Dragon Reserve Whitepaper

Abstract

Dragon Reserve is a gold account where anyone can verify the reserves and no one can see your balance. Every gram held in Dragon Reserve is backed by allocated physical gold in independent vaults, and the full reserve is published for anyone to check.

Balances live on a private ledger built on Dragonchain's hybrid architecture. The public sees one number, the total gold owed to holders, plus a proof that the vaults hold at least that much. Holders see their own balance and can prove facts about it, such as "I hold at least 100 g", without revealing the amount. We call these proofs Seals.

Dragonchain began inside Disney in 2014, built around one idea: keep business data private while proving its integrity in public. Dragon Reserve turns that idea into a product people use every day. It stays part of Dragonchain, and every ledger state is verified and anchored through Dragon Net.

The same building blocks, public totals and private positions, extend Dragon Reserve into a launchpad called the Hatchery. New projects raise through sealed bids, keep a gold-backed treasury anyone can verify, and gate access with Seals instead of exposed wallets.

The problem: trust or exposure

Today, holding gold forces a choice: trust a custodian you cannot check, or put your balance on a public chain where anyone can watch it. Neither is acceptable for an asset people buy precisely because they want safety and discretion.

Demand has never been higher. In 2025 total gold demand passed 5,000 tonnes for the first time (5,002 t, worth US$555bn), investment demand rose 84% to 2,175 t, and central banks bought a further 863 t. The gold price set 53 all-time highs during the year (World Gold Council (opens in a new tab)).

Custodial gold is private but blind. Banks, gold apps and funds keep your balance private, but you cannot check that your gold exists, that it is not lent out, or that the vault holds enough for everyone. You receive a statement and an occasional audit. Custodial platforms that held customer assets without verifiable reserves have failed before, and customers learned about the shortfall last.

Tokenized gold is verifiable but exposed. Gold tokens on public chains let anyone check the supply. They also publish every holder's balance and every transfer, forever. Wallets get labeled, tracked, copied and targeted, and a company's treasury becomes a public dashboard for its competitors.

The gap is a product that does both. Cryptographers showed years ago that a custodian can prove it is solvent without revealing customer balances (Provisions, 2015 (opens in a new tab)), and that a hidden amount can be proven to sit in a range without a trusted setup (Bulletproofs, 2017 (opens in a new tab)). Those tools are now fast enough to run on every block. Dragon Reserve puts them under a gold account.

From Dragonchain to Dragon Reserve

Dragon Reserve takes the hybrid design Dragonchain built in 2014, private data with public proof, and applies it to the asset where both matter most: gold. The technology stays. What changes is who it serves.

The design that fits. Dragonchain separates running business logic from verifying it. A business keeps its data on a private chain, and Dragon Net verifies each block through four further levels without reading the payload (Dragonchain docs (opens in a new tab)). That is exactly the shape a private gold ledger with public proof needs.

The new way. Dragonchain used to sell this architecture to enterprises as a platform. Dragon Reserve uses it to run one product end to end: a gold account, the Seal, and later a launchpad. Holders never touch the machinery. They see grams, proofs and a simple app.

Still part of Dragonchain. The Dragon Reserve ledger runs as a Dragonchain business chain, and every block goes through Dragon Net. Verification is paid in Dragons, the network's credits, bought directly or converted from Dragonchain's network token (Dragon Net (opens in a new tab)). As Dragon Reserve grows, so does verification work on Dragon Net.

Legal clarity. In April 2025 the SEC dismissed its civil enforcement action against Dragonchain with prejudice, so it cannot be brought again. The SEC noted that the dismissal was not based on an assessment of the merits (SEC (opens in a new tab)). The dispute is closed, and the team builds in the open.

Product overview

A Dragon Reserve account holds gold measured in grams, backed one to one by allocated bars, with a balance only the holder can see. Everything a holder does fits five verbs.

Anyone, holder or not, can open the public reserve page at any time. It shows the gold owed to all holders, the gold in the vaults, the full bar list and the latest public checkpoint. No login is needed.

Who it is for

• Savers who want real gold without a safe at home, a broker, or a statement they have to take on faith.
• Crypto holders who want a hard-asset reserve without putting their balance on a public block explorer.
• Businesses and DAOs that keep part of their treasury in gold and need to prove reserves to partners without showing the full position.
• New projects that launch through the Hatchery and want a treasury their community can verify.

How it works

Dragon Reserve runs on four layers: the Reserve holds the metal, the Ledger records who owns it, the Seal proves the two match, and the Anchor makes that proof public and permanent.

Only two things ever leave the private ledger: the total owed and the proofs. Balances, names and transfers stay inside.

One purchase, end to end

1. A holder confirms a 10 g purchase, and the app signs the request with the holder's key.
2. The ledger raises the holder's commitment by 10 g in the next block and returns a signed receipt.
3. The purchase is covered from the operating buffer, and the treasury desk orders replacement metal.
4. The new tree root raises the published total owed by 10 g. The buffer absorbs it, so the Seal still holds.
5. The Reserve Seal for that block proves the total owed is no greater than the gold held.
6. Dragon Net verifies the block without reading it, then checkpoints its hash on Bitcoin and Ethereum.
7. The holder's app checks its new Inclusion Seal: the 10 g are counted.
8. When the new bars arrive, the custodian signs the updated bar list and the buffer returns to its target.

The Seal

The Seal is Dragon Reserve's proof system: four kinds of proof that let anyone check the gold while every balance stays hidden. Each one answers a different question for a different reader.

How a balance is hidden

Each balance is stored as a commitment, a sealed envelope for a number. It hides the amount, binds the ledger to it, and can be added to other commitments without being opened.

Here b is the balance in milligrams, r is a random blinding factor, and G and H are fixed points on an elliptic curve (a Pedersen commitment). Adding every holder's commitment produces a commitment to the total, without revealing any single balance.

Each commitment also carries a range proof that its balance sits between zero and a set maximum. Without it, a hidden negative balance could quietly shrink the total.

Reserve Seal: solvency for everyone

1. The ledger arranges all account commitments in a Merkle sum tree. Each parent holds the sum of its children, so the root commits to total liabilities, L.
2. Dragon Reserve opens the root to reveal L, the total grams owed, and nothing else.
3. The custodians sign the current bar list. The fine gold in that list is the reserve, R.
4. The Seal publishes L, R, the bar list hash, the tree root and the custodian signatures, and proves that L is no greater than R.
5. The Seal is written into the ledger block, verified by Dragon Net, and checkpointed on public chains at L5.

The liability side updates with every block that changes a balance. The reserve side refreshes with each custodian attestation, at least daily, and is reconciled against physical audits.

Inclusion Seal: proof that you are counted

1. Your app receives the path from your leaf to the published root.
2. It opens your own leaf with your balance and blinding factor, then recomputes the path.
3. It checks that the root matches the latest Reserve Seal and that the Seal is anchored on public chains.

The siblings on the path are commitments, so the path reveals nothing about other holders. Leaves are reshuffled every epoch, so paths cannot be linked over time. Every transaction also returns a signed receipt: if your app ever fails this check, that receipt proves you were left out.

Holder Seal: one fact, shared on your terms

• Facts at launch: balance of at least a chosen amount; that amount held since a chosen date; verified holder, without identity.
• How it is built: the app produces a zero-knowledge proof that some leaf in a recent root belongs to your key and satisfies the fact. The verifier learns the fact and its time, not the amount and not which leaf.
• Safe to share: each Seal names its audience and an expiry, so a forwarded Seal fails and an old one lapses. Two Seals from the same holder cannot be linked unless the holder chooses.
• How it travels: as a link or QR code, verified on a public page or through an open API.

Audit Seal: exactly what a named party may see

• A holder can grant a viewing key scoped to one account and one period, for an accountant or a lender.
• Where the law requires it, Dragon Reserve discloses specific records to a regulator under that legal process.
• Every disclosure is logged on the ledger, so access itself can be audited later.

Building blocks

Account lifecycle

A holder's journey runs in seven steps, and every step that moves gold returns a signed receipt the holder can check. Nothing moves without the holder's own signature.

1. Open an account. Sign up in the app and verify your identity through a licensed onboarding partner.
   • The app creates your signing keys on your device, protected by a passkey. Every transfer, sale, redemption and Seal needs that signature, so Dragon Reserve cannot move your gold on its own.
   • Lost your device? You re-verify your identity, and a new key takes over after a waiting period, with notices on every channel you registered.
2. Fund. Deposit stablecoins to your deposit address, or send a bank transfer through a payments partner.
3. Buy. The app shows a live quote: the gold spot price plus a published spread, valid for a few seconds.
   • On confirmation, the ledger credits your grams in the next block, a few seconds later.
   • The purchase is covered at once by allocated bars held in the reserve buffer, and the treasury desk replaces those bars with new metal (see Reserves and custody).
   • Recurring buys let you add a fixed amount every day, week or month.
4. Hold. Your balance shows in grams and in your local currency.
   • Each time you open the app, it runs your Inclusion Seal check and shows the epoch your balance was counted in.
5. Send. Pay any Dragon Reserve account by handle or QR code.
   • The ledger lowers your commitment and raises the recipient's by the same hidden amount, with a proof that nothing was created and your balance stays above zero.
   • Sending to someone without an account creates a claim link. The gold returns to you if it is not claimed within seven days.
6. Prove. Create a Holder Seal: pick the fact, the audience and the expiry, then share the link or QR code.
7. Sell or redeem.
   • Sell: grams are sold at the live bid and paid out in stablecoins or to your bank.
   • Redeem: order bars or coins above the minimum size. Dragon Reserve removes the grams from the ledger, the custodian releases the metal for delivery or collection, and the bar leaves the public bar list. The next Reserve Seal shows both sides of the change.

Reserves and custody

Every gram on the ledger is matched by allocated physical gold: specific bars, held for holders in independent vaults, and never lent, leased or pledged. The ledger counts fine gold, so each bar counts at its pure gold weight.

The metal. Reserves are London Bullion Market Association (LBMA) Good Delivery bars and kilobars from accredited refiners. Large bars carry the core reserve. Kilobars form the operating buffer and serve physical redemptions.

The vaults. Bars sit with professional, insured custodians, starting with one vault and adding a second in another jurisdiction. Custodians hold the bars for the benefit of holders, separate from Dragon Reserve's own assets, through a bankruptcy-remote structure.

The bar list. Dragon Reserve publishes every bar it holds: serial number, refiner, gross weight, fineness, fine weight, custodian and vault city. Each Reserve Seal includes the hash of the current list, so any change to the list shows up in public.

Attestations and audits. Custodians sign a holdings statement at least daily, and that signature feeds the reserve side of the Reserve Seal. An independent auditor counts the bars physically at least twice a year, including unannounced counts, and publishes its report. Reserve partners can run Dragon Net L4 nodes, so their countersignatures land in the same public checkpoint as the ledger.

If Dragon Reserve stops operating, the bars remain held for holders under the custody structure, and the last anchored ledger state shows what each holder is owed. Holders can then redeem through the custodian or a successor administrator, using their Inclusion Seal and receipts as proof of their claim.

Privacy model

Dragon Reserve is private, not anonymous: the world can check the totals, but only the holder, and anyone the holder chooses, sees a balance. Dragon Reserve knows its customers, as any regulated gold account must, and keeps that knowledge to itself.

What each party actually receives. Dragon Net verifiers receive sanitized blocks with no payload, and public chains receive only hashes. Balances never leave the private ledger in readable form.

Inside Dragon Reserve. Staff access to balances is limited by role, logged and reviewed. Holder data is never sold or used for advertising.

Compliance. Onboarding includes identity checks and sanctions screening through licensed partners. Transfers are monitored for financial crime as the law requires, and lawful requests are answered through Audit Seals scoped to the request.

What privacy cannot hide. A bank transfer into Dragon Reserve is visible to your bank, and a stablecoin deposit is visible on its own chain. Dragon Reserve publishes no per-transaction data and reshuffles the tree every epoch, which limits what timing alone can reveal.

The Hatchery: from gold account to launchpad

The Hatchery is Dragon Reserve's launchpad: projects raise through sealed bids, keep a gold-backed treasury anyone can verify, and admit buyers with Seals instead of exposed wallets. It reuses the ledger and the Seal as they are, so every launch inherits the same public totals and private positions.

Today's launches reward whoever watches wallets fastest. The Hatchery answers each failure with a primitive Dragon Reserve already runs.

How a launch runs

1. Apply. The project submits its terms: raise size, price floor, sale size, vesting and treasury share. It passes business verification and review.
2. Publish. The launch page goes live with the terms, the minimum and maximum raise, the treasury share and the Seal required to join.
3. Bid. During the sealed-bid window, participants commit an amount and a maximum price, paid in gold grams or stablecoins. Each bid carries a proof that the bidder holds the funds, and the funds lock until clearing.
4. Clear. At close, the auction settles at a single clearing price, with a proof that it followed the published rules. The public sees total demand and the price, never individual bids. If the minimum raise is not met, every bid unlocks and no fee is charged.
5. Distribute. Winners receive allocations privately, and unfilled amounts return automatically. The treasury share converts to gold in the project's Treasury Vault.
6. Grow. The Treasury Vault publishes its own Reserve Seal. Releases follow the published milestones or vesting schedule, and each release is anchored in public.

What can hatch. The first launches are community and project tokens. Later launches can include assets with proven reserves, such as other precious metals, built on the same custody and Seal design. Allocations stay private inside Dragon Reserve until a holder chooses to withdraw them to a public chain. Each launch follows the rules of the jurisdictions it is offered in, and some may be open only to eligible participants.

Fees and network economics

Dragon Reserve earns from a spread, a storage fee and Hatchery launches, and it pays Dragon Net for verifying every ledger block. Holders never pay to send gold or to prove it.

The levels below are indicative. The final schedule is published before launch, and every fee is shown before a holder confirms.

No yield, by design. Paying interest on gold means lending the gold out. Reserve gold is never lent, so Dragon Reserve pays no yield and takes no lending risk.

Dragon Net verification. Every ledger block is verified through Dragon Net, and Dragon Reserve pays those fees in Dragons. Verifying nodes at higher levels earn a share of the fees for each block they verify (Dragon Net (opens in a new tab)). More holders and more activity mean more verification work for the network.

Where revenue goes, in order

1. Verification and public checkpoint costs, so every block stays proven.
2. Custody, insurance and audits.
3. Keeping the operating buffer at its target.
4. Security reviews and a public bug bounty.
5. Product development, including the Hatchery.

Security and risk

Dragon Reserve is built so that the most serious failures, missing gold or hidden liabilities, become visible and provable instead of discovered too late. The table lists each risk and what limits it.

Staged rollout. The private beta runs with per-account and total caps. Caps rise only after the proof system, the custody setup and the app pass independent review.

Governance and transparency

Dragon Reserve publishes everything needed to check it, on a fixed schedule, and changes its rules only with notice. Holders should never have to take our word for anything.

What a holder can always check, without asking us

• That their own balance is counted, through the Inclusion Seal in the app.
• That the vaults cover every holder, through the Reserve Seal.
• That the ledger history was never rewritten, through the public checkpoints.
• That a Seal someone shows them is genuine, through the public verifier.

How rules change. Fees, the reserve policy and Seal rules change only after 30 days' public notice. No change can lower backing below 100% or allow reserve gold to be lent.

Roadmap

Dragon Reserve ships in five phases, and each phase starts when the gate before it is met, not on a fixed date. Safety gates the schedule, not the other way round.

Phase 1 is under way: the brand is back, and this paper sets out the design. Dates for later phases will be published once the custody and audit partners are signed.

Glossary

References

• World Gold Council, Gold Demand Trends: Full Year 2025 (opens in a new tab)
• U.S. Securities and Exchange Commission, Litigation Release on Dragonchain, April 30, 2025 (opens in a new tab)
• Dragonchain, company history and platform summary (opens in a new tab)
• Dragonchain documentation, Architecture Overview (opens in a new tab)
• Dragonchain documentation, Dragon Net (opens in a new tab)
• Dagher, Bünz, Bonneau, Clark and Boneh, Provisions: Privacy-preserving proofs of solvency for Bitcoin exchanges (opens in a new tab), 2015
• Bünz, Bootle, Boneh, Poelstra, Wuille and Maxwell, Bulletproofs: Short Proofs for Confidential Transactions and More (opens in a new tab), 2017

Important notice

This paper describes the design and plans for Dragon Reserve for information only. It is not an offer to sell, or a solicitation of an offer to buy, any security, token or financial product, and it is not investment, legal or tax advice.

Features, fees, partners and timelines described here are plans and may change before or after launch. Statements about the future are forward-looking and are not guarantees. Availability depends on the laws of each jurisdiction, and some features, including Hatchery launches, may not be offered everywhere.

The price of gold can fall as well as rise. Dragon Reserve backs holdings with physical gold but does not guarantee the value of that gold.

Dragon Reserve is part of the Dragonchain ecosystem. It is not affiliated with, endorsed by or sponsored by The Walt Disney Company. References to Disney describe the historical origin of the Dragonchain platform only.