Numbers before money.
A token whose value derives from private-company financials has exactly one existential dependency: can anyone outside the issuer verify the numbers? If the answer is no, every mechanism in the tokenomics is “trust me” with extra steps. This page is our answer , and it ships before the token does.
What failed was never the blockchain.
RealT sold fractional tokens on Detroit rental homes to roughly 14,000 mostly European retail investors. In 2025–2026 it emerged that RealT had sold $2.72M of tokens on 39 homes it never owned, while paying dividends on properties with no tenants, culminating in the largest nuisance-abatement lawsuit in Detroit's history.
The rails
The tokens transferred flawlessly. The smart contracts executed perfectly. The blockchain did exactly what blockchains do.
The numbers behind the tokens
The operating company simply lied about what it owned: $2.72M of tokens on 39 unowned homes, 400+ uninhabitable properties, and no independent party was positioned to catch it.
Self-reported marks are not a weak form of verification. They are no form of verification.
For a portfolio scaling from a young deal count toward 10,000, one RealT-style discovery would end $NPKN permanently. So we built the verification stack as if that discovery attempt happens every quarter. Because it will: short sellers already target exactly this surface.
The three-layer verification stack.
Verification at the bottom, transmission at the top: human auditors and examination standards doing the verifying, the chain making the verified numbers unfakeable in transit and permanently public.
Real-time feeds + the on-chain NAV oracle
Portfolio companies pipe operating data (Stripe, banking, and accounting APIs) into the dashboard in near-real-time, and a Chainlink oracle (the SmartData / Proof-of-Reserve pattern already live for WisdomTree and others) publishes attested NAV per token on-chain, with the signed attestation report hashed alongside it. The Engine's smart contracts execute only against auditor-signed data.
Quarterly ISAE 3000 attestation of the deals
Every quarter, an independent firm performs an examination-level attestation (the standard that supports an opinion, not a compilation, not agreed-upon procedures) of exactly the numbers that drive the Engine: per-company revenue, EBITDA, and cash figures, consolidated FCF, and Qualifying-Acquisition status. Disclosed lag, target 45 days or less; all Engine execution and tender pricing runs exclusively against last-attested values.
One audited IFRS consolidation
Every acquired company sits inside a single IFRS consolidation perimeter under Napkin Group AG, audited annually by a named top-10 firm under a 120-day covenant. One perimeter, one group audit with standard component-materiality scoping. The structure global audit practice actually uses to make a thousand subsidiaries verifiable. Ownership of each entity is evidenced by registry extracts, hashed on-chain. The RealT failure mode (tokens on assets never owned) is structurally closed at this layer.
Stated before a critic states it for us: the oracle transmits; it does not verify. No oracle can audit a private company's EBITDA. Verification lives in Layers 1 and 2: human auditors, examination standards, legal liability. Anyone who tells you their oracle “verifies” real-world financials is describing Layer 3 while hoping you don't ask about Layers 1 and 2.
One more disclosure, made before it is discovered: our internal accounting stack is substantially AI-operated (the 62-agent workforce) which is exactly why the internal-controls audit scope explicitly covers the AI-agent pipeline. First-of-kind disclosure, and we would rather own it than have it found.
Live before the token. Not on a roadmap. Before.
The Proof of Balance Sheets dashboard goes live before TGE. The durable launches of this cycle shipped product before token; the hype-first ones shipped promises.
Live, attested
Quarterly, attested
Every company
Every purchase, on-chain
Against 500,000,000 terminal
Every one, in full
You will be able to watch the portfolio breathe for months before you can buy a claim on it. If the numbers underwhelm you, don't buy.
That option (informed refusal) is the whole point of transparency.
If we go quiet, we pay more.
Most issuers' disclosure failures cost the holders. Ours are engineered to cost us: penalty escalation protects holders, not the issuer.
Liquidity provisioning, in the open.
Liquidity is where clean tokenomics goes to get quietly dirty, so we adopt the strictest 2026 disclosure norms voluntarily.
Named, not hidden
Our market makers are named in this document's launch supplement, not hidden behind NDAs.
Retainer-only contracts
Flat fees against spread, depth, and uptime KPIs. No loan-plus-call-option structures, whose mispriced strikes create hidden sell pressure and phantom float. If any token loan ever exists, its size, term, and strike appear in the supply tables, and loaned tokens are counted as circulating. Always.
Wash trading is a breach
A contractual ban on wash trading, volume guarantees, and price targets in every MM agreement. The DOJ's Operation Token Mirrors made wash-trading-as-a-service a crime: CLS Global's conviction, Gotbit's plea. We make contracting for it a breach.
A monthly liquidity report
Spreads, depth, and venues, published monthly alongside the buyback attestation. Quant desks reconstruct MM inventories from on-chain flows in an afternoon; being caught not disclosing is strictly worse than disclosing. So we disclose.
Already regulated. Gladly.
Because the EUR 500M bond program is listed in Vienna, Napkin is already subject to the EU Market Abuse Regulation, inside-information rules, insider lists, disclosure discipline, today, before any token exists. We were a regulated capital-markets issuer before we were a token issuer. The token inherits that spine; it does not have to grow one under enforcement pressure.
Safe-harbor buybacks
The buyback program is built to MAR's equity safe-harbor logic precisely because we live under MAR.
A named human compliance officer
Not an AI agent, owning insider-list and blackout-window discipline, the way European listed companies have for decades.
Built for a serial acquirer
A continuous stream of inside information, handled by the same procedures: blackout windows around every disclosure and acquisition announcement.
Proof of Balance Sheets is not a marketing layer. It is the product: attested numbers, or no Engine.
Watch the portfolio breathe.
The dashboard ships before the token, and the white paper carries every covenant we just described, in binding language.