic, formally verified, producing identical state transitions to the EVM.
No transaction modifies shared state during execution. Every lane reads from an immutable Arc<HashMap> snapshot — O(1) creation, zero locks, zero contention.
Writes are captured as write-intent logs and applied in a deterministic commit phase using optimistic concurrency control. Conflicts are detected by read-set validation and resolved by re-execution in global tx order.
This is fundamentally different from every other approach. Aptos speculatively writes to shared state and rolls back. Solana locks accounts. Monad processes sequentially. Ferros never contends.
Every block, 1% of Lane A transactions are randomly re-executed through the EVM and compared against the native result. If they ever diverge, the native executor is automatically deactivated, the registrant is slashed, and affected transactions are re-executed through the EVM. Probabilistic audit adds <1% overhead while catching bugs within a few blocks.
Transactions are classified by complexity, executed in parallel across isolated lanes, and committed in global order. Certified native lanes are 10-50x cheaper. Lane E guarantees permissionless EVM access for anyone.
ERC-20 transfers, approvals, payments. Bypass the EVM. Pure Rust. Formally verified.
Native token transfers and protocol ops. Minimal overhead. Direct state access.
DEX swaps, lending, complex DeFi. DAG-scheduled parallel execution via revm.
Multi-step operations, complex DeFi compositions. Certified native execution for advanced patterns.
Full EVM compatibility. Deploy anything — Solidity, Hardhat, Foundry. 15% guaranteed capacity. The permissionless innovation lane.
Every transaction passes through a 5-stage pipeline. Validation is complete before execution begins.
Format, chain ID, fee mins, expiry
EOA fast path or Smart Account sandbox
Spending limits, velocity caps, whitelists
Parallel across A/B/C/D/E lanes
OCC validate + apply in global order
State Gravity: a single canonical state root over all state, proof-carrying cold reads, and fair pricing. No state expiry. No user-provided Merkle proofs. No data loss.
When a transaction touches dormant state, the proposer includes a Merkle witness (key + value + proof) in the block body. Validators verify the witness against the parent state root — no live archive dependency during execution. One-time thaw fee of $0.005 per key, then the state is hot again.
Creating a new storage slot costs $0.005 ($0.002 permanent + $0.003 refundable bond). Delete the slot later and get $0.003 back. This creates a natural incentive for state cleanup — without forcing it. Active users pay nothing extra. Only returning dormant users pay the thaw fee.
Agents need guardrails that survive code bugs and key compromises. Ferros enforces them at the protocol layer — before execution, not during it.
Spending limits, velocity caps, whitelists, business hours, and selector gates — enforced at the protocol level before execution begins. Zero gas consumed on rejection.
Policies cannot be removed by the wallet owner alone. Removal requires multi-sig authorization + timelock. A compromised key cannot silently disable spending limits.
Not ERC-4337 bolted on as a smart contract. Genesis-level architectural decision. Every account has a validation scheme dispatched through a layered pipeline.
Smart Accounts run validation in a restricted sandbox: own storage only, no external calls, no environment opcodes, no state writes. Prevents validation DoS attacks that plague ERC-4337.
Standard nonces force strict ordering. An agent sending 100 independent transactions must serialize them. If tx #50 fails, txs #51-99 are stuck.
Nonce domains solve this: each account has multiple independent nonce sequences. An agent sends transfers on domain 0, governance votes on domain 1, oracle updates on domain 2 — all in parallel, none blocking each other.
Lane A native executors are not trusted blindly. Each template is pinned to a contract codehash, verified against storage invariants, and must pass millions of differential tests (native vs. EVM producing identical state transitions).
Registrants stake collateral. If probabilistic audit detects divergence, the template is deactivated and the registrant is slashed — automatically.
Gas denominated in stablecoins. Fixed pricing per lane. No formula connects the token price to gas cost. They are orthogonal.
| Transaction Type | Ethereum L1 | Solana | Base (L2) | Arbitrum (L2) | Ferros |
|---|---|---|---|---|---|
| Simple transfer | $0.50-$1.50 | $0.001-$0.005 | $0.001-$0.005 | $0.003-$0.01 | $0.001 B |
| ERC-20 transfer | $1.50-$5.00 | $0.001-$0.01 | $0.002-$0.01 | $0.005-$0.02 | $0.002 A |
| DEX swap | $3.00-$15.00 | $0.005-$0.03 | $0.005-$0.03 | $0.01-$0.05 | $0.01 C |
| Complex DeFi | $5.00-$50+ | $0.01-$0.10 | $0.01-$0.05 | $0.02-$0.15 | $0.05 D |
All prices are ranges under normal conditions and include typical priority fees. During congestion, Ethereum/Solana/L2 prices spike 10-100x. Ferros prices are fixed and denominated in stablecoins — max 4x surge at >80% capacity.
Every transaction fee is split at the protocol level. 40/50/10. Real yield from real revenue — not inflation.
Treasury auto-buy: 10% of all fees purchases FRS on the open market. Governance decides whether to hold, deploy, or burn. Creates consistent buy pressure without inflationary rewards.
FerrosBFT: a 2-phase pipelined BFT protocol built on HotStuff-2. O(n) happy path. Immediate-propose pipeline. No hand-waving on safety.
Leaders propose immediately on QC/TC receipt — no waiting for timeout intervals. The pipeline is self-sustaining: each committed block triggers the next proposal at network speed.
Finality requires 2 consecutive Quorum Certificates from ≥67% of validators. No single QC is treated as final. Provably safe under partial synchrony with f < n/3 Byzantine validators.
When a validator receives timeout messages for a view it already passed, it contributes its own timeout to help form a Timeout Certificate. Prevents deadlocks when validators join late or miss proposals.
Equivocation (double-voting) = full slash, provable on-chain. Missed slots = reputation penalty only. Proposer rotation + mandatory mempool utilization prevents sustained censorship.
3 validators with rotating leaders producing identical block hashes at blocks 100, 1,000, and 5,000. Stablecoin gas collection, fee distribution, and the full consensus pipeline are running end-to-end. 312 tests passing, zero warnings.
Software that moves money 24/7 on behalf of humans and businesses. Stablecoin gas means agents never need volatile tokens. PolicyGuard means they operate within guardrails the chain enforces. x402 micropayments are native.
500 employees paid every Friday. 500 Lane A transfers per payroll run.
Daily rebalance across 8 lending markets. 15-30 transactions per rebalance.
50,000 orders/day. Payment, fee routing, and merchant settlement per order.
200 agents, 500 trades each, 100,000 Lane C transactions/day.
*Solana prices fluctuate with congestion and priority fees. Ranges reflect normal vs. high-demand conditions.
Daily cost comparison for high-frequency agent operations.
| Chain | Daily Cost | Failed Tx Rate | Finality |
|---|---|---|---|
| Ethereum L1 | $12,000,000 | ~1% | ~12 min |
| Base (L2) | $120,000 | 1-5% | ~7 days |
| Solana | $6,000 | 15-75% | ~12.8s |
| Ferros | $48,000 | ~0% | <1s |
Ferros is not the absolute cheapest at base rate — but zero failed transactions, instant finality, and guaranteed cost predictability mean agents never need retry logic, timeout handling, or gas price monitoring.
HTTP 402 (Payment Required) is becoming the standard for agent-to-agent commerce. Ferros optimizes this exact flow: receive 402 → check PolicyGuard limits → sign → submit Lane A → receipt. ~200ns, $0.002. Every agent platform that adopts x402 becomes a Ferros user.
FRS is NOT required for gas. Users pay gas in stablecoins. Always. The token captures economic value through staking, governance, and protocol-level buybacks.
Vote on fee parameters, treasury allocation, template approval, and protocol upgrades. On-chain execution — votes are binding.
100,000 FRS minimum. Earn 40% of all fees in stablecoins. Real yield from real revenue — not inflation.
Any amount. Earn 50% of fees in stablecoins, weighted by commitment depth. Lock longer, earn more. Self-correcting yield floor — if FRS price drops, APY rises.
Stake FRS for higher throughput limits, lower latency, and gasless transaction quotas for agents.
A platform where useful technology is the point — and the economics reward everyone who makes it work.