Bidding and the escrow

Tollbooth's auctions run on a keeper and an escrow key, without a program of their own. A bid is one transaction you sign: a SOL transfer to the escrow and a Memo.

tollbooth:bid:<feeKeyMint>:<amountLamports>

The escrow is BkjaNxJx5N2uS1N8hy8qXvBkPdBzvdpAP7BbKn5LHLKb. It is also the platform NFT wallet: Raydium mints each graduated coin's Fee Key to it. Bids sit in this keeper-held escrow until settlement. The keeper (Vercel Cron, every minute) reads the escrow's transactions, accepts valid bids in slot order and refunds the others.

Refunds and settlement

• Every refund sends back the whole bid and carries the Memo tollbooth:refund:<feeKeyMint>. The keeper FQbWVCBCsqp4fKXZUmGnkmBcL8x4JpgfdsoCZZupR4KU pays its network fee.
• Settlement is one transaction: the Fee Key to the winner, the creator's share and the buyback share, and the Memo tollbooth:settle:<feeKeyMint>.
• Each payout's signature is written to the keeper's records before it is sent, and a recorded payout is never sent twice. One that does not confirm is replaced only after its blockhash has expired, when it can no longer land.

Every record is public in the Ledger and on Solscan. A dedicated Anchor auction program, holding bids in its own accounts, can replace the keeper later; the rules above would not change.