Minting eTSLA: Click to Confirmation

We've toured the whole machine from above - now let's put a real person inside it and follow a single trade from the first click to the tokens landing in her wallet.

Meet Maya. She wants exposure to Tesla onchain - not the real share, but a token that tracks its price and lives in her own wallet. Own gives her exactly that: an eToken called eTSLA, backed by the two-layer portfolio we met in Part 1. Buying one is called a mint - she's creating fresh eTSLA by paying in USDC.

Here's how that mint actually happens.

First: she asks for a price

Most exchanges you've used run an order book - a public ladder of resting bids and asks where your order matches against whatever's sitting there. Own's cash market doesn't work that way. It uses RFQ, short for request for quote: rather than hunting through a book, Maya simply asks a dealer, "What's your price for this?" and gets a single answer back.

That dealer is a market maker - one of the registered trading firms we met in Part 1, whose quoting software answers price requests around the clock.

While Maya is just looking at the screen, the app is quietly polling for an indicative price - a display-only number, "here's roughly where eTSLA is trading." It's a preview, not a promise. Nothing is committed yet.

Then: a firm, signed quote

The moment Maya clicks Buy, the app sends a real request: this exact user wants to mint this exact amount of eTSLA. The maker prices it off the agreed market price (that's the Oracle's number, coming up in Chapter 5), adds its small spread, and sends back a firm quote.

"Firm" is the key word. This isn't a preview anymore - it's a price the maker commits to. To make that commitment binding, the maker wraps the quote's exact terms - who's trading, which asset, mint or redeem, how much, the price, a unique quote ID, and an expiry - and signs it with its private key: a cryptographic seal anyone can later verify came from the maker, covering terms that can't be altered.

Three safety features are baked into that quote:

It expires fast. Prices move, and the maker won't be held to a stale number. If Maya dawdles past the expiry (a matter of seconds), the quote dies and she simply asks for a fresh one.
It can only be used once. The quote carries a unique ID, and the system remembers IDs it has already settled. Submit the same signed quote twice and the second attempt is rejected.
It's bound to this market on this chain. A signature can't be lifted and replayed on some other contract or network.

Then: she settles it onchain

Now Maya submits the signed quote to the protocol's settlement contract - the Market - herself. (If this is her first mint, her wallet does a one-time USDC approval; after that, straight to the trade.)

The contract does the verifying. It recovers who signed the quote and confirms that signer is on the protocol's registry of approved makers. It checks the quote hasn't expired and hasn't been used before. It checks the asset is live and trading isn't paused. It checks the quoted price sits within a small band of the protocol's own working price - the settle band - so even a compromised maker key can't settle far from the real market. And, quietly but importantly, it checks the system has room for the new exposure: the asset's price mark must be fresh, the asset must be under its issuance cap, and the two-layer backing must stay inside its solvency limit. Check and commitment happen in the same breath - there's no gap where a mint is approved but not counted.

If every check passes, settlement happens atomically: in one single transaction, the contract routes Maya's USDC to the maker's settlement wallet and mints brand-new eTSLA straight into her own. There's no in-between state where her money is gone but her tokens haven't arrived. Either the whole thing happens at once, or none of it does and she keeps her USDC.

  Maya (app)                Market Maker             The Market (onchain)
     │                           │                          │
     │── "price for 5 eTSLA?" ──▶│                          │
     │                           │  price it, sign it       │
     │◀── firm signed quote ─────│  (seconds to live,       │
     │                           │   single-use)            │
     │                                                      │
     │────────── submit signed quote onchain ──────────────▶│
     │                                                      │ verify signer
     │                                                      │ fresh, unused, in-band
     │                                                      │ room to mint (solvency)
     │                                                      │ ┌──────────────────┐
     │                                                      │ │ ATOMIC: USDC →   │
     │                                                      │ │ maker, eTSLA →   │
     │                                                      │ │ Maya             │
     │                                                      │ └──────────────────┘
     │◀──────── confirmation = the onchain event ───────────│

One more thing happens after her trade, and it's not Maya's problem but it completes the picture: the maker takes her USDC, buys real tokenized TSLA, and deposits it into the Reserve Vault, so her token ends up matched 1:1 by the real thing. That's the backfill from Chapter 3, and we'll watch it up close in Chapter 6.

The second door: bring the stock itself

The RFQ desk is the cash door - USDC in, eTSLA out. But Own has a second door worth knowing about even on day one: if you already hold a supported wrapper token - say tokenized TSLA from an issuer like Ondo - you can convert it directly into eTSLA, and back again, with no quote, no dealer, and no fee. The protocol's converter is called the PSM (peg-stability module), and it swaps wrapper for eToken at a fair ratio computed from oracle prices at the moment you convert.

For Maya, paying in USDC, the RFQ path is the everyday one. But remember the PSM exists - it's about to matter a great deal when we talk about selling back and about why an eToken's price can't drift from the real thing.

Why a signed firm quote is safe

It's worth pausing on why this design protects Maya rather than the dealer.

A signed quote is a one-sided promise: the maker commits to a price it chose, and Maya decides whether to take it. She can't tamper with the price - change a single digit and the signature no longer matches. The maker can't bait-and-switch - the terms it signed are the terms that settle. The settle band means even a stolen maker key can't quote wildly off-market. And there's no waiting and no separate confirmation step from the dealer afterward: the onchain settlement event is the confirmation. When Maya sees the transaction land, the trade is already done.

What just happened

Maya set out to mint eTSLA by paying USDC. Instead of an order book, Own uses RFQ: the app asks a market maker for a price and gets back a firm quote the maker commits to.
The quote is cryptographically signed, expires in seconds, is single-use, and is bound to this market on this chain - it can't be altered, stalled on, or replayed.
Maya submits the quote herself; the contract verifies the signer, the settle band, mark freshness, and the solvency rules before anything moves - then settles atomically: USDC to the maker, eTSLA to Maya, in one transaction.
Afterward the maker backfills the Reserve Vault with real tokenized TSLA bought with her USDC.
There's a second door, the PSM: anyone holding a supported wrapper token can convert it to the eToken (and back) at an oracle-derived ratio - no quote, no fee, no permission.

4. Minting eTSLA: Click to Confirmation