Self-custody today
On the public testnet, DMS can be held in:
- Eoonia Wallet (Android, production; browser extension built) — the reference wallet, showing both the native and EVM address for one account.
- Any Substrate wallet that connects to a custom endpoint and knows SS58 prefix 2026 — Polkadot.js extension and Apps work; a wallet that does not know the prefix shows the same account in generic format.
- Any EVM wallet configured for chain id 2026 — MetaMask sees the native balance as the account's balance.
Testnet DMS has no value and resets on major upgrades with 72 hours' notice.
Multisigs
The genesis allocation assigns large tranches to multisig control:
| Allocation | Control | Status |
|---|---|---|
| Founder, 300 M | Multisig; 12-month cliff, linear to year 4; to be excluded from staking rewards in code | Multisig account defined |
| Liquidity, 100 M | Multisig, threshold (3-of-5 or other) to be set | Placeholder without a key in the chain spec; not constituted |
| Treasury, 150 M | On-chain treasury governed by proposals; 10 %/year cap | Pallet account |
| Ailoos rewards, 300 M | pallet-ailoos-rewards pool; per-era proportional payout | Pallet account |
pallet-multisig (runtime index 41) provides the mechanism. The mainnet gate requires the genesis hash to be signed by at least three founding members before launch.
Account protection
An account can opt into post-quantum signatures (ML-DSA, verified in the runtime) and seal itself so that classical signatures are rejected. This protects sealed accounts against direct theft by a future quantum attacker — not against block forgery, since consensus remains classical. The account-abstraction pallet supports session keys and is designed for guardian-based recovery; Eoonia has not yet exposed guardians.
What does not exist
- Exchange custody. No exchange holds DMS because none lists it.
- Institutional custodians. No custodian supports DMS. The previous version of this page announced one; it was another token.
- Hardware wallet support specific to EmpoorioChain. Generic Substrate hardware-wallet flows may work through Polkadot.js; untested here.
- Mainnet DMS. There is no mainnet, so all custody today is of test tokens.
Operational custody the ecosystem practises
Validator stash accounts never live on the validator host. Seeds never in shell history, documents or chat. Keystore password files with mode 600 (they were found at 644 in ten of twelve apps and tightened). A leaked backend admin key in an app repository was revoked and replaced with server-side functions. These are the custody rules the ecosystem applies to itself, written down after each was needed.
Based on TOKENOMICS_CANONICO.md §2, MAINNET_GATE.md Gate 5, POST_CUANTICO_HASTA_DONDE_LLEGA.md, VALIDATOR_GUIDE.md and the August 2026 security fixes.