Uptime isn’t guaranteed in South Africa. Rolling blackouts, known locally as 'load shedding,' routinely knock out power and internet. But Hermann, running Bitcoin Ekasi, has kept his community’s Bitcoin access online using a 5-of-7 threshold Fedimint federation. As long as five of the seven guardians are reachable, transactions clear.
The system’s resilience is built on IRO, a new integration explained by Joscha on Citadel Dispatch. IRO replaces fragile DNS dependencies with static public keys and end-to-end encryption, allowing guardians to operate nodes over Starlink or mobile data without complex configuration. A node in a pickup truck can stay online when the grid fails.
"A single Start9 box isn’t a data center - but seven in consensus effectively create one."
- Joscha, Citadel Dispatch
This redundancy shifts availability from individual reliability to group consensus. It’s not about perfect infrastructure - it’s about distributed fault tolerance. And that changes who can participate: a community member doesn’t need enterprise-grade uptime to contribute.
Eric Sirion adds that Fedimint V2’s architecture prevents another kind of failure: economic. Legacy exchanges like Coinbase once struggled with 'dust' - tiny UTXOs that became too expensive to spend when fees spiked. Fedimint V2 solves this by forcing immediate UTXO consolidation at deposit. Every incoming deposit folds into a single federation UTXO, paid for by the depositor.
This design means the federation never accumulates small outputs that could price it out of on-chain settlements. Sirion argues that assuming cheap on-chain space is a dangerous illusion. If Bitcoin succeeds, fees will be high - so the system must assume base layer is for settlement, not daily use.
"Optimizing for the lowest fee is a short-term game. The future is eCash and Lightning for volume."
- Eric Sirion, Citadel Dispatch
The modularity goes further. Joscha notes that Fedimint now cleanly separates custody from routing. Guardians secure the Bitcoin via multisig; gateways - professional operators - handle Lightning liquidity. A gateway can’t steal funds, but it can deny service. To counter that, federations can connect to multiple gateways and automatically fail over.
That means a shop in Bitcoin Ekasi can route payments through a high-uptime cloud gateway while the underlying Bitcoin stays in a community-controlled multisig. The system is trust-minimized, fault-tolerant, and designed for the real world - not the ideal one.
