For educational purposes only; not investment advice. A formula or displayed quote does not guarantee value, reserve safety, execution, liquidity, or redemption.
Direct answer
A bonding curve is a deterministic market rule that maps contract state, commonly token supply and a reserve balance, to mint and burn quotes. In the simplest issuance design, a buyer deposits a reserve asset and the contract mints tokens; a seller returns tokens for burning and the contract releases reserve assets. The rule supplies a quote without matching a simultaneous counterparty, but it does not create external demand, make the reserve safe, or guarantee that redemption remains enabled.
For an ideal continuous supply curve p(s), the displayed value at supply S is a marginal price. Buying q tokens costs C_buy = integral from S to S+q of p(s) ds; burning q tokens returns C_sell = integral from S-q to S of p(s) ds only when the same curve, reserve accounting, and no-fee assumptions apply. A deployed contract may instead use a reserve-ratio formula, a conservation invariant, discrete steps, separate buy and sell curves, virtual balances, fees, caps, or rounding rules.
The term is overloaded. A mint-and-burn bonding curve links an issued token’s supply to a reserve-denominated quote and changes supply. An automated market maker may also be described as trading along a bonding curve, but a constant-product pool such as x*y=k normally exchanges two existing reserve assets and changes their reserve composition. Always identify the actual contracts, state variables, asset flows, permissions, and formula before using the label.
How it works
- Identify the mechanism. Record the chain, token and reserve contract addresses, implementation version, proxy and administrator, eligible mint and burn functions, pause state, allowlist, supply cap, and whether redemption is a contractual or merely promotional claim.
- Classify the mathematics. Determine whether the quote comes from a direct function such as
p(s)=a*s+b, the integral of that function, a reserve-ratio formula such asP=R/(S*w), a multi-asset invariant, a piecewise schedule, or distinct buy and sell curves. Note the domain and behavior at zero supply and at caps. - Normalize state and units. Read curve-accounted supply, total supply, reserve balance, virtual supply or reserve, token decimals, fee basis points, and any scaling constants. Separate assets physically held by the contract from reserves recognized by the pricing formula and from treasury assets that administrators can move.
- Reproduce the quote. Compute marginal price, trade integral or protocol formula, fee, rounding direction, minimum trade, and post-trade state independently. Test boundary values and confirm whether mint and burn are mathematical inverses after integer arithmetic.
- Constrain execution. Simulate against the pending state; set an explicit
maxInputorminOutputand a shortdeadline; include approvals, transfer behavior, gas, transaction ordering, and possible front-running. A read-only quote is not an execution guarantee. - Reconcile settlement. After confirmation, verify tokens minted or burned, reserve assets transferred, fees routed, events emitted, supply and reserve state, and any refund. Distinguish a successful transaction from an economically correct result.
- Stress the exit and control plane. Model concurrent redemptions, reserve-asset loss or depeg, external-market arbitrage, paused paths, caps, oracle failure, key compromise, upgrades, and treasury withdrawals. Determine who can change each assumption and how quickly users can exit first.
If p(s) is increasing and the contract retains the full area paid under the same curve, the ideal model is path independent: splitting one trade into smaller trades produces the same gross curve amount. Fees, rounding, block ordering, state-dependent permissions, asymmetric curves, and external asset behavior break that simplified equivalence.
Worked examples
1. Linear curve, average cost, and reserve
Let p(s)=1+0.01*s reserve units per token and begin at S=0. Minting the first 100 tokens costs integral 0..100 (1+0.01*s) ds = 150; the marginal price moves from 1 to 2, so charging 100*2=200 would incorrectly apply the final marginal price to every unit. Minting the next 100 costs integral 100..200 (1+0.01*s) ds = 250. With no fees or withdrawals, supply is 200, reserve is 400, and marginal price is 3.
The last-price market capitalization is 200*3=600, not the 400 reserve. It is also not a simultaneous liquidation value: every burn moves left along the curve and receives a different marginal price.
2. Buy fee, sell fee, and round trip
At S=100, the gross curve cost to mint through S=200 is 250. If a 2% buy fee is charged on top, the buyer pays 250+5=255. With no intervening trade, burning the same 100 tokens has a gross curve return of 250; a 2% sell fee leaves 250-5=245. The round-trip loss is 10 reserve units before gas. Whether either fee is added to curve-accounted reserves, sent to a treasury, or burned is a separate contract rule that changes later quotes.
3. Constant reserve ratio is a different curve family
In the Bancor-style notation P=R/(S*w), let reserve R=400, supply S=200, and reserve weight w=2/3. The current marginal price is 3. A reserve deposit E=100 mints T=S*((1+E/R)^w-1)=32.07944168 tokens under the purchase-return formula. The new state is approximately R=500 and S=232.07944168, giving marginal price 3.23165204. This is not the linear curve from the first example, and treating w as a generic promise that every token is fractionally backed would be wrong.
4. External-market arbitrage and execution constraints
On the linear curve at S=200, burning 40 tokens returns integral 160..200 (1+0.01*s) ds = 112 before fees and leaves a marginal price of 2.6. If an external venue offers all 40 tokens at 2.4, their nominal cost is 96, leaving a gross difference of 16. That is not guaranteed profit: external depth, trading and transfer fees, approvals, gas, reserve availability, minOutput, deadline, ordering, reversion, and competing arbitrageurs can remove it. The successful burn also lowers the curve quote, which is how the discrepancy begins to close.
Risks and review failures
Model and accounting
- Using a project name, ticker, interface label, or old documentation instead of verifying chain, contract, proxy implementation, and current parameters.
- Confusing total supply, circulating supply, curve-accounted supply, virtual supply, preminted inventory, and tokens held outside the mint-and-burn mechanism.
- Mixing reserve units, token units, decimal scaling, percentage weights, basis points, and fixed-point constants.
- Treating a marginal quote as the average execution price, or multiplying the end price by the full quantity instead of applying the trade formula.
- Applying a continuous integral to a discrete, stepped, rounded, capped, or piecewise implementation without reproducing its exact arithmetic.
- Calling the contract’s raw asset balance its pricing reserve when donations, accrued fees, debt, virtual balances, or excluded assets alter accounting.
- Treating marginal-price market capitalization as reserve value, realizable proceeds, treasury value, or the amount all holders can redeem at once.
- Assuming the curve proves token utility, fundamental value, legal ownership, collateral quality, or an enforceable claim on off-chain assets.
Contract and execution
- Missing overflow, precision loss, unfavorable rounding, inverse-formula approximation, singularities, or boundary behavior near zero supply and caps.
- Assuming fee-on-transfer, rebasing, callback-enabled, paused, frozen, blacklisted, or nonstandard reserve tokens behave like a plain ERC-20 transfer.
- Releasing reserves before state updates or otherwise exposing mint, burn, refund, or withdrawal paths to reentrancy and cross-contract state changes.
- Omitting
maxInput,minOutput, ordeadline, or setting them so loosely that stale state and adverse ordering can execute an unacceptable trade. - Ignoring front-running, sandwiching, priority ordering, private order flow, failed inclusion, reorganization, and competing arbitrage.
- Trusting a preview or website quote without simulating the exact calldata, sender, allowance, block state, revert conditions, and gas requirement.
- Using unbounded loops or state growth that can make minting, burning, migration, or emergency recovery exceed practical gas limits.
Reserve, governance, and market
- Assuming on-chain custody removes reserve-asset price, bridge, issuer, oracle, blacklist, custody, liquidity, or chain risk.
- Ignoring pause, allowlist, cap, fee, curve, oracle, mint, withdrawal, rescue, migration, and upgrade authorities and their execution delay.
- Treating a multisig, DAO vote, audit, timelock, or immutable label as proof that privileged actions are unavailable or harmless.
- Assuming a mathematically quoted redemption remains payable during concentrated exits, reserve loss, depeg, transfer failure, or emergency shutdown.
- Inferring guaranteed liquidity, stable price, fairness, future demand, yield, or early-buyer profit from a deterministic formula.
Common misconceptions
Myth 1: The formula determines economic value
The formula determines a contract quote from defined state. External demand, utility, reserve quality, legal claims, governance, and alternative venues determine whether anyone accepts that quote as value.
Myth 2: Continuous liquidity means every holder can always exit
It means the mechanism can calculate a quote under its rules. Redemption can still be limited by reserves, caps, permissions, gas, transfer failures, pauses, exploits, or unfavorable prices along the curve.
Myth 3: Market capitalization equals cash backing
supply*marginalPrice values every token at the last infinitesimal quote. Reserves are accumulated over earlier prices, and a large liquidation changes the price throughout execution.
Myth 4: Early buyers have guaranteed profit
They obtain lower curve prices only under the stated path. Profit still requires later demand or utility and a functioning exit after fees, gas, competition, contract risk, reserve risk, and governance actions.
Myth 5: Every bonding curve is the same as a two-token AMM
Both are algorithmic markets, but a supply-linked mint-and-burn mechanism changes token supply and pays against a designated reserve, whereas a pool AMM usually exchanges existing assets subject to a reserve invariant. Some systems combine both designs, so the label alone is insufficient.
Related topics
Sources
- Bancor Protocol Whitepaper - Bancor (accessed: 2026-08-18)
- From Curved Bonding to Configuration Spaces - WU Vienna University of Economics and Business (accessed: 2026-08-18)
- Uniswap v2 Core - Uniswap (accessed: 2026-08-18)
- ERC-20: Token Standard - Ethereum Improvement Proposals (accessed: 2026-08-18)
- Creating ERC-20 Supply - OpenZeppelin (accessed: 2026-08-18)
- Access Control - OpenZeppelin (accessed: 2026-08-18)
- Security Considerations - Solidity (accessed: 2026-08-18)
- Flash Boys 2.0: Frontrunning, Transaction Reordering, and Consensus Instability in Decentralized Exchanges - arXiv (accessed: 2026-08-18)