Deviant · Tote
Bet on a market whose payout is a covenant,
not a promise on a company's balance sheet.
A pari-mutuel tote is one of the oldest fair-market designs in the world: everyone pools their stake, the correct side takes the pool minus a rake, and nobody's payout depends on somebody else's solvency. Deviant's Tote runs that design on Bitcoin Cash, settled by consensus — the pool is a UTXO, the winning share is a token, the payout is a plain spend.
The app runs on our VPS (it signs transactions, so it needs a live process). This landing is on Sia — it survives if the app is down.
The mechanism
Four moves. All of them are transactions.
1 · The pool opens
A market is a covenant deployed on chipnet. It carries the outcome set, the deadline, and the operator's public key for settlement.
2 · Bettors buy shares
Each bet is a transaction that mints outcome-shares — one token per satoshi staked — and adds the stake to the pool UTXO. The share is yours; nobody's ledger holds it.
3 · Oracle settles
After the deadline, a signed message from the operator's key names the winning outcome. The covenant checks the signature and unlocks the payout branch.
4 · Winners spend
Every winning share is a spendable UTXO worth (share ÷ winning-shares) × (pool − rake). No queue, no withdrawal request, no counterparty.
Because the payout math is enforced by the covenant, the operator can hold the keys (which they do — settlement is a signed message) without holding your funds. The worst they can do is refuse to settle; they cannot pay themselves.
What you can bet on today
Binary markets, K = 4 markets, and Football Tote.
The core mechanism handles yes/no markets. A K = 4 variant handles fixed four-outcome markets (1 / X / 2 / draw). And Football Tote is the same machinery pre-loaded with the World Cup 2026 fixture list.
Binary tote
OpenTote · yes / no · MBA-denominated · operator rake configurable
Parimutuel K = 4
ParimutuelToteOpenK4 · 1 / X / 2 / draw, or any four fixed outcomes
Football Tote
A sibling instance, seeded with fixtures. Open it →
The parts we don't hide
Custodial by design. Testnet only. And here's why.
The operator holds the settlement key and the funder key. That's the accountable-operator model, and it's the honest way to run this right now — nobody has to trust the operator with the pool, only with settling on time and honestly. The covenant enforces the rest. This is documented, not implied.
For real money that changes: settlement needs a price-freshness bound on the oracle, and governance needs to sign the settlement. Both are known-open items in the project record, not glossed over. Until then, this runs on chipnet where the coins are valueless, the beta banner is non-dismissible, and mainnet is structurally absent.