Potbot

What PotBot Is

PotBot is a group trading vault protocol built on Solana. The core idea is straightforward: any online community — a Discord server, a DAO, a friend group — can pool capital into a shared on-chain treasury, vote on how that capital is deployed, and withdraw their share at any time. No fund manager, no custodian, no shared private key. Every transaction requires group consensus before it executes.

The project was developed by Y-DAO Amsterdam and submitted to the Solana Frontier 2026 hackathon, which ran from April to May 2026. It is currently live on devnet, with mainnet deployment pending an independent security review.

The Two-Part Architecture: POT + BOT

The name is a portmanteau describing two distinct components that together form the protocol.

POT stands for Programmable On-chain Treasury. This is the vault itself — a Solana program account that the group collectively owns. Members deposit assets (SOL, USDC, LSTs, LP positions, or other tokenized assets) and receive SPL share tokens proportional to their contribution. The NAV (net asset value) of each share is calculated continuously, so new entrants and exits are always fairly priced. Nobody — not the team, not an operator — can move funds without a successful governance vote. Members can withdraw their share at any time.

BOT stands for Blockchain Orchestration Tool. This is the AI execution layer. An AI agent — whether a Claude instance, a ChatGPT plugin, or any MCP-compatible tool — can connect to a vault, read its current state, and draft trade proposals. Critically, the BOT does not execute unilaterally. It proposes. The members vote. Only after a quorum approves does anything execute on-chain. Alternatively, members can configure pre-approved parameter guardrails that allow the BOT to vote automatically on their behalf for proposals that fall within those defined bounds.

Governance Model

Every change to a vault is a proposal. A member (or the AI agent) writes up a trade: what to buy, what to sell, how much, and why. The proposal sits open for a configurable window — the demo interface shows a four-hour voting period. Members vote yes or no, and voting weight is proportional to share size. A configurable quorum threshold (70% in the demo UI) must be met for a proposal to pass. If it passes, the swap executes automatically via a Solana program transaction. If it fails or expires, nothing happens and funds remain untouched.

This design eliminates the single-point-of-failure problem that plagues informal group investing arrangements. There is no group wallet with a shared seed phrase. There is no individual who can unilaterally move the funds. Every action is recorded on-chain and auditable by anyone.

Open and Private Vaults

PotBot supports two vault modes tailored to different community needs.

Open vaults are publicly visible. Anyone can join. Member identities and deposit amounts are visible on-chain. Open vaults participate in a leaderboard, can challenge other vaults to head-to-head duels, and can share trade strategies publicly. This mode is designed for communities that want transparency, social coordination, and the ability to attract new members.

Private vaults are designed for groups that want to coordinate capital without exposing their wallet addresses or strategy. According to the project's roadmap, private vaults will use ZK proofs via PrivacyCash integration to keep member identities and deposit amounts hidden from the public. Only vault members can see inside. A selective auditor-view mode allows for compliance disclosure without full wallet doxxing. This privacy feature is listed as a later phase in the project's development plan.

Both modes support Solana Name Service subdomains — a vault can claim a human-readable address in the format groupname.potbot.sol.

AI-Native and MCP-Native Design

PotBot is explicitly built to integrate with large language models. The project ships an MCP (Model Context Protocol) server published as @potbot/[email protected] that exposes more than 60 on-chain actions. Any MCP-compatible client — including Claude or custom-built agents — can connect to a vault, read its current state (holdings, pending proposals, recent vote history), and submit new governance proposals.

The practical workflow the protocol enables: a user instructs their AI assistant to monitor a price condition and propose a trade when it triggers. The agent watches the relevant price feed via Pyth, constructs a swap proposal when the condition is met, submits it on-chain, and notifies vault members. Members vote. If quorum is reached, the trade executes.

In addition to the MCP server, PotBot publishes a TypeScript SDK for developers who want to build vault management, governance, trading, and analytics tooling into their own applications. A public REST API exposes price oracle data, profit-and-loss calculations, and leaderboard standings.

Gamification: The Living Plant

Each vault has a visual representation — a plant — that grows based on vault activity. Deposits, governance votes, and member participation all contribute to the plant's growth stage. The system has six stages: Seedling, Sprout, Bud, Bloom, Full Bloom, and Mature Tree. The plant functions as a streak mechanic; inactivity causes regression through the stages. The intent is to incentivize regular governance participation and member engagement rather than passive deposit-and-forget behavior.

Technical Stack

On-chain logic is written in Rust using the Anchor framework. The devnet program address is GJap9DjUoKZ9dhXMqGCPTeTzY6kPyBJ51SXL1pi8AmiK. The frontend is built with Next.js and uses Privy for wallet authentication. Off-chain indexing uses Supabase. The codebase is organized as a monorepo using Turborepo, with the MCP server and TypeScript SDK published as standalone packages. The GitHub repository is public at github.com/YD811/potbot-v2.

Current Status

As of mid-2026, PotBot is live on Solana devnet. The project's own site shows demo vaults with pooled capital, active governance votes, and a leaderboard — these reflect test-network activity. Mainnet launch is contingent on completing an independent security review and validation of the NAV accounting and share-minting logic, per the project's own documentation.

PotBot was built for the Solana Frontier 2026 hackathon and sits at the intersection of DeFi infrastructure and social coordination tooling. The governance-first architecture and native AI-agent integration distinguish it from traditional multi-signature wallets, which require technical setup, and from standard yield vaults, which offer no collective decision-making. Whether the project advances from devnet to mainnet and attracts real liquidity will depend on completing the pending security review and building adoption among communities that already coordinate around shared capital.