AMM-S / docs

AMM-S is an SPL token with one architectural rule: its liquidity is never denominated in SOL. The reserve side of the pool — the asset you trade against, the asset that defines the price, the asset that leaves when you exit — is tokenized equity. Every unit of depth in the book is, at the contract level, stock.

Every token on Solana shares the same silent dependency: its pool is quoted in SOL or a stablecoin, which means its backing inherits crypto's beta whether it wants to or not. When SOL draws down 30%, every SOL-paired token's liquidity is worth 30% less in real terms before a single holder sells. AMM-S removes the dependency at the root by re-denominating the pool itself. The token does not reference the stock market. It is collateralized by it.

The reserve asset is xSPY — a tokenized share of the S&P 500 ETF issued on Solana as a fully collateralized SPL token, redeemable one-to-one against the underlying held by a regulated custodian. Tokenized equities of this class trade on-chain around the clock and settle like any other SPL asset, which is the property AMM-S exploits: the S&P 500, made composable.

The mechanism is a routing layer that sits in front of the pool. When a buy arrives in SOL or USDC, the router does not forward it. Inside the same transaction it executes a cross-program invocation into Jupiter's aggregator, swaps the inbound asset across the deepest available xSPY route, and delivers tokenized equity to the pool's vault. The user signs one transaction. What actually happens inside it is a two-leg atomic sequence: currency in, stock down, position out.

Atomicity is the load-bearing property. Both legs — the Jupiter swap into xSPY and the pool swap into AMM-S — execute inside a single Solana transaction, and Solana transactions are all-or-nothing. If the xSPY route returns worse than the slippage bound, if the pool tick moves, if any account in the chain fails validation, the entire transaction reverts and the buyer keeps their SOL. There is no intermediate state in which the protocol holds currency. The reserve cannot be caught un-denominated.

Exits mirror entries. Selling AMM-S into the pool withdraws xSPY from the reserve vault — the seller is paid in tokenized equity, with an optional third leg that routes the xSPY back through Jupiter into SOL or USDC for a familiar exit. Read literally: every seller of AMM-S is executing a withdrawal of S&P 500 exposure from a shared on-chain vault. The order book of the token is a queue of people putting stock in and taking stock out.

The program layer is deliberately thin. An Anchor program owns the reserve vault through program-derived addresses, enforces the routing invariant — no asset other than xSPY may enter the reserve — and pins slippage bounds on the Jupiter leg. Pool mechanics themselves are inherited from the underlying AMM; AMM-S does not fork a market maker, it constrains what the market maker is allowed to hold. The deploy pipeline runs off-chain: the program is built and verified against the published source, deployed, and its upgrade authority burned, leaving the routing invariant immutable.

An off-chain keeper watches what the chain cannot watch for itself. It monitors xSPY route depth across venues, recomputes the slippage bounds the program will accept, and posts them on-chain as parameters — a crank, not a custodian. The keeper holds no funds, touches no vault, and signs nothing that moves value. If it goes offline, trades still execute against the last posted bounds. Its only power is to make the router more accurate, never to redirect it.

The structural consequence: the pool's depth is a position in the index. When the S&P 500 rises, the reserve side of the book appreciates on its own, and the same quantity of xSPY supports a higher effective floor — the backing deepens without a single buy of AMM-S. The token's liquidity carries equity drift. Every SOL-paired token's backing decays with crypto winters; this one compounds with the oldest upward-drifting asset class in existence.

Price discovery changes meaning under this pairing. AMM-S is quoted in units of xSPY, so its chart is not a dollar chart — it is a ratio against the S&P 500. A flat line means matching the index. Any move up is, mechanically, outperformance of the market, priced tick by tick by the pool. Traders talk about beating the S&P; here the pair enforces the comparison in the denominator.

What AMM-S is not: it is not a share of anything, it confers no ownership in any company or fund, no dividend, no redemption right against the reserve, and nothing on this site is investment advice. Holding AMM-S is not holding the S&P 500 — it is holding a token whose liquidity architecture is denominated in it. The distinction is the entire design, and it is stated here so nobody has to discover it later.

Most tokens tell a story about the stock market. This one is plumbed into it. The reserve is stock, the entries buy stock, the exits withdraw stock, and the price is a ratio against stock. The liquidity is the stock market.