Docs / Trust / The contracts

The contracts.

One hook, many pools. Non-custodial end to end.
This page lists the contracts chain by chain. A row appears when a contract is deployed.

Where it runs

ChainState
Robinhood Chain testnet, 46630Deployed. Addresses below.
Elysium mainnetDeployment target. No address yet.

Chain 46630, Robinhood Chain testnet

ContractRoleAddress
Hook, current testnet buildLocked rates and split, crew slot and crew bucket. Source-verified. Its crew key is set directly: the 72-hour replace path is in the deploy build, not this one. No buyback vault is set on this build, so its share stays accrued in the hook.0x029f…aAcc
Hook, earlier testnet buildCurve, open and fee split. No crew slot. Source-verified.0x6793…6aC8
TokenFactory, current testnet buildLaunch entry point for the current hook. Source-verified.0xC79e…060f
TokenFactory, earlier testnet buildLaunch entry point, earlier build. Source-verified.0x3254…A961
LaunchTokenToken implementation, earlier build. Source-verified.0xEdD7…5320
ReputationRegistryLaunch and referrer record, earlier build. Source-verified.0x0f25…Ea37
POLMathPool math library, earlier build. Source-verified.0x3bc5…5037
PoolManagerUniswap's v4 PoolManager on this chain.0x8366…0951

Non-custodial invariants

  • No admin can drain funds or the pool. The protocol owner has no power over any pool's crew.
  • One owner setting moves money, on notice. In the deploy build, the buyback share sweeps to a vault. The proposed deploy sets it before any fee accrues. Every later change waits 48 hours in public, sweeps keep paying the current vault during the wait, and the owner can cancel inside it.
  • Emergency power is pausing new launches. Pause cannot move value; it only stops new launches.
  • The sole minter is the hook during bonding. No insider pre-mint.
  • The pool cannot walk out. The hook's own position in an opened pool is bound to the hook, not migratable to a party.

The design states its invariants. See Security.