Understanding AMP
What it does, how it was built, and what drives its value. A technical overview without the hype.
Quick primer: Flexa is a payment network that lets merchants accept cryptocurrency instantly. AMP is the collateral token that makes instant payments possible. Here's how.
AMP (contract: 0xff20817765cB7f73d4bde2e66e067E58D11095C2) is an ERC-20 collateral token with a fixed supply of approximately 99.4 billion tokens. It secures real-time cryptocurrency payments on the Flexa network, which operates across 40,000+ US retail locations including Chipotle, GameStop, Nordstrom, and Sheetz. Stakers deposit AMP into collateral pools and earn a share of network transaction fees. The smart contract is immutable and was audited by ConsenSys Diligence and Trail of Bits. Capacity v3 (Anvil) introduced 12-24 hour unlock windows for staked tokens.
Why AMP
The speed-security tradeoff that blocks crypto at the register, and how AMP resolves it.
TL;DR
AMP is a collateral token on Ethereum. When you pay with crypto through Flexa, AMP locks in escrow so the merchant gets paid instantly, before the blockchain settles. Once settlement completes, the AMP unlocks. If the payment fails, the collateral covers the merchant. Stakers earn transaction fees for providing that guarantee.
Every cryptocurrency has the same problem at a physical register. Bitcoin takes about 60 minutes to fully settle on-chain. Ethereum takes roughly 13 minutes to reach finality (the point where a transaction is irreversible) under Casper FFG, its consensus mechanism.[12] Even faster chains need several confirmations before a payment can be called final. Merchants can't hold a customer at the checkout for that long, and they can't accept a payment that might still reverse.
AMP solves this by acting as collateral. When you pay with crypto through Flexa, AMP is locked in escrow for the duration of that transaction's settlement window. The merchant receives confirmation in under a second, guaranteed by the locked AMP, not by waiting for block confirmations. Once the underlying blockchain payment completes, the AMP unlocks and re-enters circulation. If the payment somehow fails, the collateral covers the merchant. Either way, the merchant gets paid. Think of stakers as surety bond providers: they lock AMP to guarantee merchant payments settle, and earn transaction fees for taking on that risk.
The result is sub-second checkout at the register, backed by a guarantee that doesn't require trusting the customer, the blockchain, or a payment processor. Just the collateral math. Because AMP is the collateral layer rather than the payment asset itself, Flexa can accept any digital asset the customer holds (BTC, ETH, SOL, USDC, and 99+ more), all using the same guarantee mechanism.[1]
Merchant bears the risk until then.
AMP absorbs the risk. Merchant is whole immediately.
But what about fast L2s and Solana? Speed is real, but it's not the same as finality. Base processes transactions in roughly 2 seconds. However, that soft finality means the transaction could still be reversed for 20 to 30 minutes until settlement confirms on Ethereum L1 (the main chain, where finality is absolute). For a collateral system that guarantees merchant payment, soft confirmations aren't enough. The merchant needs a guarantee that can't reverse, which only arrives after L1 finality.
Solana is fast. Transactions confirm optimistically in under a second (~400ms slot time), though true finality takes longer as the cluster reaches rooted consensus. Solana Pay handles direct transfers well, but it only accepts SOL and SPL tokens. A merchant using Solana Pay can't take Bitcoin, Ether, or anything on another chain. The network has also experienced at least 8 major consensus-halting outages since launch, including a roughly 5-hour outage in February 2024. For a single-chain payment rail, downtime means the register stops.
AMP solves a different problem. It sits on Ethereum L1 as a chain-agnostic collateral layer. A customer can pay with BTC, ETH, SOL, USDC, or 99+ other assets across any supported chain, and the merchant gets the same instant guarantee backed by locked AMP. Flexa doesn't compete with fast chains. It uses them as settlement rails while AMP backstops the gap between speed and finality.
Origin
How Flexa went from Flexacoin to AMP, and what required a new token to get there.
Flexa launched in 2018 with a mission to make cryptocurrency spendable everywhere.[3] In 2019, they introduced Flexacoin (FXC)[4] — a standard ERC-20 (Ethereum's basic token format) that served as collateral for Flexa's payment network. It worked, and the system ran in production. But the architecture had a hard limit: to use tokens as collateral, they had to be transferred to a smart contract. That's custodial. Your tokens were no longer yours while they were locked.
To build something fundamentally better, two capabilities were required that FXC couldn't support:
The ability to stake tokens as collateral without moving them out of your wallet (the original Capacity v1/v2 model), by splitting a single balance into labeled sub-accounts (partitions) inside the contract. FXC had no concept of sub-accounts.
Smart contracts that handle lock, release, and reward logic with customizable rules per pool. FXC had no hook system to support this.
Neither feature could be retrofitted onto FXC after the fact. A new contract was the only path. Before deploying a single token, two independent security audits were commissioned. ConsenSys Diligence reviewed the contract in June 2020. Trail of Bits ran a second audit in July–August 2020. Both came back without critical findings.[6,7] The migration was 1:1: burn FXC, receive AMP.[5]
The deeper difference: FXC couldn't assign conditional access rights to tokens — it could only transfer them. AMP's partition system inverted this. A single balance can be segmented into independently-governed sub-accounts, each with its own transfer rules enforced by the AMP contract itself via ERC-1820 hooks.[2] A collateral manager can lock a partition and veto any release attempt until conditions are met — without taking custody of the tokens. The result: the same AMP can be reused across transactions once each settles, rather than requiring a separate token pool per lock — a structural capital efficiency advantage no escrow-based design can match. As of 2026, no comparable implementation exists in production — though Flexa's own staking moved to the Anvil Vault deposit model in Capacity v3 (covered below); the partition system remains in the immutable AMP contract, but it is no longer the path Flexa uses for collateral.
Flexa announces its mission to make cryptocurrency spendable everywhere.
Flexa launches Flexacoin (FXC) — a standard ERC-20 — as the collateral token for the payment network. It works, but the architecture has a ceiling.
ConsenSys Diligence completes a full security review of the AMP contract. One of the most respected smart contract security firms in the space. No critical findings.
A second independent audit by Trail of Bits. Two separate firms, two separate reviews, before a single token launched.
AMP deploys on Ethereum mainnet (August 11, 2020) and launches publicly that September. FXC holders swap 1:1 — burn FXC, receive AMP. The partition architecture and collateral manager framework are live on mainnet.
Flexa Capacity v3 launches with the Anvil protocol, introducing predictable 12–24 hour unlock windows and a cleaner staking UX.
Smart Contract
What makes AMP's architecture different from a standard ERC-20, and why it matters.
Standard ERC-20 contracts are ledgers. One balance per address. To use those tokens as collateral, they have to move: out of your wallet, into a contract you don't fully control. AMP changes this with a partition system built into the token contract itself.
Every AMP wallet can contain multiple sub-accounts called partitions, each identified by a 32-byte prefix. Your wallet might show 50,000 AMP total, but inside, 20,000 might sit in a default (liquid) partition and 30,000 in a Flexa collateral partition. Both are yours. The collateral manager can restrict which partition you withdraw from, but it cannot take the tokens or transfer them elsewhere.[2]
The locking mechanism works through transfer hooks registered via ERC-1820 (an on-chain registry that lets smart contracts subscribe to token events, similar to webhooks in web development).[2,9] When AMP moves between partitions, it calls pre- and post-transfer hooks on any registered collateral manager. Those hooks can approve or block the movement until conditions are met, like a blockchain payment reaching finality.
Capacity v3 (Anvil) changes the custody model: instead of partition-based locking within your wallet, tokens are deposited into the Anvil Vault contract. Your AMP leaves your wallet and is held by the vault smart contract, with a 12–24 hour cooldown on withdrawals. The partition architecture remains part of the AMP contract, but the current staking interface uses the vault deposit model.
Any protocol that needs an instant, on-chain, non-custodial guarantee can register as a collateral manager. The interface is permissionless — it's in the contract, not in Flexa's control. Flexa is the primary production operator today. Here's what else the architecture supports.
Bridges need to guarantee that locked value on chain A is fully backed before releasing it on chain B. Without that guarantee, bridges rely on optimistic assumptions — which is why most major bridge hacks happen.
A bridge registers as a collateral manager. When a user initiates a transfer, AMP locks in their partition. The destination chain receives cryptographic proof the collateral is in place and can release funds immediately — no waiting, no trust required.
Protocols like credit-based lending (think Goldfinch or Maple Finance) extend loans without requiring 150% collateral. The risk is borrower default with nothing to cover it.
Borrowers lock AMP as a performance bond in a protocol-owned partition. If they repay, the partition unlocks. If they default, the collateral manager slashes the partition to cover the lender — instant, on-chain, no liquidation auction needed.
Perpetuals and options platforms freeze margin when a position opens. Currently that means tokens moving into a protocol contract — custody risk for the trader.
AMP partitions let the protocol lock margin in-wallet. Open a 10x long, and a matching AMP partition is frozen. Close the position, the partition unlocks. The protocol never takes custody of the underlying tokens.
Flexa isn't the only payment network that has this problem. Any network settling crypto payments at POS — or any checkout flow where the merchant confirms before the chain does — needs something to guarantee the gap.
The collateral manager interface is permissionless. Any network can implement it, register with the AMP contract, and gain access to the same instant-finality guarantee Flexa uses. Flexa is the first. It doesn't have to be the last.
Price Engine
How AMP's value is driven by real commerce, not token emissions or speculation.
Most staking tokens generate yield by printing more tokens. AMP doesn't. The economics work differently and that distinction matters.
Merchants on the Flexa network pay roughly 1% per transaction,[11] a fraction of the 3–4% charged by major card networks. Per the AMP whitepaper design, Flexa uses merchant fee revenue to buy AMP on the open market for distribution to stakers.[2] Those purchased tokens are then distributed to stakers pro rata, based on the size and duration of their collateral stakes. No new tokens are minted. The yield comes from actual commerce.
As stakers lock up AMP to earn yield, the liquid circulating supply contracts. Less liquid supply with continuous buy pressure from the fee mechanism creates compounding price dynamics. More transaction volume means higher staking yields, which incentivizes more staking, which tightens supply further. The loop is self-reinforcing as long as Flexa's network grows.
How Capacity v3 distributes rewards
Flexa Capacity v3 (the Anvil protocol, launched March 2025) introduced a more granular reward system. Three mechanics determine how fee revenue flows to stakers.
Risk-aligned rewards
Each pool backs a different app or network. Flexa relies on collateral providers to actively discern risk — pools with higher risk profiles can offer higher reward rates. You choose which pools to back.
FIFO time-weighting
Rewards are distributed monthly and weighted by FIFO order — the earlier your tokens were pooled, the higher your share. This minimizes the impact of large late additions skewing distributions.[10]
Boosts
Each month, select pools get a bonus rewards multiplier in collaboration with ecosystem partners. Stake by the 5th of the month to qualify for that month's Boost. Boosted pools rotate monthly.[14]
How AMP Compares
AMP doesn't fit cleanly into common token categories. Here's how it stacks up.
It's not a governance token — AMP holders don't vote on protocol parameters. It's not inflationary staking — no new tokens are minted to pay stakers. It's not a wrapped asset — there's no underlying BTC or ETH behind it. It's collateral, a category that operates by different rules from most of what's out there.
| Aspect | AMP | USDC | BTC | Standard ERC-20 |
|---|---|---|---|---|
| Custody | Liquid AMP in your wallet; staked AMP in Anvil Vault (v3) | Circle can freeze your balance | Full (hardware wallet) or none (exchange) | Sent to external contract |
| What it secures | Payment settlements | USD peg / exchange medium | Nothing natively as collateral | Varies by protocol |
| Yield source | Real transaction fees | None (DeFi lending required) | None natively | Inflation or governance |
| Inflationary | No — fixed max supply | Expansionary — minted on demand | No — 21M hard cap | Often yes |
| Immutable contract | Yes — no upgrade path | No — Circle admin / blacklist | N/A — not a smart contract | Varies |
| Your control | Vault-secured (v3) · withdrawable after cooldown | Partial — Circle blacklist authority | Full (self-custody) or none | None after lock |
Why no other token can do what AMP does
The combination of properties in the left column doesn't exist anywhere else in the ERC-20 ecosystem. That's not marketing. It's an architectural constraint. Each of these properties individually could be replicated. All of them together require a contract design that simply wasn't part of the ERC-20 standard, which is why AMP needed its own token.
USDC maintains a dollar peg but Circle holds admin keys. The company can freeze any balance at will,[13] the contract has been upgraded before, and there is no native yield without locking into third-party DeFi. Bitcoin offers the strongest immutability guarantee in crypto but cannot natively serve as on-chain collateral: using it requires wrapping (custodial) or bridging (counterparty risk). Standard ERC-20 collateral requires moving tokens into a third-party contract, creating lock-in and counterparty exposure. None of these combine purpose-built collateral architecture with immutable settlement rules and fee-sourced yield simultaneously.
AMP's partition system was designed to solve a problem the others were never trying to solve: how do you lock value as collateral without taking custody of it? The answer required building a new primitive. As of 2026, no other token has replicated this architecture in production.[2,8] (Note: Capacity v3 moved to a vault-based deposit model via Anvil, but the partition architecture remains part of the underlying AMP contract.)
The 100 Billion Supply
Why the token count is large, what it means, and why the accessible float is what actually matters.
100 billion tokens is an unusual number. It can feel like a red flag for people accustomed to assets with hard scarcity baked in. The context: AMP's supply came from FXC's original issuance and migrated 1:1. It wasn't designed for individual token scarcity. It was sized to provide enough granularity for fractional collateral across millions of simultaneous transactions.
At AMP prices around $0.0005 (mid-2026), collateralizing a single $50 transaction at 1.5x overcollateralization requires around 150,000 AMP. Scale that across thousands of concurrent transactions happening simultaneously and you need a large token count to make the math work at any meaningful payment volume.
Flexa's pre-authorization hold procedure is protected by US patent. The system locks the hold amount plus an over-collateralization equal to the asset's estimated price fluctuation over the hold window — the patent's worked examples estimate fluctuation ranges up to ±100–300% for volatile assets, locking $2 to back a $1 hold and $800 to back a $200 hold, with the excess unlocked afterward. Competitors cannot replicate this mechanic without licensing or inventing around it. View patent ↗
The more relevant number is the accessible float. Approximately 20.5 billion AMP, around 21% of supply, was staked in Flexa Capacity as of mid-2026.[14] That locked supply doesn't trade. As the network grows and staking yields improve, that percentage is expected to climb. Total supply is hard-capped at 100 billion — the only new AMP comes from the last sliver of unswapped Flexacoin converting 1:1. The liquid float is what moves.
Total max supply: 100,000,000,000 AMP · Fixed. No mint function. No inflation.
Flexa vs. The Field
How the Flexa payment network, powered by AMP collateral, scores against every qualified crypto payment rail.
AMP is the collateral engine. Flexa is the network it powers. The table below scores nine live payment rails across 11 criteria: settlement architecture, chargeback immunity, finality speed, payment guarantee, privacy, fees, refunds, fiat payout, POS reach, e-commerce coverage, and agentic compatibility.
Criterion 4, Payment Guarantee, is where Flexa separates from every competitor. It's the only rail with a staked collateral backstop: AMP is slashed to make the merchant whole if a payment fails pre-confirmation. No other scored rail replicates this. The other differentiator: Flexa accepts any digital asset the customer holds (BTC, ETH, SOL, USDC, and 99+ more) because the collateral math works the same regardless of which chain settles the underlying payment.
KAST · Rain · SoFi/MC · Shift4 · Mastercard/MoonPay · Visa/Baanx — crypto converts to fiat before merchant
| Competitor | Rail | No CB | Speed | Guar. | No PII | Fees | Refunds | Fiat Out | POS | E-Comm | Agentic | Total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Flexa / AMP | 5 | 5 | 5 | 5 | 5 | 4 | 4 | 4 | 5 | 2 | 3 | 47 |
| Solana Pay | 5 | 5 | 5 | 1 | 5 | 5 | 4 | 3 | 3 | 4 | 4 | 44 |
| Lightning Network | 5 | 5 | 5 | 2 | 5 | 5 | 3 | 2 | 5 | 3 | 3 | 43 |
| Coinbase / Base | 5 | 4 | 4 | 2 | 4 | 4 | 3 | 4 | 2 | 5 | 5 | 42 |
| WalletConnect + Ingenico | 3 | 4 | 4 | 2 | 4 | 3 | 3 | 5 | 4 | 3 | 2 | 37 |
| x402 Protocol | 4 | 5 | 4 | 2 | 5 | 5 | 2 | 1 | 1 | 3 | 5 | 37 |
| Meshnew | 4 | 4 | 4 | 2 | 3 | 3 | 3 | 5 | 2 | 4 | 3 | 37 |
| Stripe Stablecoin | 3 | 3 | 4 | 2 | 2 | 3 | 4 | 5 | 2 | 5 | 3 | 36 |
| PayPal Pay w/ Crypto | 2 | 2 | 3 | 2 | 1 | 3 | 2 | 5 | 3 | 5 | 2 | 30 |
| Card-Rail Productsdisq | KAST · Rain · SoFi/MC · Shift4 · Mastercard/MoonPay · Visa/Baanx — consumer crypto converts to fiat before merchant | DISQ | ||||||||||
What's Live Today
The whitepaper came out in 2020. Here's what actually shipped.
A lot of crypto whitepapers describe things that never happen. AMP is one of the cases where the core claims are largely in production. The quick version: sub-second checkout is real, the fee-to-staker mechanism is running, and the token contract has been live and immutable for over four years. Geographic scale is the honest gap.
Capacity v3 introduced ANVL as the protocol governance token. ANVL holders vote on pool parameters — which wallet apps qualify, how rewards are weighted, and how fee structures are set. If you encounter references to ANVL outside this site, that is the governance system for the staking pools described above.
- [1]Flexa Payments — Supported Currencies — 99+ digital currencies accepted. Full list of payment assets.
- [2]AMP Whitepaper — "Amp: Digital Collateral for Real-World Transfers" (2020) — Full technical specification: partition system, collateral managers, token economics, finality assurance.
- [3]"We're Making Cryptocurrency Spendable Everywhere" — Flexa, Medium (2018) — Original Flexa launch announcement.
- [4]"Introducing Flexacoin" — Flexa, Medium (2019) — FXC token launch as the original collateral token for the Flexa payment network.
- [5]"Flexa Capacity is migrating to AMP" — Flexa, Medium (2020) — Official FXC → AMP migration announcement: rationale, mechanics, 1:1 swap.
- [6]ConsenSys Diligence Audit — AMP Token (June 2020) — Smart contract security review. No critical findings.
- [7]Trail of Bits Audit — AMP Token (July–Aug 2020) — Independent security audit by Trail of Bits.
- [8]AMP Token Contract — Ethereum Mainnet — 0xfF20817765cB7f73d4bde2e66e067E58D11095C2 · Deployed Aug 2020 · Immutable.
- [9]docs.amp.xyz — AMP Documentation — Partition system, collateral managers, use cases.
- [10]Flexa Capacity v3 — Flexa Newsroom (Feb 2025) — Anvil protocol launch, 12–24 hour unlock windows.
- [11]Flexa Payments — Pricing — All-inclusive 1% merchant fee per transaction.
- [12]Ethereum Proof-of-Stake — ethereum.org — PoS consensus: 12s slots, 32-slot epochs, Casper FFG finality (~13 min).
- [13]USDC Terms of Service — Circle — Circle's authority to freeze and blacklist USDC addresses.
- [14]Flexa Capacity — app.flexa.co — Live staking interface. Current staked AMP and pool breakdown.
- [15]flexa.co — Official Flexa Website — Sub-second checkout, merchant network details.