tesseract

Features

Atomic composability, enforced in code, on the rollup.

Tesseract is a deliberately small atomic-composability protocol: seven Vyper contracts and one Rust relayer that give agents and DeFi all-or-nothing cross-chain execution. Every capability below lives in the base layer — not in a multisig, a validator quorum, or an optimistic dispute window. See how it works for the full lifecycle.

Commit-reveal MEV shield

Every swap is buffered as a hash commitment first and revealed only after the next block. Searchers, sequencers, and sandwich bots see nothing useful in the mempool — your trade lands at the price you signed for, not the price someone reorganised the block for.

Atomic swap groups — intent settlement

Express a cross-chain intent as one atomic group: a multi-leg trade across three rollups either executes everywhere or refunds everywhere. The TesseractBuffer contract enforces group atomicity at the protocol layer, so an autonomous agent gets an all-or-nothing outcome — partial fills, stranded collateral, and half-finished cross-chain routes simply cannot happen.

Built for autonomous cross-chain agents

Agents that route capital across many L2s at once cannot afford a leg that lands on one chain and reverts on another. Tesseract gives them a single primitive — commit the group, get resolve-everywhere-or-refund-everywhere — so an agent submits one intent and settles a deterministic outcome, not a pile of independent bridge transactions each with its own failure mode.

Flash-loan resistance, built-in

A mandatory 2-block resolution delay (configurable up to your chain finality) makes single-block flash loan exploits structurally impossible. Combined with role-gated resolution and a circuit breaker after 50 consecutive failures, the buffer hardens the surface attackers usually target.

Rust relayer with chain-aware finality

A high-throughput Rust relayer monitors 4+ chains in parallel over WebSocket with HTTP failover, tracks per-chain confirmation rules, and recovers stuck nonces automatically. Auto-scales 2–10 instances on CPU and persists state in PostgreSQL — not in someone's memory.

No bridges. No wrapped IOUs.

Tesseract coordinates native swaps directly on each rollup. Users hold real assets, not bridge receipts. There is no honeypot multisig, no canonical-vs-wrapped fragmentation, and no $600M failure mode waiting to be exploited.

Order book + partial fills

AtomicSwapCoordinator gives makers and takers a real on-chain order book with configurable slippage tolerance and partial fill support. Settle 500 USDC of a 1000 USDC order without forcing the entire trade through.

On-chain governance & staking

The TESS token powers protocol governance, fee discounts up to 50%, and staking rewards from 5% to 15% APY based on lock duration. Fees flow through an on-chain FeeCollector — transparent, auditable, no opaque off-chain treasury.

At a glance

The capability sheet.

The parameters that matter, straight from the open-source contracts. Anything marked configurable is a governance-set on-chain value, not a marketing claim.

EthereumPolygonArbitrumOptimismBase
Capability Detail
Commit-reveal buffering keccak(payload‖secret) commitment, revealed one block later
Minimum resolution delay Default 2 blocks, configurable up to chain finality
Atomic swap groups Shared swap_group_id — resolve everywhere or refund everywhere
Deadline window 5–300 seconds, configurable per swap
Order book + partial fills AtomicSwapCoordinator with configurable slippage tolerance
Circuit breaker Auto-halt after 50 consecutive failed resolutions
Role-gated resolution BUFFER_ROLE / RESOLVE_ROLE / ADMIN_ROLE + emergency admin
Relayer redundancy WebSocket monitoring with HTTP failover, 2–10 auto-scaled instances

See the features in a real flow.

Walk the commit → reveal → resolve lifecycle, or clone the repo and run the 135-test suite yourself.