KETJU Research

← The Register

other

exSat Staking BTC

Rejected
Max sleeve
Reviewed
2026-08-18 · v1
Next review
2026-11-18
Research basis
Individual research
Chains
Ethereum · sovereign

Rejected venues wait the longest for re-review; a rejection has to earn another look before the scheduled date.

REJECTED ON UNRESOLVED DISCLOSURE GAPS, THE SAME PATTERN ALREADY REJECTED IN THIS REGISTRY FOR FUNCTION FBTC AND LORENZO ENZOBTC. exSat wraps BTC 1:1 into XBTC, which can then be staked with a validator for XSAT rewards, and its bridge names four real custodians — Ceffu, ChainUp, Cobo, and Cactus Custody — audited by Blocksec, comparable in shape to Lombard’s approved consortium model. But no source found in this review discloses the approval threshold among those four custodians, any pause or freeze authority, or the redemption and unstaking mechanics and timing for converting XBTC back to native BTC. Named custodians without a disclosed threshold or exit path is not enough for this registry to certify a position.

The research file

Mechanism

exSat Network is a Bitcoin data-extension layer using a hybrid proof-of-work and proof-of-stake ”Data Consensus Extension Protocol.” A user bridges BTC to mint XBTC, backed 1:1 per exSat’s own description, then stakes XBTC with a validator to earn XSAT rewards. The system is mid-rollout: the live Phase 1 uses validator self-attestation, where a validator proves custody by demonstrating control of a wallet holding at least 100 BTC and exSat acts as an on-chain oracle monitoring UTXO balances rather than the network directly custodying funds; a Phase 2 decentralized-vault custody model is stated as forthcoming, not yet live.

Control and governance

The exSat Bridge was built in partnership with four named custodians, Ceffu, ChainUp, Cobo, and Cactus Custody, and audited by Blocksec — a real, named custodian set. But no source found in this review discloses the approval threshold among these four parties, whether unanimous, a majority, or independent custody of separate reserve slices with no joint threshold at all, nor any pause or freeze authority, nor which entity controls the oracle attesting to validator BTC balances in the live Phase 1 design. This is the same undisclosed-threshold gap already rejected in this registry for Function FBTC and Lorenzo enzoBTC.

Incident record

No exploit, depeg, or security incident specific to exSat was identified through this review’s 2026-08-18 search cutoff, including against a general review of 2025-2026 DeFi hacks that did not name exSat. That is a bounded negative finding only, given how little independent security reporting exists on this protocol.

Exit

No redemption or unstaking timing or mechanics were found in any source reached in this review. exSat’s own bridging and tokenomics documentation was the closest available primary material, but neither described the unstake-to-native-BTC path or its timing. This is an unresolved gap, not a negative finding either way, but it means a client’s exit path cannot currently be verified.

Comparison

Weaker on disclosure than Lombard BTC.b, approved with limits in this registry for a named 14-member consortium with an explicit 10-of-14 threshold and a fail-closed design, and weaker than Kraken Bitcoin, approved with limits for a regulated custodian and an independent audit. Closer to the already-rejected Function FBTC and Lorenzo enzoBTC: real named custodians exist, but the threshold, pause authority, and redemption mechanics that would let this registry certify a position are not disclosed, and the live system’s reliance on validator self-attestation rather than independent custody verification is a design choice this review treats as provisional, not yet the production-grade Phase 2 model exSat itself says is still forthcoming.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

Inherited controls

The verdict above grades the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The least safe layer sets the position’s grade, and the position table names which one that is.

ChainVerdictGradeControl constraint
EthereumApproved sovereign No sequencer, no upgrade key, no operator who can be compelled — rule changes require social consensus.
The memo is public. The watching is the product: the terminal reads your clients’ wallets against this Register and flags the events above when they fire. $49 per advisor per month, first 14 days free. Start the trial.