Styx Protocol · Legal · Open source
Licenses and attributions.
Styx Protocol, formerly Protocol 01, is assembled out of other people's work. This page names that work, states the licence it arrives under, and links to the project itself. Rows that named a package this repository does not use were deleted rather than reworded. Upstream repositories still get renamed, transferred and deleted, so a link here can go stale between edits; where a project's own repository has disappeared, the row points at the registry the dependency is installed from.
Our license
This repository is MIT.
Styx Protocol: core protocol and applications
The wallet application, browser extension, Solana programs, proof circuits and SDK sources in this repository are released under the MIT License. Use, copy, modify and redistribute freely. The full text lives in LICENSE at the repository root and is reproduced below, unedited.
MIT License
Copyright (c) 2025-2026 Volta Team
Developed by Slashy Fx
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.
Third party
31 packages we did not write.
These are the direct dependencies of the wallet, the extension, the web app, the Solana programs and the prover service. Each row repeats the licence that project declares in its own package metadata, and links to the project's repository, or to its registry page where that repository no longer exists.
Two proof stacks appear below and they are not the same thing. The on-chain verifier is hash-based: winterfell, SHA-256 and Poseidon, with no elliptic curve anywhere in the proof. The older native Groth16 prover kept in services/prover does use a curve, BN254, which is why ark-bn254, ark-groth16 and ark-circom are listed here.
Blockchain and cryptography
| Package | License |
|---|---|
| @solana/web3.js | MIT |
| @solana/spl-token | Apache-2.0 |
| Anchor Framework | Apache-2.0 |
| winterfell | MIT |
| sha2 | MIT / Apache-2.0 |
| poseidon-lite | MIT |
| @noble/hashes | MIT |
| @noble/post-quantum | MIT |
| tweetnacl | Unlicense |
| circom / snarkjs | GPL-3.0 |
| ark-circom | MIT / Apache-2.0 |
| ark-groth16 | MIT / Apache-2.0 |
Mobile and UI framework
| Package | License |
|---|---|
| React Native | MIT |
| Expo | MIT |
| expo-router | MIT |
| expo-blur | MIT |
| expo-linear-gradient | MIT |
| expo-haptics | MIT |
| expo-secure-store | MIT |
| react-native-reanimated | MIT |
| react-native-safe-area-context | MIT |
Keys and encoding
| Package | License |
|---|---|
| @scure/bip39 | MIT |
| bs58 | MIT |
State management
| Package | License |
|---|---|
| zustand | MIT |
Web and build tools
| Package | License |
|---|---|
| Next.js | MIT |
| Tailwind CSS | MIT |
| TypeScript | Apache-2.0 |
| Vite | MIT |
Notice
This list is not exhaustive.
Only direct dependencies are named. A build resolves far more than this, and the count changes with every lockfile. Read the tables as an honest map of what the project chose, not as a complete bill of materials.
The authoritative licence for any package is the text in that package's own repository, not the identifier in our table. If an attribution here is missing or wrong, write to legal@protocol-01.com.
Read this before you rely on it
Two things a reader must not miss. Every package above carries transitive dependencies under their own terms, which this page does not enumerate, so a legal review cannot stop here. And the warranty disclaimer in the licence above is meant literally: this is unaudited devnet software, with no mainnet deployment.