Dara DocsThe GOLD token
The unit, the backing rule, and what can and can't change.
| Code | GOLD |
| Type | Classic Stellar asset, one issuer account |
| Unit | 1 GOLD = 1 gram of 750 (18 karat) gold |
| Precision | 7 decimals on-chain, 3 shown (milligrams, proposed) |
| Issuer flags | AUTH_REQUIRED, AUTH_REVOCABLE, AUTH_CLAWBACK_ENABLED |
The rule that must always hold
Total supply is never more than the approved gold backing. Issuing above it is refused, and reconciliation checks it again from the chain. An expired attestation (older than 35 days) or a shortfall blocks issuing and buying.
How supply changes
Only three actions change the number of tokens. Everything else moves existing tokens between accounts Dara knows.
flowchart LR
G["Gold + attestation"] --> B["Approved backing"]
B --> I(("Issue: +supply"))
I --> C["Cold Treasury"]
C -->|refill| H["Hot Treasury"]
H -->|sweep| C
H -->|buy| A["Customer"]
A -->|sell| H
A -->|transfer| A2["Another customer"]
C --> X(("Burn: -supply"))
A2 -.->|"clawback: -supply"| X
Who can hold GOLD
Only accounts Dara has authorized. AUTH_REQUIRED keeps any other account's balance at zero, so every unit is always in the hot Treasury, the cold Treasury or a Dara customer's account. The indexer raises a critical incident if it sees anything else.
The powers Dara has
Dara can freeze an account and can claw tokens back. Clawback is limited to court or regulator orders, key recovery and theft containment. It needs two compliance officers and the on-chain signature, and it's public on Dara Scan. Read the clawback policy.
The home domain
A wallet can't tell who issued an asset from its address alone. Publishing stellar.toml on a domain Dara controls, and writing that domain into the issuer account, lets wallets and explorers identify GOLD. Activation on Testnet and Mainnet checks that the file matches the chain.
The domain must be lower-case, at most 32 characters, served over HTTPS and reachable worldwide. It isn't chosen yet.
What can't change later
- The code and issuer, which together are the asset's identity
- The unit, because it defines what holders own
- Clawback on trustlines that already exist
AUTH_IMMUTABLE, if it were ever set (it's not set)