Real Case: How an Aerospace Company Rebuilt Its Token Model and Contracts Before a Token Sale

A confidential aerospace company, a non-crypto business, planned a utility token for an orbital clean-energy network and a token sale to fund it. It already had a whitepaper, a website and a token contract on Ethereum. It still needed a token model paced to the build, an investor-grade whitepaper, audited contracts, protection against sell pressure, an exchange route it could trust, a community and an investor pipeline. TokenMinds mapped seven areas and worked in two parts. The foundation, with the token model, the whitepaper, the audit and the technical documentation. Then the launch preparation, with a private sale round followed by an exchange listing.

Case at a glance

The Company in Detail

About the business:

• An aerospace company that designs and builds space-qualified hardware, such as deployable antennas, booms and mechanisms, and provides systems engineering and mission services.
• Its customers are space agencies, private aerospace firms and universities. Its hardware has flown on flagship science missions and on a lunar lander.
• It is a listed company preparing a move to a larger stock exchange.
• In early 2026 it announced an orbital clean-energy initiative, with a utility token as the commercial layer of that network. That was its first step into blockchain. It has no in-house crypto team.

About the goal:

• Raise funds for the clean-energy network without selling more shares, because the company was preparing a move to a larger stock exchange.
• Start with a first private sale of about USD 3M. If that round succeeds, run larger rounds later.
• Close the first round faster than a traditional equity round, which usually takes six months or more.
• Protect the token price after listing. The leadership had seen another token collapse after listing, and wanted vesting, liquidity and a market maker in place before the first trade.
• Get the existing materials ready for investors. The whitepaper, the website and the token contract already existed, but each one had to be reviewed, improved or rebuilt before the company could approach investors.

The Problem: Fundraising Gaps the Company Still Had

The company already had the three most important things for a token sale. A whitepaper, a website and a token contract. But those were not ready for investors. The whitepaper read like a pitch, the token model did not fit a long build, and the contract was too simple to pass an audit. Investors in infrastructure check the token model, the code and the protections before they read the story. TokenMinds found these seven gaps.

1. Token model.
   A supply and a price existed, but nothing tied new tokens to real network activity, and there was no case for the token holding value over a multi-year build.
2. Whitepaper.
   Complete, but not investor-grade. It did not lead with the engineering track record, and market claims sat mixed with the token model.
3. Smart contract.
   One basic contract on Ethereum, security functions possibly missing, no audit, and a likely rewrite.
4. Price protection.
   No vesting schedule, no liquidity budget and no market maker plan.
5. Exchange route.
   No vetted exchanges, no settled jurisdiction for the legal opinion, and no listing documentation.
6. Community.
   No X account and no Telegram group.
7. Investor pipeline.
   No private investor outreach and no data room.

Why These Gaps Matter to Investors

The leadership had seen another token collapse after listing and an exchange fail with funds stuck. So these protections were a condition, not a wish list. The target investors, infrastructure funds, energy and Web3 investors, deep-tech investors and family offices entering digital assets, check the same things first. The table shows what each gap means to them.

Why a Token Sale Was the Solution for the Company

The company needed money for a network that takes years to build. The usual sources did not fit. Infrastructure investors saw the technology as too new. Venture funds want returns in three to five years, and orbital construction takes longer than that. A share sale would reduce the shareholders' stake right before the move to a larger exchange. A token sale solved this because the network needs a token anyway. The token is how users book capacity, pay for energy and confirm delivery. So the company can raise money from the people who will use the network, and keep all of its shares. These are the four reasons in detail.

1. The token has a job from day one. It has seven uses. At launch, holders can burn it for a name slot on flight hardware or for a renewable energy certificate. Later, they use it to book capacity and settle energy. Six of the seven uses burn the token, so the supply goes down as the network grows.
2. No shares are sold. The token sale runs next to the company’s stock listing plans and does not compete with them. The shareholders keep their stake.
3. The round closes faster. A traditional round takes six months or more and can still fail at the end. A private sale with a finished whitepaper, audited contracts and a warm investor list closes much faster.
4. There is a real business behind the token. The company builds hardware that has flown on major missions. That is what infrastructure investors look for, and what most energy tokens cannot show.

TokenMinds and the company's lawyers kept the token as a utility token only. It gives no equity, no dividends and no share of revenue. No one earns anything just for holding it. The token is issued from a Panama entity, and people in restricted countries cannot take part.

TokenMinds' Token Sale Solution

TokenMinds worked as the company's advisor and auditor. The work has three stages. First, fix the token and the code. Second, raise the first funds from private investors who know the sector. Third, list the token on an exchange with protection in place. There is no launch platform in this plan. The image at the end of this section shows the three stages and the question each one answers for investors.

Foundation

This stage fixes what investors check first, the token and the code. TokenMinds redesigned the token model so that tokens are released as the network is built, not before. It rewrote the whitepaper around that model. The company's developers replaced the single contract with five contracts that enforce the model on-chain. TokenMinds audited them in three rounds until every medium issue was fixed. Then TokenMinds wrote the technical documentation and the system architecture that exchanges and launch partners ask for.

Private sale round

This stage brings the token to investors. TokenMinds planned to open X and Telegram from zero, publish 30 posts with graphics, work with 12 to 15 crypto creators and 5 to 6 PR placements, and contact 800 private investors through warm introductions, with a data room and allocation closing.

Exchange listing

This stage brings the token to market safely. TokenMinds checks each exchange before any introduction and introduces three. The first listing is on an accessible exchange, and larger exchanges follow as trading grows. A market maker is in place before the first trade. The legal opinion and the listing documents are prepared at the same time. The token goes from the private sale to the exchange with vesting and liquidity in place on day one.

Timing depends on the company's sign-off, exchange requirements, investor response and market conditions.

The Development Solution: Securing the Token Before Launch

Smart Contracts and Audit

The company's first contract was one simple token contract. It could not enforce the new token model, and an exchange or an auditor would have asked for a rewrite. So the company's developers rebuilt it as five contracts. TokenMinds advised on the design and then audited the result. Each contract does one job, and the rules investors care about are enforced by code.

• Token contract. A fixed supply, created once, with a blacklist for restricted accounts. No one can create more tokens.
• Governor. Token holders propose and vote. Only the company multisig can execute a proposal that passed. It cannot execute one that failed.
• Treasury. Pays only through a passed proposal, never on one person's decision.
• Vesting vault. Holds the full supply in ten fixed buckets with their lock periods and schedules. The schedule cannot be changed after deployment.
• Utility router. Handles the burns and locks behind the token's uses. It is the only contract that can be upgraded, and any upgrade is visible two days before it takes effect.

TokenMinds audited the five contracts in three rounds over six days. In the first round, TokenMinds read every contract and deployment script line by line, wrote an attack test for each suspected issue, ran random-input tests on supply, vesting math and the blacklist, ran static analysis, and ran the mainnet deployment script on a test copy of the chain. In total, 215 tests. In the second and third rounds, TokenMinds reviewed the company's fixes, replayed every original attack, and ran the full test suite and the test deployment again.

The first round found 21 issues. None was critical or high. Four were medium, which means an attacker could use them under realistic conditions. These are the four, with what was wrong and what changed.

• A front-runner could take a settlement reference. Anyone who saw a pending settlement could use the same reference first and make the user's transaction fail, or take the order. The fix. References are now recorded per payer, so one user's reference can never block another user.
• A router upgrade could reach holders’ unused allowances. Upgrades took effect at once, so a bad upgrade could move tokens from any holder who had left an allowance open. The developers changed the router so that upgrades now wait two days, and new functions approve only the exact amount needed for one action.
• A blacklisted account could still burn tokens through an allowance. The blacklist check did not cover the burn-from path, and the owner could not cancel an allowance that involved a blacklisted account. The check now covers every allowance path, and setting an allowance to zero is always allowed.
• The blacklist role could override a vote. One party holding both the blacklist role and the executor role could block opposing voters, let a minority pass a proposal, and execute it. The fix. The blacklist role moved to a separate multisig that manages itself, and deployment rejects the same address for both roles.

TokenMinds verified each fix by reading the code, replaying the original attack, and running a test deployment of the mainnet script. The remaining issues are low or informational. They do not affect funds, and they are listed in the public report. The audit score is 9 out of 10.

The audit also lists what holders can trust and what they should check. No one can create more tokens, because the full supply is created once into the vault and the schedule is fixed. A gated release or a treasury payment needs a passed vote and the company multisig. Neither can act alone. The blacklist multisig must have different signers from the company multisig, or the vote protection does not hold. Holders can compare the two multisigs on-chain after deployment. Router upgrades are visible two days ahead, so holders can cancel their allowances if they do not trust one. Escrow locks still depend on the router operator until one low issue is fixed, and the report says so plainly.

System Architecture and Technical Documentation

Exchanges and launch partners ask the same technical questions before they engage. Is the code public? Is it audited? Who holds the keys? What is built, and what is still planned? TokenMinds answered them in a technical documentation set and a system architecture graphic, so the company can apply without a developer on every call.

The architecture is easiest to read as the path a transaction takes, in seven steps.

1. The user and the wallet. A holder opens the company website, or later the energy booking app, in a browser. Every action that moves tokens is signed in the holder's own wallet. The platform never holds keys.
2. The request path. The browser talks to the website over the internet. The wallet sends the signed transaction to an Ethereum node. The same node answers the app's requests for balances, votes and vesting.
3. The off-chain services. Next to the chain sit the partners for token issuance, KYC and listing support, and the partner for fiat payments. In later phases, data feeds and ground-station validators will send transmission data to the contracts.
4. The on-chain contracts. Five contracts share the work. Holders propose and vote in the governor. The company multisig executes what passed, which releases gated vesting from the vault or pays from the treasury. The token has a fixed supply created once into the vault. The utility router burns or locks tokens for the token's uses.
5. The control layer. Three controls sit above the contracts. The company multisig with 2 of 4 signers, which executes and operates. A separate blacklist multisig with its own signers, which blocks restricted accounts. And a two-day delay on router upgrades, so holders see an upgrade before it runs.
6. The environments. A local chain and a public test network run the same five contracts and the same deployment scripts as production. Test roles are granted and given up the same way. Production is Ethereum mainnet, with the contracts verified on the block explorer after deployment.
7. The phases. The bottom of the graphic shows what runs when. Phase one is the token, governance, vesting and the router, with the audit, the token launch and the first liquidity. Phase two adds the validator test network, data feeds and the booking app. Phase three adds live settlement, validator bonding and fiat on-ramps.

The documentation also records that the contract code is public under an open-source licence, that the deployed contracts will be verified so anyone can match the on-chain code to the audited version, and that the audit reports are published with the code. It lists the technology stack, the custody setup, the five milestones of the first year, and the token's on-chain activity, from burns for name slots and certificates now to validator bonding and energy settlement in later phases.

Blockchain Setup

The token runs on Ethereum. The company chose it for its liquidity and for the number of exchanges that support it. The token follows the ERC-20 standard, with permit and vote delegation, so holders can approve by signature and take part in governance. The full supply is created once into the vesting vault at deployment. The deployer keys are given up in the same step, so no one can create more tokens or change the schedule. Admin and allocation roles sit in 2-of-4 multisigs. After deployment, the contracts are verified on the block explorer, and holders can compare the on-chain roles with the trust model in the audit report.

The Marketing Solution: Preparing the Private Sale and Listing

Token Model and Whitepaper Refinement

The rest of the marketing work depends on this one. The company's first token model had a supply and a price. But nothing paced the release of tokens to a network that takes years to build. TokenMinds redesigned it around one rule. Tokens reach the market as the network is built, not before.

The new model has a fixed supply split into ten buckets. Each bucket has its own job and its own release condition. Only 6.5 percent of the supply is in circulation at launch. The team, strategic partners and advisors hold 27 percent between them, and none of it can be sold in the first twelve months. 53 percent of the supply is released on fixed schedules. 47 percent is released only when a network event is verified, such as a network contribution, an invoiced milestone under an approved plan, or a published reserve mandate. If the network grows slower than planned, those releases slow down with it. At the busiest point of the schedule, the monthly release is capped at about 1.6 percent of the supply. On the demand side, the token has seven uses, and six of them burn the token when used, so the supply falls as the network is used.

The whitepaper was then rebuilt around that model. The first version had all the content. But it was written as a pitch, not as the document behind a sale, a legal opinion and an exchange application. TokenMinds reviewed it section by section. These are the gaps it found and what changed.

The result is a document that starts with the company's engineering record, then the energy problem the network solves, then the token's seven uses, the full allocation and vesting tables, a supply projection, a roadmap with a one-page summary of its three phases, and a legal annex with the utility statement, the Panama issuer and the country restrictions.

Brand and Narrative Planning

The investors this token is aimed at do not buy a crypto story. They buy a hardware story. So TokenMinds planned to lead every message with what the company already does, build equipment that flies, and to present the token as the commercial layer that this hardware needs. Three messages carry the story. First, an established aerospace supplier enters Web3. This answers who is behind the token. Second, real hardware, real missions, real energy demand. This places the token with infrastructure tokens, not software tokens. Third, why solar works better in orbit, the night and weather problem. This explains the network to a non-technical investor in one line. The PR angles follow the same three messages, plus milestone news when the audit, the private sale and the listing dates are announced.

Whitepaper and Documentation

The refined whitepaper is covered above. Around it, TokenMinds planned the documents an exchange asks for before it lists a token. An exchange-readiness checklist that covers the token's transfer and trading functions, the admin and ownership controls, deposit and withdrawal readiness, and the vesting and treasury logic. A legal opinion, with the issuing jurisdiction to be confirmed with the lawyers. The listing documents. And a weekly report on seven measures, launch readiness, raise progress, investor pipeline, community growth, sale sign-ups, creator and PR results, and the recommendations from them.

Organic Marketing and Community

The company had no crypto presence. So TokenMinds planned to open X and Telegram from zero and run them daily until the listing. X carries the public story and the reach. Telegram is the home base where followers become community members and sale sign-ups. The 30 posts with graphics explain the token's uses in plain terms, why solar works better in orbit, the company's flight hardware and mission record, how a landowner can host a ground station, independent validation from agencies and research, and milestone updates such as the audit, the whitepaper and the private sale. On Telegram, TokenMinds planned the setup with the company's branding, a pinned FAQ and welcome flow, daily moderation and anti-bot protection, weekly quizzes and polls, sign-up support, and escalation of technical and investor questions to the company's team.

Paid Marketing

Paid marketing in this case is about credibility with a specialist audience, not mass reach. TokenMinds planned 12 to 15 crypto creators across six groups. Educators on tokenized assets, who explain real-world-asset tokens to their followers. Energy and infrastructure creators. Space and deep-tech channels, where the company's hardware record speaks for itself. YouTube crypto educators with a retail audience. Altcoin researchers and early-stage reviewers. And owners of X and Telegram community channels. TokenMinds finds, checks, briefs and tracks each creator. Alongside, 5 to 6 PR placements in crypto and financial media build credibility before the private sale and the listing. The company approves every creator and every placement before any spend, and pays the creator and media fees directly.

Token Sale and Exchange Listing Preparation

The private sale round is sold through people. TokenMinds planned warm introductions to its own investor network, 800 investors contacted across the five target groups, and the full process from first contact to introduction calls, data-room access and allocation closing. The private round comes first for a practical reason. Exchange listing fees are due before any public proceeds arrive, so the first commitments pay for the listing.

For the listing, the company asked for one thing above all. No exchange it could not trust. So TokenMinds planned to check each exchange before any introduction, looking at its standing and its terms, and then to introduce three. The first listing goes on an accessible exchange shortly after the private sale. Larger exchanges follow as trading grows. A market maker is in place before the listing, so there are buy and sell orders, tight spreads and stable depth from the first day. The first trading pair is planned in USDT. Introductions do not guarantee a listing, and exchange and market maker fees depend on the final choices.

What a Company in the Same Position Can Take From This Case

• Pace the token model to the build, not to the launch.
  A network that takes years to build needs a release schedule to match. Here only 6.5 percent of the supply is in circulation at launch, insiders wait twelve months, and almost half of the supply is released only when network activity is verified.
• One basic contract is not a token system.
  Supply, voting, spending, vesting and the token's uses each got their own contract. Each rule is enforced where it belongs and can be audited on its own.
• Put every spend behind a vote and a multisig.
  Here no treasury payment or gated release can happen without a passed proposal and the company multisig. Neither can act alone.
• Keep the power to block accounts away from the power to execute.
  The audit found that one party holding both could silence voters and push a failed proposal through. The fix was a separate multisig with its own signers.
• Make the code and the audit public before asking for money.
  Open-source contracts, verified code and a published audit report let investors and exchanges check instead of trust.
• Vet the exchange before the exchange vets the token.
  The leadership had seen an exchange fail with funds stuck. So every exchange is checked before an introduction, and a market maker is in place before the first trade.

Planning a Token Sale?

TokenMinds runs a token sale readiness review for non-crypto companies. It checks the company's own plan against the same seven areas, lists the gaps and sets the order to close them. Read this guide on how a token sale works to see the full process.

Schedule a Call →

Frequently Asked Questions

• What does a hardware company need before a token sale?
  Seven things. A token model that fits its build. A whitepaper investors can trust. Audited smart contracts that enforce the model. Protection against price drops, with vesting, liquidity and a market maker. A safe exchange route with the legal opinion and the listing documents. A community. And a list of investors with a data room. In this case the company had the first three in draft form and none of the rest.
• How is a token model paced to a multi-year build?
  By tying the supply to activity. In this case, 47 percent of the supply is released only when a network event is verified, such as a contribution, an invoiced milestone or a published mandate. The rest is released on fixed schedules with lock periods, so insiders cannot sell in the first year and the monthly release never goes above about 1.6 percent of the supply.
• What does a smart contract audit check before a token launch?
  Whether anyone can create more tokens, break the vesting schedule or take funds, and whether a privileged role can abuse its power. In this case TokenMinds ran three rounds with a line-by-line review, attack tests, random-input tests, static analysis and a test deployment. It found four medium issues, all fixed and verified again, and no critical or high issues.
• Can a token sale replace an equity round for a listed company?
  It can fund a specific project without selling shares, if the token is a utility token with a real use and no profit rights, and if the lawyers confirm the structure. In this case the token funds the energy network, gives no equity or dividends, and is issued from a Panama entity with country restrictions. This is not legal advice. Each company needs its own legal opinion.
• Why is exchange due diligence part of token sale preparation?
  Because an exchange failure can freeze funds, and a weak listing can set a falling price for everyone. In this case the leadership had seen both happen to another token. So every exchange is checked before an introduction, and a market maker is in place before the first trade.