Blue
Hotel-Backed Private StablecoinHotel-backed private stablecoin enabling hospitality industry transactions.
| Type | Hotel-Backed Private Stablecoin |
| Region | Global |
| Status | Live |
| Links |
M69 Score
Scored against the Money2069 Manifesto — see methodology. Higher = more aligned.
Key Findings
Detailed Rating Breakdown
Framework v0.2-alpha · Rated 2026-04-18Blue is a pre-launch white-label loyalty platform for hospitality (starting with independently-owned Swiss/European hotel groups). Hotels integrate Blue to issue merchant-native on-chain tokens to guests. Each merchant receives a pair of smart contracts on Gnosis Chain: a PaymentReceiptNFT (ERC-721) minted by allowlisted Blue Points Backend wallets after a verified customer payment, and a MerchantCurrency (ERC-20) that users mint by burning their Spend Receipt NFTs (after a refund window) and depositing 1 CRC (Circles V2) per token unit to a merchant Treasury. Tokens decay at 7% annual demurrage (inherited from Circles) via a virtual-balance accounting pattern. Users cannot redeem tokens back for CRC — only the Group Owner (the hotel) can burn tokens to reclaim CRC from the Treasury. From an M69 perspective the design is unusually thoughtful: issuance is tied to real, verifiable economic activity (actual hotel spending), is structurally debt-free, is backed by a non-fiat crypto-native collateral (CRC), and includes demurrage — a textbook anti-concentration mechanism. The positioning document "The 7 Secrets" explicitly frames Blue as "an alternative currency system disguised as a loyalty platform," bootstrapping merchant-native private currencies and designed to be AGI-proof. Execution, however, is early-stage: no mainnet deployment, no signed pilot, no live users, no audit, no merchant tokens in circulation. Issuance is permissioned (allowlisted backend minters + Group Owner privileges to burn user tokens), governance is unilateral (single Ownable), and sovereignty is compromised by custodial-adjacent design choices (Privy-managed wallets, refund-window-controlling minter, Group Owner able to burn user balances to reclaim CRC). Blue scores strongly on philosophical alignment and on Issuance/Fiat-Independence pillars but weakly on Traction, Sovereignty, Governance, and live-state Resilience — which is expected for a pre-product project.
Issuance Model3x4.0
| Code | Question | Score |
|---|---|---|
| IM-01 | Is issuance permissionless?Issuance is rule-based but permissioned: only allowlisted Blue Points Backend wallets can mint PaymentReceiptNFTs (`onlyAllowedMinter`), and minters are managed unilaterally by a single `Ownable` deployer. Users cannot self-issue receipts. | 2 |
| IM-02 | Is new supply created through debt?Supply is fully debt-free. Tokens are minted by burning a Receipt NFT and depositing 1 CRC per token unit to Treasury — no borrowing, no credit line, no interest. | 5 |
| IM-03 | Is issuance tied to measurable real-world economic activity?Supply is algorithmically linked to verified, refund-window-protected merchant transactions (hotel payments with amount, currency, merchantId, customerId). This is an unusually direct link between issuance and real-economy activity, although the "verification" step is centralized in the Blue Points Backend. | 4 |
| IM-04 | Does the issuance model have a supply cap or hard ceiling?No hard cap. Supply expands elastically with merchant economic activity (each verified payment can become a receipt) and contracts automatically via 7% annual demurrage applied daily to all balances. | 5 |
| IM-05 | Can supply contract (burn/redemption) as well as expand?Two contraction mechanisms exist: (a) continuous, automatic 7% annual demurrage on every balance via virtual-balance accounting, and (b) permissioned Group-Owner burn to reclaim CRC. Demurrage is fully automatic and symmetric. | 4 |
Spending Power Stability2x2.1
| Code | Question | Score |
|---|---|---|
| SPS-01 | What mechanism does the protocol use to target spending power stability?2× There is no explicit spending-power targeting mechanism. Tokens are backed 1:1 by CRC at mint but CRC itself floats (and decays at 7%/yr). The only "stability" property is the 1 CRC backing per token minted, plus symmetric 7% demurrage on both the token and CRC. No index, no rebase, no rate adjustment. | 2 |
| SPS-02 | What benchmark is used to measure spending power?2× There is no spending-power benchmark. The token's effective reference is CRC (a demurraging free-floating UBI token) — not a fiat unit, not a commodity basket, not labor hours. Hotel managers still price services in CHF/EUR; Blue points display is fiat-equivalent in the UX. No structural anchor to productive capacity beyond "1 CRC per unit at mint." | 2 |
| SPS-03 | How transparent and verifiable is the stability measurement?1× There is no stability measurement to report, but the entire issuance ledger — receipts, redemptions, CRC movements, demurrage — is fully on-chain and auditable by anyone. Transparency of the monetary mechanism is strong even though a benchmark is absent. | 3 |
| SPS-04 | What is the protocol's historical deviation from its stability target?2× No live track record. Contracts are not deployed to mainnet; no merchant tokens exist; no pilot has launched. | 1 |
| SPS-05 | Does the protocol distinguish between short-term volatility and long-term purchasing power drift?1.5× The design distinguishes implicitly: short-term, 1 token is redeemable for defined hotel services (utility peg); long-term, demurrage burns the nominal balance at 7%/yr, so long-term purchasing power explicitly drifts down by design. This is intentional but it is a drift mechanism, not an anchoring one. | 3 |
| SPS-06 | Is the stability mechanism accessible globally?1× The smart contracts are permissionless to read/interact with on Gnosis Chain globally, but there is no stability mechanism to access in the first place. Guest onboarding additionally requires Privy + Circles registration (humanity check), which narrows practical access. | 2 |
Fiat Independence & Interoperability2x3.7
| Code | Question | Score |
|---|---|---|
| FI-01 | What is the protocol's unit of account?2× Each merchant issues its own branded unit (e.g. "Blue Points" denominated per-merchant). The unit is not fiat-pegged at protocol level — it is CRC-backed. However receipts record the original payment's ISO 4217 currency (CHF/EUR), and the guest-facing UX presents points as fiat-equivalent. A hybrid/bootstrapped own-unit that leans on fiat during onboarding. | 4 |
| FI-02 | What is the fiat composition of the protocol's collateral or reserves?2× Zero fiat in reserves. The sole collateral backing minted merchant tokens is CRC (Circles V2), a non-fiat, demurraging, crypto-native UBI token on Gnosis Chain. Treasury holds CRC, not dollars, not Treasuries, not bank deposits. | 5 |
| FI-03 | Does the protocol depend on fiat banking infrastructure to function?1× The protocol contracts themselves require no banks. However the end-to-end flow depends on the hotel's existing fiat payment rails (PMS+Stripe/Adyen) to trigger the webhook that causes the backend to mint a receipt. Fiat banking is required for the customer payment, though not for any on-chain action. | 3 |
| FI-04 | Are the protocol's price feeds and oracles fiat-denominated?1× There are no oracles in the core contracts. The `amount` stored in a receipt is just the original payment value in its ISO 4217 currency — a record, not a live price feed. No fiat oracle is used by the protocol. | 4 |
| FI-05 | What happens to the protocol if the primary fiat currency it references collapses or depegs?1× The core on-chain state (receipts, tokens, CRC backing) is fiat-independent and would survive a fiat collapse. The adoption surface (hotels pricing in CHF/EUR, Amadeus bookings, PMS integrations) would be disrupted but the monetary mechanism itself has no transmission to fiat failure. | 4 |
| FI-06 | Does the project have a credible transition path from fiat-dominated adoption to fiat-independent operation?1× The 7_Secrets positioning document explicitly frames Blue as bootstrapping a new currency system under the cover of loyalty points. The GTM plan sketches a multi-phase expansion from small hotel groups to B2B commerce use-cases. Transition path is articulated but milestones are directional, not measurable. | 3 |
| FI-07 | Can local or sectoral currencies be denominated in or settle against this currency?2× This is arguably Blue's strongest M69 feature. The protocol is explicitly designed so that each merchant deploys its own ERC-20 pair of contracts — i.e. local/sectoral currencies are the product. The base unit is CRC. However no merchant token has actually been deployed yet, so the pattern exists in code but is not yet operational. | 3 |
| FI-08 | Does the protocol define open standards for interoperability with other monetary systems?1.5× Tokens are standard ERC-20 and standard ERC-721, so they interoperate with the general EVM/DeFi stack (DEXs, bridges). No Blue-specific open monetary standard (e.g. a published cross-merchant settlement spec) exists. | 3 |
Traction2x1.6
| Code | Question | Score |
|---|---|---|
| TR-01 | Is the project still active?2× Active in development; three demo apps are being polished for pilot pitches. Pre-launch but not dormant. | 4 |
| TR-02 | How long has the project been in existence?1× Pre-launch. Documents reference 2026 events and a "February 2026" BOAS pilot proposal. Project is under 6 months of substantive build by today's reference date. | 1 |
| TR-03 | How many active users does the project have?2× Zero live users. No merchant token is deployed to mainnet; guest app has no production user base. | 1 |
| TR-04 | How many businesses or organizations accept the project's currency?2× Zero signed merchants. BOAS_Pilot_Proposal is a proposal, not a signed pilot. GTM document lists 5 target Swiss hotel groups ranked by likelihood — none committed. | 1 |
| TR-05 | Is the currency used as a unit of account?3× Not used as unit of account. Projected case study prices all services in CHF and expresses points as CHF-equivalent. No merchant prices anything in Blue points natively. | 1 |
| TR-06 | Is the founder or core team still actively working on the project?1× Founder (Mirko) is actively building across all three demo apps and the protocol; explicitly articulated mission in 7_Secrets. | 4 |
| TR-07 | What partner organizations or institutions support or integrate the project?1× No signed partners. Amadeus integration is technical (public booking API), not a formal partnership. No institutional endorsements documented. | 1 |
| TR-08 | Is the project covered or recognized by credible external sources?1× No external media or academic coverage found in the project files; the project is pre-public. | 1 |
| TR-09 | Is adoption organic — not dependent on subsidies, incentives, or mandates?1× N/A — there is no adoption yet. Cannot be scored higher than 1 by the rubric ("No measurable user base" equivalent). | 1 |
| TR-10 | What is the growth trend over the past 12 months?1× Pre-launch; growth trend is not measurable. Development velocity exists but is not a user/volume growth signal. | 1 |
| TR-11 | Does the project have a coherent narrative and cultural identity that drives long-term commitment?1.5× Unusually strong founding narrative for a pre-product project. 7_Secrets explicitly articulates principles (merchant-native private currencies, "money created where value is created," AGI-proof money) that tie directly to the M69 manifesto; founder is the creator of M69. However there is no community yet to identify with the mission — narrative is present, culture is not. | 3 |
Sovereignty1.8
| Code | Question | Score |
|---|---|---|
| SO-01 | Can any single entity shut down the project?2× The Blue Points Backend (allowlisted minter) is controlled by Blue. If Blue shuts down, no new receipts can be minted and therefore no new merchant tokens can exist — although already-minted tokens would continue transferring on-chain. The `Ownable` deployer can swap minters, treasury, and group owner. A single entity (Blue Labs) can halt issuance unilaterally. | 2 |
| SO-02 | Is the project's core infrastructure permissionless and self-hostable?1× Solidity contracts appear in the repo (readable); however the guest app depends on Supabase (hosted), Privy (hosted), and Amadeus (commercial API). Core on-chain logic is open; the full stack is not self-hostable without these third parties. | 2 |
| SO-03 | Is the project subject to the jurisdiction of a single nation-state?1× Operations appear Switzerland-centric (target market, BOAS pilot, Swiss hotel groups, founder location). No multi-jurisdictional legal structure documented. | 2 |
| SO-04 | Does the project control or custody user funds?2× Hybrid-to-custodial. Guest wallets are Privy embedded wallets (non-custodial by Privy's design but provider-mediated). The critical M69 concern: the MerchantCurrency contract allows the Group Owner (hotel) to `redeemCRC`, burning tokens from their own balance to reclaim CRC from Treasury; Treasury itself is a single address set at deploy. The CRC collateral sits in a Treasury the user does not control, and users cannot redeem tokens back for CRC. | 2 |
| SO-05 | Is the project resilient to key-person risk?1× "Myself and a few intrinsically motivated Jünger" — the 7_Secrets document explicitly identifies the founder as core. No co-founders, no distributed contributor base documented. Key-person risk is high. | 1 |
| SO-06 | Does the project depend on any third-party service that could be revoked?1× Critical dependencies: Privy (auth/wallets), Supabase (DB/storage), Amadeus (hotel search), Gnosis Chain RPC, and the Circles V2 protocol itself. Contracts have no fallback for CRC going away. | 2 |
| SO-07 | Can the project be censored — can specific users or transactions be blocked?1.5× The allowlisted-minter design means Blue's backend unilaterally decides which transactions become receipts. A merchant's `Ownable` owner can replace the minter set, treasury, or group owner. Additionally, Group Owner can redeem CRC against arbitrary token holdings (though only their own balance is burnable). At the ERC-20 level, transfers between users are not blockable post-mint. | 2 |
| SO-08 | Does the protocol protect transaction privacy as a monetary right?1.5× Receipts store `customerId` on-chain (pseudonymous bytes32) but are linked by the Blue Points Backend / Supabase to real guest identity (needed for PMS/booking integration). Transaction amounts and currencies are fully public on-chain. No privacy tech (ZK, shielded pools). Pseudonymous at best; operator holds full identity map. | 2 |
| SO-09 | Does the technology enforce the project's monetary rules such that governance cannot silently override them?2× Core monetary rules (debt-free mint via CRC, demurrage, group-owner-only CRC redemption) are on-chain and auditable. However: the receipt minter set, treasury address, group owner, and receipt contract address are all mutable by an `Ownable` deployer with zero timelock. V2 contracts are UUPS upgradeable. Governance can silently change minters and treasury at any moment. Rules exist in code but are not constitutionally protected. | 2 |
Governance1.4
| Code | Question | Score |
|---|---|---|
| GO-01 | How are decisions about the project made?2× No formal governance. Decisions are made unilaterally by the founder; all privileged contract roles resolve to a single `Ownable` deployer. No documented process, forum, or voting. | 1 |
| GO-02 | Who has voting or decision-making power, and how is that power distributed?1× Single person / entity (Blue / founder). No token-based voting, no multisig mentioned. | 1 |
| GO-03 | Is the governance process — and the monetary mechanism itself — transparent and publicly auditable?2× No governance process to audit. Monetary mechanism code is open (visible in repo) and, once deployed, would be on-chain auditable. Today nothing is deployed and there is no public archive of decisions. | 2 |
| GO-04 | Can governance be captured by a small group or hostile actor?1.5× Already centralized — governance is a single owner key. It is not capturable because it is already held by one party; by the rubric this maps to "Already captured / no governance exists to capture." | 1 |
| GO-05 | How are upgrades and changes to the protocol or project proposed and executed?1× V2 contracts are UUPS upgradeable by the owner with no timelock or community veto. Upgrades can be pushed instantly without public vote. | 1 |
| GO-06 | Is there a separation between governance over monetary policy and governance over operational decisions?1× No separation. Treasury address, demurrage consumers, group owner, minter set, and upgrade authority all sit under the same single owner key. | 1 |
| GO-07 | Does the project have a constitution, charter, or set of immutable principles?1.5× The 7_Secrets document articulates strong founding principles ("money created where value is created," AGI-proof, merchant-native private currencies), and the founder is also the M69 manifesto author — so philosophical principles are articulated. However they are not enshrined on-chain or protected from governance override. | 3 |
| GO-08 | Can the project's issuance rules be changed, and are monetary policy changes subject to stronger constraints than operational changes?2× Issuance rules (demurrage rate, CRC backing ratio, minter set, receipt contract address) can be changed by the single owner — some via setter, some via UUPS upgrade. No stronger constraint for monetary vs. operational changes. | 1 |
Resilience2.3
| Code | Question | Score |
|---|---|---|
| RE-01 | Has the project survived a major crisis or adversarial event?2× Pre-launch; never faced adversarial conditions. By rubric this is score 1 ("never faced any adversarial conditions"). | 1 |
| RE-02 | Does the project have redundancy in its critical infrastructure?1× Single backend (Blue Points Backend), single Supabase instance, single Privy tenant, single RPC. Gnosis Chain is a redundant substrate but every other layer is a single point of failure. | 2 |
| RE-03 | Can the project recover from a catastrophic failure?1× On-chain state is public and recoverable from Gnosis. Off-chain Supabase data would be recoverable from backups but there's no documented DR plan. Contracts themselves are idempotent and open-source. | 3 |
| RE-04 | Is the project's design simple enough to be maintained and understood long-term?1× Core monetary logic is elegant and compact: two contracts, ~300 lines each, using standard OpenZeppelin primitives. Demurrage is a single well-known decay function. A competent Solidity dev can grasp the system in hours. | 4 |
| RE-05 | Is the project dependent on a specific technology that could become obsolete?1× Built on Gnosis Chain and Circles V2. Gnosis is a long-running EVM chain with good track record; Circles V2 is younger. Core ERC-20/721 logic is portable to any EVM. Migration path exists but is not documented. | 3 |
| RE-06 | How does the project handle economic stress (bank runs, liquidity crises, collateral crashes, inflation/deflation shocks)?2× No explicit stress mechanisms. The 7% demurrage is a continuous drain but not a stress circuit breaker. Users cannot redeem tokens back for CRC, so there is structural run-protection — the redemption queue is one-way (mint-only for users). If CRC itself collapses, the collateral under Treasury collapses with it. Not tested. | 3 |
| RE-07 | Does the project have sustainable funding for long-term maintenance?1.5× Funding model is commission-based (5% on loyalty points per BOAS pilot proposal). No revenue yet. Founder self-funded; no documented runway, no external funding disclosed. Below 1 year of documented funding. | 2 |
| RE-08 | Can the system operate across extreme latency, disconnected networks, and multi-century timescales?1× Core logic is latency-tolerant (just EVM state). However the guest app assumes always-on connectivity, and the receipt-mint flow requires Blue Points Backend online to process webhooks. Core protocol could operate across high-latency links; peripheral stack could not. | 3 |
| RE-09 | Is the system designed for a world where AI agents are primary economic actors?1× 7_Secrets explicitly claims "AGI proof" money. Smart contract interfaces are standard ERC-20/721 — programmatically composable. Receipt minting itself requires a human check-in/checkout event (hotel stay), which structurally ties issuance to human economic activity. AI agents can hold/transfer tokens freely but cannot cause issuance without a real hotel stay. | 3 |
Inclusivity2.9
| Code | Question | Score |
|---|---|---|
| IN-01 | Can anyone in the world participate regardless of nationality, wealth, or status?2× To participate as a guest, a user needs: smartphone, internet, Privy account (Google/Apple/email), and Circles V2 registration (trust-graph humanity check). No KYC for guest app per se, but merchant-side participation requires being an allowlisted hotel. Open in principle with practical barriers. | 3 |
| IN-02 | What is the minimum cost to start using the project?1× Gnosis Chain fees are sub-cent. Circles registration requires 96 CRC inviter balance (sponsored by Blue per CLAUDE_CODE_SPEC.md). Guest app is free. Cost to a guest: effectively zero at the gas layer. | 4 |
| IN-03 | Does the project actively serve underbanked or financially excluded populations?1× No. Target market is explicitly premium/4-star Swiss hotel guests — a high-income demographic. The 7_Secrets document targets boutique hotel groups with 30-100M revenue and "Michelin guide" positioning. | 1 |
| IN-04 | Does the project distribute economic benefits — including seigniorage — broadly, or concentrate them among insiders?1.5× Blue charges a 5% commission on loyalty points generated. The remaining 95% of issued token value is held by guests. Seigniorage via demurrage is captured by... nobody explicit — demurrage burns balances symmetrically; the CRC backing remains in Treasury until the Group Owner redeems it. Demurrage on CRC in Treasury accrues to Circles, not Blue. Benefits are reasonably distributed (guests get tokens; hotel gets repeat business; Blue gets 5% fee). Founder/insider allocation is not disclosed because no token distribution event has happened. | 3 |
| IN-05 | Does the project treat all participants equally under the same rules?2× Structural inequality: Group Owner can burn tokens and reclaim CRC; users cannot. `Ownable` deployer can swap minters and treasury. Guests operate under strictly weaker rules than hotels. This is intentional to the merchant-native currency model but is material inequality under the rubric. | 2 |
| IN-06 | Does the project require identity documentation or surveillance to participate?1.5× No government ID required for guest app per se. Privy requires email/Google/Apple. Circles V2 requires trust graph. The Blue Points Backend / Supabase holds guest PII (name, email, stay history) by necessity for PMS integration. Lightweight identity + meaningful operator-side surveillance footprint. | 3 |
| IN-07 | Does the project have mechanisms to prevent wealth concentration over time?1× 7% annual demurrage is a textbook active anti-concentration mechanism — balances shrink symmetrically over time regardless of holder size, automatically redistributing purchasing power toward active participants. This is one of Blue's strongest M69 features. | 5 |
Frequently Asked Questions
What is Blue and what problem does it solve?
Blue is a pre-launch white-label loyalty platform for hospitality (starting with independently-owned Swiss/European hotel groups). Hotels integrate Blue to issue merchant-native on-chain tokens to guests.
How is money created in Blue?
Issuance is rule-based but permissioned: only allowlisted Blue Points Backend wallets can mint PaymentReceiptNFTs (`onlyAllowedMinter`), and minters are managed unilaterally by a single `Ownable` deployer. Users cannot self-issue receipts.
How does Blue maintain stable spending power?
2× There is no explicit spending-power targeting mechanism. Tokens are backed 1:1 by CRC at mint but CRC itself floats (and decays at 7%/yr). The only "stability" property is the 1 CRC backing per token minted, plus symmetric 7% demurrage on both the token and CRC.
Is Blue independent from fiat currencies?
2× Each merchant issues its own branded unit (e.g. "Blue Points" denominated per-merchant). The unit is not fiat-pegged at protocol level — it is CRC-backed.
Who controls Blue and can it be shut down?
2× The Blue Points Backend (allowlisted minter) is controlled by Blue. If Blue shuts down, no new receipts can be minted and therefore no new merchant tokens can exist — although already-minted tokens would continue transferring on-chain. The `Ownable` deployer can swap minters, treasury, and group owner.
How widely adopted is Blue today?
2× Zero live users. No merchant token is deployed to mainnet; guest app has no production user base.
Is Blue still active and growing?
2× Active in development; three demo apps are being polished for pilot pitches. Pre-launch but not dormant.
What are the main risks or weaknesses of Blue?
Weakest categories: Governance (1.4) and Traction (1.6).: Governance is a single `Ownable` key with UUPS upgradeability, no timelock, no multisig, no community — the monetary rules exist on-chain but can be silently altered. Traction is appropriately low for a pre-launch project: no mainnet deployment, no signed pilot, no users, no merchants. Both are expected for this stage but materially drag the overall score.
What makes Blue unique from an M69 perspective?
Strongest category: Issuance Model (4.0).: Blue's design is one of the most M69-aligned issuance models this framework has evaluated: debt-free, directly tied to real economic activity (verified hotel payments), elastically expandable, and contracting automatically via 7% demurrage. The only drag on the score is that issuance is permissioned — allowlisted backend minters, not user-driven. If Blue ever opens the minter set or enables merchant self-deployment, IM-01 jumps and the category approaches 5.
How is Blue's M69 Score calculated?
Blue scores 2.7/5.0. Pillars: Monetary Sovereignty 3.4, Civilizational Durability 1.8, Universal Adoption 2.0. Strongest: Issuance Model (4.0). Weakest: Governance (1.4).