Two funded sides.
One settlement.
Bonded is an interface to the shared Solana Foundation DvP program. It records a token-for-token trade, holds each leg in its own escrow and settles both together.
Agree and verify
The seller and buyer agree the exact token mints, amounts, expiry and a third settlement wallet. Bonded creates trades with proceeds going to the named parties' own associated token accounts. Creation is permissionless and moves no tokens. A record naming your wallet is not proof that you agreed to it. Read the onchain terms before funding.
This version of Bonded supports original SPL Token mints. Token-2022 mints and their extensions are not enabled in this interface, even though the underlying DvP program supports some of them.
Fund each leg
The seller sends the agreed asset tokens to one escrow; the buyer sends the configured payment token to the other. Neither deposit settles the trade on its own. Anyone can send tokens into an escrow, so a deposit by itself is not proof of the sender's consent. Bonded checks stored participants, mints, destinations and the current program before constructing transactions.
Settlement wallet
A third wallet chosen by the parties is the only signer allowed to settle. It must differ from the seller and buyer. It can complete the exchange or cancel it. The program fixes the recipients in the stored trade, so the settlement wallet cannot choose new recipients at settlement. It can delay or decline settlement. No project-operated settlement service or automatic keeper is included.
One settlement transaction
Once both escrows hold at least the agreed amounts and the trade has not expired, the settlement wallet can exchange both legs atomically. Either both transfers succeed or the transaction fails. Any surplus goes back to its leg's original party. For an illustrative trade of 100 SAMPLE for 240 USDC, the buyer receives 100 SAMPLE and the seller receives 240 USDC.
Reclaim, reject and recover
Either party can reclaim its own funded leg before settlement, even before expiry; the trade stays open and can be funded again. Either party can reject the whole trade, refunding both funded legs and closing the trade. The settlement wallet can cancel with the same refund outcome. After expiry, settlement is blocked but exits stay available. There is no performance bond, forced delivery or late-delivery compensation.
When a late deposit recreates an escrow after closure, the named party can recover that leg. Bonded retains the trade's public seed data in this browser after you load it, so the recovery controls remain available on this device. Keep the trade address and terms. Clearing browser storage removes this local convenience record, not your onchain rights.
Fees and account rent
Bonded adds no protocol fee to these trades. Solana transaction fees and the rent-exempt account balances still apply. Creating a trade pays for its record, two escrows and a zero-data nonce marker. Destination token accounts may need separate creation. The marker is permanent. Released rent goes to the wallet signing the closing action: the settlement wallet for settlement or cancellation, or the participant for rejection. It does not necessarily return to the wallet that originally paid for creation.
Program authority and risks
The DvP program is maintained by the Solana Foundation; its upgrade authority is shown above. It is upgradeable, and Bonded does not control that authority. The app pins the observed executable hash and stops transactions if the published program differs. The upstream program has a Cantina audit; this Bonded interface has not been independently audited. An upstream audit does not cover this app, every mint or a later program upgrade.
Issuer mint and freeze authorities, incorrect terms, compromised wallets, network failures and defects can affect the trade. The program checks captured mint authorities at settlement. Either party can withdraw before settlement, so a funded record does not guarantee completion or a future price. Bonded does not enforce delivery of offchain goods or services.
Network
The current interface is on Solana Devnet. Test tokens have no monetary value. The shared program also exists on Mainnet; Mainnet activation is a separate configuration step and requires no new program deployment.