Digital Assets

Investing In Marlin (POND) – Everything You Need to Know

Marlin now centers on Oyster confidential compute, where providers stake POND and customers pay for TEE-based jobs. Learn how the token, security model, and risks work.

mm
Add Securities.io to your preferred sources on Google
Disclosure:

Securities.io may receive compensation when you use links to products we review. This does not influence our editorial evaluations. We are not a registered investment adviser; this is not investment advice. Read our affiliate disclosure.

Marlin (POND ) is a verifiable-computing network whose main 2026 product is Oyster, a marketplace for confidential virtual machines and serverless jobs running inside trusted execution environments. POND is used as operator collateral, for staking and delegation in Marlin’s relay network, and for governance; users generally pay Oyster compute fees in USDC.

This is a major evolution from Marlin’s original “layer-0” networking pitch. The current investment case depends on demand for confidential compute, the security of hardware enclaves, operator collateral, and whether POND captures enough value when customer payments are denominated in another asset.

What Is Marlin?

Marlin develops decentralized infrastructure for applications that need offchain computation without fully trusting a conventional cloud provider. Its products include Oyster confidential compute, a relay network for low-latency blockchain data, Kalypso for zero-knowledge proving coordination, and supporting attestation and key-management tools.

The protocol operates largely through smart contracts on Arbitrum (ARB ), while POND also exists on Ethereum (ETH ) and BNB Chain. Developers can call Oyster through Web2 APIs or blockchain transactions, allowing both conventional software and decentralized applications (DApps) to use the network.

Oyster Confidential Compute

Oyster runs workloads inside trusted execution environments, or TEEs. A TEE is an isolated hardware enclave intended to prevent the machine owner from reading or changing the code and data running inside it. Remote attestation can prove that a recognized enclave is executing a particular software image.

Oyster supports confidential virtual machines and serverless jobs. A CVM gives a developer a dedicated Linux environment for a chosen period, similar to renting a cloud instance. Serverless jobs share a pool of online nodes and can execute short requests or scheduled subscriptions without the user reserving an entire machine.

Use cases include private AI agents, model inference, bots, oracles, automated DeFi strategies, front ends, gateways, and services that need secret keys. The system supports reproducible builds, attestation verification, persistent key-management services, Docker-based deployment, and encrypted enclave networking.

How the Oyster Marketplace Works

Infrastructure providers advertise hardware types, regions, and prices. A customer selects an operator and funds a job-specific escrow. Current documentation specifies USDC as the Oyster payment token and uses Arbitrum ETH for transaction fees.

Providers must stake POND for each job. Matching logic checks that an operator has enough unlocked collateral, and the required stake can be locked while the job is active. Monitoring and auditing are intended to detect failures; misbehaving providers can be slashed and jobs reassigned.

This separates payment from security. USDC makes pricing predictable for customers, while POND collateral aligns operators. It also means Oyster revenue does not automatically require customers to buy POND. Token value capture depends on how much collateral operators need, whether slashing is meaningful, and what fees or rewards flow to stakers.

TEE Security Tradeoffs

TEEs can deliver near-normal server performance and run general Linux software, unlike many zero-knowledge systems that require specialized circuits. They also rely on hardware manufacturers, firmware, attestation services, enclave-image integrity, and defenses against side-channel attacks.

An attestation proves what image is running only if users know which measurements are approved and can connect them to auditable source code. Reproducible builds help bridge that gap. A host can also censor traffic, terminate an instance, or deny service even when it cannot read enclave memory.

What Are POND and MPond?

Marlin uses POND and MegaPOND, or MPond. The maximum supply is 10 billion POND, and one MPond can be created by locking one million POND in a conversion contract. At most 10,000 MPond can therefore exist. Conversion back to POND can be subject to governance-controlled delays and limits.

POND is transferable and used for operator collateral, delegation, rewards, and ecosystem participation. MPond was designed as a less-liquid governance and node-operator asset. Marlin’s contracts and staking moved from Ethereum to Arbitrum, though official bridges and contracts remain relevant across supported chains.

The dual-token design is unusual and easy to misunderstand. Investors should account for POND locked behind MPond, tokens in bridge contracts, network migration, circulating supply on each chain, and governance changes to conversion parameters.

Why Investors Consider POND

  • Operational compute network: Oyster provides deployable confidential VMs and serverless jobs.
  • Operator collateral: infrastructure providers must stake POND for eligible Oyster jobs.
  • General-purpose workloads: Docker and Linux support broaden the market beyond one blockchain use case.
  • AI and automation: enclaves can run agents, models, scheduled tasks, and private data workflows.
  • Staking and delegation: POND and MPond participate in Marlin relay infrastructure and governance.
  • Fixed maximum: the combined design cannot exceed 10 billion POND-equivalent units under the published contracts.

Risks of Investing in POND

  • Value-capture risk: Oyster customers pay USDC, so compute demand may not translate directly into POND buying pressure.
  • Hardware trust: Intel, AMD, AWS, and Nvidia enclave technologies can have firmware, implementation, or side-channel vulnerabilities.
  • Operator concentration: cloud access, specialized hardware, and capital requirements can concentrate jobs among a few providers.
  • Early-protocol risk: some published Oyster parameters remain marked as to be determined.
  • Slashing uncertainty: collateral protects users only if monitoring, fault attribution, and penalty amounts are effective.
  • Dual-token complexity: POND/MPond conversion and cross-chain migrations complicate supply and governance analysis.
  • Competition: conventional clouds, decentralized compute markets, restaking networks, and zero-knowledge coprocessors compete for workloads.
  • Application risk: secure execution cannot fix malicious code, unsafe keys, flawed inputs, or bad external data.
  • Bridge and contract risk: Arbitrum, Ethereum, BNB Chain, conversion, staking, marketplace, and escrow contracts add dependencies.
  • Regulatory risk: confidential compute can face scrutiny when used for financial automation, privacy, or restricted workloads.

What Investors Should Monitor

Track paid Oyster jobs, compute hours, USDC revenue, repeat developers, serverless requests, active providers, hardware diversity, geographic distribution, uptime, job reassignments, slashing events, audits, disclosed enclave vulnerabilities, and production applications.

For POND, monitor operator collateral, delegated supply, POND/MPond conversions, bridge balances, reward emissions, governance turnout, parameter changes, exchange liquidity, and the ratio of paid compute demand to token incentives.

How to Buy Marlin (POND)

POND is available on selected centralized exchanges. Availability and regional eligibility can change.

Coinbase – A publicly traded exchange listed on Nasdaq. Asset availability varies by country and account.

Kraken – Provides crypto trading in many eligible jurisdictions. Asset support and customer restrictions vary.

POND exists on multiple networks. Verify the official contract, bridge, and receiving chain before transferring it.

POND Price Chart

Final Thoughts

Marlin has moved from a broad networking thesis to a more concrete confidential-compute market. Oyster’s Docker workflow, TEEs, attestations, and operator collateral create a credible technical product for private AI and blockchain automation.

POND investors still need evidence of value capture. The protocol can grow USDC-denominated compute revenue without proportional token demand. The strongest case requires expanding paid workloads, diverse operators, meaningful collateral and slashing, secure enclave implementations, and transparent economics linking network use to POND.

David Hamilton is a full-time journalist and a long-time bitcoinist. He specializes in writing articles on the blockchain. His articles have been published in multiple bitcoin publications including Bitcoinlightning.com