Contracts

Every dollar RHR looks after for you lives in smart contracts on Robinhood Chain. Below is the full list, what each contract is allowed to do, and which keys can instruct them.

#Networks

• —Robinhood Chain testnet, chain ID 46630. Deployed first. Tokens here have no monetary value.
• —Robinhood Chain mainnet, chain ID 4663. Real money.

Gas on both is paid in ETH.

#The contracts

#USDG, the one address that already exists

USDG ("Global Dollar") has 6 decimals. Its Robinhood Chain mainnet address is:

0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168

This address belongs to the token's issuer, not to RHR. Check it on the explorer yourself. The issuer can freeze addresses or pause the token, and nothing in the contracts below can undo that.

#Keys and roles

Only a few keys can send instructions to the contracts, and the contracts, not RHR, set the limits on each.

Every role is stored in the contracts, so you can read who holds it from a block explorer once the contracts are deployed.

#What the vault checks on every checkpoint

In short: the next number in sequence, a signature from the current settler, matching and capped lists, changes plus rake that net to zero, no negative balances, bounded rake and bounded total movement, and a vault that still holds at least what it owes. Custody and your money goes through each check and then explains what the checks cannot see.

#Fixed by design

• —No upgradeable proxies. A deployed RHR contract's code does not change.
• —Immutable splits. The fee splitter and the rake router shares are set at deployment, in basis points that must sum to 10,000. Anyone can trigger them.
• —Signatures use EIP-712 with the domain name "RHR" and version "1".
• —Escape hatch. A 24-hour delay, then 3 days to execute before the request expires. It pays the lowest balance since the request, never more than the balance. It works while the vault is paused and with no settler.
• —Settler rotation. Behind a 48-hour timelock, longer than the escape hatch, so players can leave before a new settler can sign. The owner must accept it within 7 days after that, or the proposal expires.
• —Withdrawal queue. Large withdrawals wait for a delay and can be cancelled by the guardian. The instant limits and the delay are set in the contract.
• —Staking. Claims and withdrawals can never be paused. The owner cannot withdraw stake or reward tokens, and ownership cannot be renounced to the zero address.

#Before you trust an address

• —Compare it with the address on this page, which only appears after deployment, and check this page is on the real site.
• —On the explorer, look for verified source code. A contract without verified source is a red flag.
• —Never send funds to an address because a message, a DM or an ad told you to.

#What lives outside the contracts

• —The game server. It runs the games and holds the settler key. See Custody and your money.
• —The USDG issuer. It can freeze addresses or pause the token.
• —The chain. Robinhood Chain itself is outside RHR's control.
• —The website. The escape hatch works without it, because it is a function on the vault.

#About "unaudited"

These contracts have not been reviewed by an independent security firm. They are tested with unit tests, fuzz tests and invariant tests, but tests are not an audit. A bug could lose funds, possibly all of them. Treat everything on this page as unaudited until an audit says otherwise.