Risks

What the vault guarantees, and what no vault can.

Two different risks get mixed together in products like this. There is the risk that the thing you deposited into misbehaves, and the risk that the market moves. The first is largely engineered away here. The second is real, and worth understanding before you deposit.

What is guaranteed

These are not promises, which can be broken. They are properties of code that has no function capable of doing otherwise.

Your money cannot be locked inNo time lock, no cooldown, no epoch, no withdrawal queue, and no exit fee on principal. There is no key that can block an exit and no staleness condition that pauses one.Always

The fee cannot be raisedSet at construction. There is no setter in the contracts, and no owner who could call one.Ever

The code cannot be swappedNo proxy and no upgrade path. What you read today is what runs tomorrow.Ever

Nobody can pause itThere is no pause function, so there is no emergency in which somebody decides on your behalf that you cannot leave.Ever

Nothing gets strandedBurning the last share removes the entire position, including fees too small to have been collected yet. Liquidity that no share can claim is a live bug in other products of this shape; here a test pins it shut.Guaranteed

The trade behind all of that is worth naming: because nothing can be changed, a bug cannot be patched either. That is why the deposit cap is fixed at construction, to bound what is ever at risk, and why a vault is cheap enough to abandon and redeploy rather than administer.

This code has not been audited

No third party has reviewed these contracts. What has been done: a large test suite including fuzzing and a multi-day invariant campaign, differential checks against a replay engine, and three real bugs found and fixed by testing against live pools rather than mocks. That is meaningful work, and it is not a substitute for an audit. Size your deposit accordingly.

Only pools that actually trade

Fees only exist where there is volume, and most pools of this kind stop trading within days. So every pool is screened on whether it traded on each of its last three days, and across 2,281 replayed pools, dead ones included, that screen made this much difference to finding a pool still alive when you deposit:

Still trading when you deposit, unscreened19.8%

Still trading when you deposit, screened97.0%

Which pool you enter matters far more than any strategy setting, and that screen is applied for you rather than left as something to research.

The market is still the market

Screening finds pools that trade. It cannot make a token go up. What you hold here is a liquidity position in a volatile pair, and it behaves like one.

Where your transaction is sent

When you add Robinhood Chain through this app, your wallet is given two public endpoints. The first simulates your transaction before broadcasting it, so one that would fail is refused instead of being mined as a failure, and costs you no gas. The second is the chain's own endpoint, kept as a fallback so no single host sits between you and a withdrawal.

There is nothing to opt into and nothing to configure. If your wallet already knows this chain it keeps whatever endpoint you gave it, which is your setting to change, not ours.

What it does not do is protect you from front running, and you should be suspicious of anyone who tells you otherwise about this chain. Robinhood Chain orders transactions first come, first served through a single sequencer, and there is no public queue of pending transactions for anyone to read ahead of. There is nothing to be protected from, so nothing is being sold to you here.

The maintenance caller routes its own transactions through an order flow auction, which pays a rebate on any value a third party extracts behind them. Two honest caveats. The rebate accrues to the maintenance account and the treasury, not to your deposit. And it has paid essentially nothing: across the whole of that auction, to date, there have been 12 settlements totalling 0.00075 ETH, against hundreds of opportunities that drew no bid at all. That is a real zero rather than a missing number, which is why it is printed rather than dashed.

Routing depends on a third party that can be unavailable. Nothing about depositing or withdrawing depends on it: the chain's own endpoint is always listed alongside, the app falls back to its own provider, and no exit is ever gated on that service being up.

Other things worth knowing

Providing liquidity is not lending. If the token falls against ETH your position can be worth less than what you put in. Fees offset that; they do not cancel it.
Listing is not endorsement. Anyone can list a pool, and a pool appearing in the picker is not a recommendation to deposit into it.
The deposit cap cannot be raised. It is set when the vault is deployed. It bounds deposits rather than the position, so earned fees keep compounding in once the cap is reached rather than being stranded.
A projection is not a forecast. It runs a pool's own measured history forward and assumes your share and its volume both stay put. Neither does, and someone else depositing dilutes you.
A narrow band earns less, not more, unless it is re-centred. Across 38 pools a fixed band earned roughly half what full range earned, which is why full range is the default.