Live Demo:https://jetty-sol.vercel.app/Documentation Hub:https://jetty-sol.vercel.app/docs
An open-source, no-code compliance layer for Token-2022 Transfer Hooks on Solana.
Jetty is designed to demonstrate how developers and issuers can enforce modular, on-chain compliance policies without writing a single line of custom Rust. By attaching the Jetty Program to your Token-2022 Transfer Hook, you gain a zero-code compliance dashboard to manage your token's rules.
Disclaimer:Jetty is currently an unaudited MVP. It is designed as a proof-of-concept and should not be used in production with high-value assets until a formal security audit has been completed.
Token-2022 introduced Transfer Hooks, but the barrier to entry for issuers to actually write, audit, and deploy custom Rust hooks is extremely high. Jetty was built to abstract this complexity.
The MVP ships with a comprehensive suite of core compliance modules — Global Pause, Allowlist, Denylist, Volume Limits, Anti-Dust, Receiver Cap, Velocity Limiter, and Vesting / Lockup — all built on a single, modular execution pattern. The vision for Jetty is to be the place issuers come to manage their transfer hook needs, instead of writing and maintaining that logic themselves. Easy controls, vetted modules, and one dashboard — so compliance rules can be configured and trusted with confidence, without the overhead of running custom infrastructure.
Every SPL Token-2022 transfer is atomically intercepted by Jetty and evaluated against the issuer's active policy on-chain.
| Module | Use Case | Mechanism |
|---|---|---|
| Global Pause | Exploit mitigation, migration | Instantly freeze all token transfers across the entire network. |
| Allowlist | Permissioned trading, OFAC compliance | Restricts transfers strictly to pre-approved wallets. |
| Denylist | Exploit mitigation | Block explicitly flagged wallets from transferring tokens. |
| Volume Limits | Anti-whale, bot protection | Set a maximum ceiling for any single transaction. |
| Anti-Dust | Spam protection | Set a minimum transfer size to prevent dust attacks. |
| Receiver Cap | Fair-launch distribution, anti-whale | Limit maximum holder balances based on total supply percentage. |
| Velocity Limiter | MEV protection, dump mitigation | Enforce cooldown periods between successive transfers. |
| Vesting / Lockup | Team tokens, scheduled unlocks | Lock tokens until a predefined timestamp for scheduled releases. |
All modules share a single execution pattern: each policy is a flag on the mint's HookConfig, checked inline inside one execute instruction with an early-exit design — a rejected transfer (e.g., a triggered Global Pause) aborts immediately rather than evaluating the remaining rules, and disabled modules cost next to nothing since they're skipped by their gating check.
The Jetty MVP is built on a modern stack designed for high throughput and rapid iteration:
- Smart Contract Layer (Anchor/Rust): Fully implements the SPL Transfer Hook interface. Uses a fixed, precomputed
ExtraAccountMetaListso transfers are intercepted transparently without requiring callers to manually resolve extra accounts. - Event Indexing (Helius Webhooks): On-chain state changes are piped in real-time via Helius Webhooks to the backend.
- Edge Database (Turso / LibSQL): Low-latency database storing the compliance audit trail and off-chain metadata.
- Admin Dashboard (Next.js): A zero-code interface for policy authorities to manage their token's rules, with dedicated configuration views per module, client-side validation to prevent contradictory configurations (e.g., a minimum transfer amount set above the maximum), and warning banners for unusual-but-valid combinations (e.g., Allowlist and Denylist both active).
- RPC Security: A rate-limited backend proxy (
/api/rpc) keeps private RPC provider keys (Helius/QuickNode) out of the client bundle entirely.
- The Handshake Rule: Rotating the Policy Authority requires a dual-signature authorization — both the current and new authority must sign — to prevent accidental ownership loss.
- Strict Transfer Verification: The execute hook verifies it is being invoked via a legitimate Token-2022 transfer context, rejecting direct or malicious invocations.
- Memory Safety: The on-chain program is built with zero
unsafeblocks and zerounwrap()panics in the execute hot path.
The program is covered by a modular TypeScript/Mocha test suite, with each module tested in its own isolated file against a fresh mint and PDA state, asserting against specific custom Anchor error codes rather than generic failures.
- SVM-optimized Transfer Hook architecture
- Global Pause, Volume Limits, Anti-Dust, Receiver Cap
- Allowlist, Denylist, Vesting / Lockup, Velocity Limiter
- Handshake Rule for authority rotation
- Helius Webhook + Turso DB integration for audit trails
- Devnet deployment & Next.js admin dashboard with secured RPC proxy
- Directional Transfer Lock (send-only / receive-only accounts)
- DeFi Protocol Whitelist (exempt known AMM/DEX vaults from allowlist/denylist checks)
- Rolling 24-Hour Volume Limit (time-windowed velocity control)
- Custom Transfer Hook support — expand the module library with additional vetted policies as new needs emerge
- Hook Registry — a growing library of vetted compliance modules issuers can enable for their token with confidence
- Smart Contract Security Audit
- Off-Chain Oracles — allow Jetty to read from trusted KYC providers to auto-provision AllowlistEntry PDAs
@jetty/sdknpm package- Mainnet Beta Launch
# Clone the repository
git clone https://github.com/Yashb404/jetty
cd jetty
# Build the Anchor program
yarn install
anchor build
# Run the test suite
anchor test --skip-local-validator
# Start the admin dashboardcd app
yarn install
yarn run devMIT