HashmindHook on Ethereum

Uniswap v4 Hook Contract 0xde9ffdd1cd00e0e2c35d645e10998aa4c7cca0cc on Ethereum · Dynamic fee · Verified contract

Volume (24h)
$58.01K
Value locked (TVL)
$11.57K
All-time volume
$649.40K
Pools using this hook
9
Swaps (24h)
380 (146 traders)
Total swaps
4,094

What it does

A Uniswap v4 fee hook for Hashmind coins that charges a dynamic 0.5% to 1.5% fee on ETH trades, plus a decaying launch fee in the first minute, and uses the fee revenue to fund holder rewards, buybacks and permanent liquidity.

How it works step by step

  • Sets a dynamic swap fee in beforeSwap from a base rate plus size and priority-fee components, clamped between 0.50% and the ceiling (max 1.50%)
  • Applies a hard-coded launch fee of up to 20% decaying to zero over the first 60 seconds to buys and sells
  • Banks each fee as ERC-6909 claims and splits distributions 50% to the platform revenue wallet, 25% to the creator, 25% to the coin
  • After sells, runs one support action paid from banked claims: buyback-and-burn below the agent's price band, else a burn budget, else permanent liquidity
  • Lets the vault tune fee parameters and the buyback band, with ceiling raises and unfavourable split changes delayed 24 hours
Swap behaviour
Every swap is charged a dynamic fee computed in beforeSwap and banked as claims on the PoolManager. After a sell, afterSwap runs one bounded support action that buys back coins to burn or adds permanent liquidity.
Liquidity behaviour
No liquidity callbacks are used (add/remove liquidity hooks revert). However, the support action can add full-range liquidity owned by the hook itself, which has no removal path and is therefore permanent. Initial launch liquidity is owned by the dead address.
Fee behaviour
Dynamic hook fee clamped to [0.50%, ceiling], ceiling at most 1.50% (default 1.00%). Components: a base rate, a size component per ETH traded, and a priority-fee (MEV) component per gwei of tip, each capped at 1.50%. Plus a hard-coded launch fee of 20% decaying linearly to zero over the first minute, applied to buys and sells. Fees are banked as ERC-6909 claims and split hard-coded 50% to the platform revenue wallet, 25% to the creator, 25% to the coin (holders, treasury, burn, liquidity per its split). Fee can be capped per swap via a hookData tag.
Owner & admin controls
No owner or pause role found in the hook. The only privileged caller is the coin's vault (pool-bound address set at registration): it can tune base fee, size and MEV fee components within bounds (every 2 beacon epochs), lower the fee ceiling immediately or raise it after a 24h delay, change the holder/burn/LP/treasury split (raises or reductions that hurt holders are delayed 24h), arm or disarm the buyback band and its chunk size, fund and withdraw band ETH, and execute immediate vault buybacks. The factory sets the pool's vault and creator at registration. The contract is immutable with no upgrade path.

Enabled Uniswap v4 callbacks

beforeInitialize, beforeSwap, afterSwap, beforeSwapReturnDelta, afterSwapReturnDelta

beforeInitialize: allows only the factory to initialize a registered pool and starts the launch window. beforeSwap: computes the dynamic fee and sets the swap fee, plus takes the ETH-specified fee as a delta for exact-in buys and exact-out sells. afterSwap: banks the unspecified-side fee, records the trade and runs one support action (buyback-and-burn, else burn budget, else permanent liquidity) after sells. beforeSwapReturnDelta and afterSwapReturnDelta: needed so the hook can take its fee as a swap delta.

Security & trust assessment

Risk level: medium (verified source, high confidence).

Who controls it: The vault (agent) can set fee components within bounds, lower the ceiling instantly, and steer the buyback band and budgets. It cannot raise the ceiling or worsen the split without a 24h public notice, cannot pause swaps, and has no path to move holder tokens or remove hook-owned liquidity. Trust in the agent is required for its signed batches (post-quantum hash-based signature via a registry), and the platform's revenue wallet receives 50% of fees with no on-chain limit on who it is.

Risk to user funds: The hook holds ERC-6909 claims on ETH from fees and ETH funded by the vault, and can send ETH to the revenue wallet, creator, vault, or pool for buybacks. It can never block a sell, tax transfers, or touch holder tokens. Hook-owned liquidity is permanent and cannot be withdrawn, and the vault can redirect the community portion of fees within the split rules.

Security findings

  • [info] Launch fee of up to 20% in the first minute: The hook takes its fee as a specified or unspecified swap delta and can be configured by the vault to a 1.50% ceiling. Fees are paid per swap, so a launch fee of 20% decaying over 60 seconds applies to early buyers, which can be very costly to snipers but is the intended design.
  • [medium] Vault can change fee parameters and buyback band without delay: tune, setBand and fund are callable by the vault, which is set per pool at registration. The vault can change the base fee and size and MEV components without delay (within the ceiling) and can disarm or re-arm the buyback band immediately.
  • [low] Hook-owned liquidity is permanent: The support action adds full-range liquidity owned by the hook. There is no code path to remove it, so the hook's ETH and coins committed to liquidity are permanently locked. This is by design but it means funds sent to the LP budget cannot be recovered.
  • [low] Payments to external addresses are gas-bounded with a queue fallback: Distribution and fee payments use low-gas calls to the revenue wallet and creator; failed payments are queued and can be pushed later by anyone. This avoids blocking distribution but depends on the external wallets accepting ETH eventually.
  • [info] Sell-blocking and sandwich mitigations in place: The support path runs a bounded swap plus liquidity mint after sells, with fee-reserve checks and a try/catch so failures cannot block the sell itself. Vault buybacks are limited to about 3% from the block opening price to resist sandwiching.

Contract details

Verified source
Yes (HashmindHook)
Compiler
solc 0.8.26+commit.8a97fa7a
Bytecode size
21,709 bytes
Upgradeable proxy
No
Detected patterns
launchpad, liquidity-management, moves-currency, return-delta, self-unlock

Pools using HashmindHook