Verifiability
Ultraprop runs on the Sui blockchain, but you'll never have to know that to use it. The chain is infrastructure: it's there to make the evaluation trustworthy and the record tamper-proof, not to be the product's face. This page explains what's recorded, how it stays verifiable, and why you never have to touch any of it.
Invisible crypto
The platform is built so the trader never sees a blockchain:
- No wallet to install, no seed phrase, no network switcher, no gas. You sign up with email or social login; an account is provisioned for you behind the scenes.
- You see "account created," not "wallet created."
- Payments on-ramp from a card; payouts off-ramp to fiat.
- The on-chain record exists and is verifiable, but it's a detail you can drill into, never something pushed in your face.
If you don't care that there's a chain underneath, you never have to. If you do, every claim the platform makes can be checked independently.
What's recorded on-chain
The contract is the single source of truth for your account. It records:
- A per-trade ledger. Each trade writes a ledger entry: the market and venue, side, size, price, fees, funding, P&L, and (for a close) the reason. Your equity is reproducible from this ledger plus the price stream.
- Your account state. Status, balances, rule budgets, and limits: the same numbers the contract checks and your cockpit displays.
- Your credential. Your Genesis credential is an on-chain, non-transferable record that accumulates your history across attempts.
- Outcomes. Every pass, fail, and inactive termination is an on-chain event.
Account ownership is the credential itself, not a transferable token. There's no "account NFT" to sell, and each evaluation attempt is a fresh account record under the same credential.
How you verify a record
Because outcomes and history live on-chain, anyone can check them without trusting the firm:
- A public profile links straight to the on-chain credential object so a viewer can confirm the level and history are real.
- The vault that backs funded capital is on-chain, so reserves can be audited, unlike a traditional firm, where capital adequacy is a black box and several have collapsed on traders holding "passed" accounts they couldn't cash.
- Rule enforcement is contract code, so the logic that decided your outcome is itself inspectable.
How the firm itself is constrained
Transparency cuts toward the operator too:
- No outcome override. Admin tooling cannot change an evaluation result.
- Multisig on the money. Releasing funds and changing critical addresses require multisig approval, not a single key, with time-locked changes on sensitive settings.
- The same rules for all. Tier parameters are on-chain config, applied identically and snapshotted to your account at creation.