> For the complete documentation index, see [llms.txt](https://docs.bextree.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.bextree.com/security/program-ids.md).

# Program IDs

Bextree's three programs are deployed to **Solana mainnet**. These are the only legitimate Bextree program addresses — treat any other address claiming to be Bextree as hostile, and [report it](/security/responsible-disclosure.md).

Bextree's production programs are **proprietary**. The program IDs below are published so users can independently verify that transactions interact with the correct on-chain programs; the source code and build tooling are not published. See [Program Registry](/developers/program-registry.md).

| Program                                                   | Purpose                                                                                                                                                                                                                                                                                           | Program ID                                                                                                                |
| --------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------- |
| **Asset Vault**                                           | Custodies seller assets (LP position NFTs) in escrow from listing until settlement or withdrawal                                                                                                                                                                                                  | [`HwR1J9JTTECN2cvEWgUdVoM5BbHQhYoBrca3Y7Ytr1os`](https://solscan.io/account/HwR1J9JTTECN2cvEWgUdVoM5BbHQhYoBrca3Y7Ytr1os) |
| **Settlement**                                            | Executes buyer/seller settlement and USDC escrow for vaulted (pre-custodied) assets                                                                                                                                                                                                               | [`4wRDs4r5tvs7YSrgKvMsTuLdibr4C4YK7yNA2Syg2iyz`](https://solscan.io/account/4wRDs4r5tvs7YSrgKvMsTuLdibr4C4YK7yNA2Syg2iyz) |
| **Post-Custodied Settlement** (Streamflow & Jupiter Lock) | Settlement, escrow, window, and bond handling for post-custodied vesting and token-lock positions. This program never integrates with either protocol directly — it only verifies that a position's recipient equals the confirmed buyer, so the same program covers both without any code change | [`5qeazEis9kwjLjTcJHkEJ9CPGCt3jsyx6yxPVro38cwF`](https://solscan.io/account/5qeazEis9kwjLjTcJHkEJ9CPGCt3jsyx6yxPVro38cwF) |

## Related addresses

| Role                                                                                                         | Address                                                                                                                                                                             |
| ------------------------------------------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Squads multisig** — upgrade authority for all three programs **and** controlling authority of the treasury | [`8n5xWEtc6p6xcphGLFFM3RAeXE5WQhXJg3aAPxk3bzDT`](https://solscan.io/account/8n5xWEtc6p6xcphGLFFM3RAeXE5WQhXJg3aAPxk3bzDT) — see [Upgrade Authority](/security/upgrade-authority.md) |
| Treasury USDC token account (owned by the multisig above)                                                    | [`rTMH3d1toC7nC4RFamxpXc9LHRDCVxp4AYkVP7mjwTx`](https://solscan.io/account/rTMH3d1toC7nC4RFamxpXc9LHRDCVxp4AYkVP7mjwTx) — see [Treasury](/security/treasury.md)                     |
| Payment mint (USDC)                                                                                          | [`EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v`](https://solscan.io/token/EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v)                                                             |

The same Squads multisig intentionally serves as both the upgrade authority for the deployed programs and the controlling authority of the treasury — governance is centralized under one multi-signature authority rather than scattered across separate wallets. The treasury token account is a distinct account **owned by** that multisig.

## Verify it yourself

Don't take this page's word for it:

1. Open any program ID on Solscan and confirm it's an executable program owned by the upgradeable BPF loader.
2. Confirm the upgrade authority matches the address above.

Always verify that transactions interact with the program IDs listed here.