Design NFT Fractionalization - System Design | WinJob

Problem Statement: Fractional NFT Ownership

Fractional / Tessera / NFTX-class platform locks a high-value ERC-721 in an on-chain vault, mints a fixed-supply ERC-20 share token (e.g., 1M shares), and lets collectors trade micro-ownership on an AMM or curated order book. Owners retain a buyout right: anyone can acquire 100% by paying a reserve price that burns or escrows all outstanding shares.

Core journeys

Curator/owner deposits NFT → vault mints shares → lists liquidity pool with seed ETH
Investor swaps ETH for fractional shares, tracks NAV per share from verified sales + TWAP floor
Buyout bidder triggers auction when offer ≥ reserve; shareholders paid pro-rata in ETH/WETH

Why interviewers ask this

Fractionalization blends custody, token economics, oracle risk, and governance—the same primitives as real-world syndicates but with 24/7 on-chain settlement.

Mechanism (problem)

Vault escrows ERC-721; ERC-20 shares represent pro-rata economic interest
Secondary trading on AMM with NAV anchors from sales TWAP
Buyout path returns ETH to shareholders before NFT exits vault

Fractionalization invariants (sec-01)

On-chain vault custody and share totalSupply are authoritative; off-chain NAV is a projection with stalenessSeconds and confidence fields. Never let API quotes diverge >50 bps from on-chain pool spot without a warning badge.

Failure modes (sec-01)

Wash-sale oracle spike inflates NAV before buyout (problem)
Liquidity rug when curator pulls AMM range (problem)
Partial buyout deadlock if shareholders do not redeem (problem)

Interview checkpoint (sec-01)

When Fractional/Tessera interviewers probe problem, cite $500M vault TVL, 2,500 active vaults, and buyout pro-rata redeem—not a generic NFT marketplace diagram.

Staff+ talking point

Separate share price UX from vault solvency: the AMM can look healthy while NAV oracle is stale—surface confidence scores beside every quote.

javaOne Dark Pro

1 public record NavShare1(java.math.BigInteger vaultEthWei, java.math.BigInteger twapFloorWei, long totalShares) {
2   public java.math.BigDecimal navPerShare() {
3     if (totalShares == 0) return java.math.BigDecimal.ZERO;
4     return new java.math.BigDecimal(vaultEthWei.add(twapFloorWei)).divide(new java.math.BigDecimal(totalShares), java.math.MathContext.DECIMAL64);
5   }
6 }

pythonOne Dark Pro

1 def nav_per_share_1(vault_eth_wei: int, twap_floor_wei: int, total_shares: int) -> float:
2     if total_shares <= 0:
3         return 0.0
4     return (vault_eth_wei + twap_floor_wei) / total_shares

typescriptOne Dark Pro

1 export function navPerShare1(vaultEthWei: bigint, twapFloorWei: bigint, totalShares: bigint): number {
2   if (totalShares === 0n) return 0;
3   return Number(vaultEthWei + twapFloorWei) / Number(totalShares);
4 }

Why interviewers care

NFT Fractionalization interviews reward crisp scope, explicit trade-offs, and failure stories—not generic microservice diagrams.

Interview checkpoint

Name one failure story for Problem Statement: Fractional NFT Ownership that proves you understand real outages, not happy-path diagrams.

Key Highlights

•Vault locks NFT; mints ERC-20 shares (problem)
•NAV/share anchors AMM quotes and buyout fairness (1/30)
•TWAP oracle with staleness gates trading (problem)

1	public record NavShare1(java.math.BigInteger vaultEthWei, java.math.BigInteger twapFloorWei, long totalShares) {
2	public java.math.BigDecimal navPerShare() {
3	if (totalShares == 0) return java.math.BigDecimal.ZERO;
4	return new java.math.BigDecimal(vaultEthWei.add(twapFloorWei)).divide(new java.math.BigDecimal(totalShares), java.math.MathContext.DECIMAL64);
5	}
6	}

1	def nav_per_share_1(vault_eth_wei: int, twap_floor_wei: int, total_shares: int) -> float:
2	if total_shares <= 0:
3	return 0.0
4	return (vault_eth_wei + twap_floor_wei) / total_shares

1	export function navPerShare1(vaultEthWei: bigint, twapFloorWei: bigint, totalShares: bigint): number {
2	if (totalShares === 0n) return 0;
3	return Number(vaultEthWei + twapFloorWei) / Number(totalShares);
4	}