QuiverV4Hook on Robinhood Chain

Uniswap v4 Hook Contract 0x0edf0bbd3ff835beaedceea030ce61c43eee6880 on Robinhood Chain · Access control · Verified contract

Volume (24h)
$0
Value locked (TVL)
$554
All-time volume
$4.79M
Pools using this hook
37
Swaps (24h)
0 (0 traders)
Total swaps
41,621

What it does

A Quiver launchpad policy hook that gates early buys of a launch token behind signed vouchers and restricts initialization and bootstrap liquidity to the launcher.

How it works step by step

  • Only allows the launcher to initialize registered pools at the preset initial sqrt price
  • Optionally restricts liquidity adds during bootstrap to launcher-driven position manager calls
  • Gates buys of the launch token behind EIP-712 signed buy vouchers verified via ECDSA
  • Enforces per-buyer cumulative allocation caps tracked in purchasedTokens
  • Invalidates outstanding vouchers through a per-pool authorization epoch
  • Returns zero deltas and no fee overrides, so it never takes or redirects funds
Swap behaviour
On swaps where the output is the launch token and the buy gate is enabled and bootstrap is inactive, the hook requires the caller to be the Universal Router with a valid, unexpired EIP-712 voucher signed by the effective signer, within the buyer's cumulative allocation cap. Quoter simulations pass. Other swaps are unaffected.
Liquidity behaviour
Only beforeAddLiquidity is active. When liquidityExclusive is set and bootstrap is active, only the position manager acting for the launcher may add liquidity; otherwise any liquidity add is allowed. Removal is not hooked.
Fee behaviour
Uses the pool's static fee. The hook returns zero delta and zero fee override on every path.
Owner & admin controls
Owner (Ownable2Step) can set the launcher once via setLauncher, and can rotate the global voucher signer via setSigner (old signer is retired). Pool creators can change buy-gate state (Enabled/Disabled, but not back once PermanentlyDisabled), rotate the per-pool signer via setPoolSigner, invalidate outstanding vouchers via invalidateAuthorizations, and disable liquidity exclusivity. The launcher can register pools, close bootstrap, and set initial price. No pause function, no upgradeability, and the hook does not take tokens via return deltas.

Enabled Uniswap v4 callbacks

beforeInitialize, beforeAddLiquidity, beforeSwap

beforeInitialize: restricts pool initialization to the launcher at the registered initial sqrt price. beforeAddLiquidity: optionally restricts liquidity adds during bootstrap to launcher-driven position manager calls. beforeSwap: gates buys of the launch token (WETH in, token out) behind an EIP-712 signed voucher with per-buyer cumulative allocation caps and epoch-based invalidation; quoter calls pass through.

Security & trust assessment

Risk level: medium (verified source, high confidence).

Who controls it: The global signer key can authorize buys in any gated pool that has no custom signer, up to each voucher's cap, and can be rotated by the owner. Pool creators can unilaterally switch buy gating off or on (within the rules) and swap signers, which can block or open buys for their own launch. The launcher can close bootstrap and register pools. Owner holds launcher and signer control but cannot pause or move funds.

Risk to user funds: The hook does not take custody of tokens and returns zero deltas, so it cannot directly move or hold pool funds. It can block swaps (buys of the launch token) and liquidity adds through reverts, and can block pool initialization. Users who lack a valid voucher cannot buy the gated token while the gate is enabled.

Security findings

  • [medium] Signer key controls buy access: Buy access for gated pools depends entirely on an off-chain EIP-712 signer. Compromise or misuse of the signer key lets an attacker obtain allocations up to voucher caps.
  • [low] Pool creator can swap gating signer: setSigner retires the previous signer, but setPoolSigner does not check or record retirement for pool signers, and creators can set arbitrary signer addresses on their own pools.
  • [low] Creator can toggle buy gate: Creators can set buyGateState to Enabled or Disabled and invalidate authorizations at will until PermanentlyDisabled is chosen, so a creator can freeze or reopen buys for their launch.
  • [info] Owner powers are limited: Owner can set the launcher only once and can rotate the global signer, but the owner has no pause, no fund-moving rights, and the contract is non-upgradeable.
  • [info] Unsupported callbacks revert: Many callbacks revert with UnsupportedHook, so only beforeInitialize, beforeAddLiquidity and beforeSwap are usable.

Contract details

Verified source
Yes (QuiverV4Hook)
Compiler
solc 0.8.26+commit.8a97fa7a
Bytecode size
14,052 bytes
Upgradeable proxy
No
Detected patterns
launchpad, ownable

Pools using QuiverV4Hook