ZealzNativeOpeningHook on Robinhood Chain

Uniswap v4 Hook Contract 0x5370602470386c05a2f0aa9e09765c0c9ab5e0cc on Robinhood Chain · Launchpad · Verified contract

Volume (24h)
$1.81K
Value locked (TVL)
$11.91K
All-time volume
$495.46K
Pools using this hook
35
Swaps (24h)
8 (6 traders)
Total swaps
4,761

What it does

A launchpad hook for ETH-paired tokens that can run a 10-minute batch opening where all buyers settle at one price, and splits every trade's ETH fee between burning ZEAL, the creator, the platform and token holders.

How it works step by step

  • Runs a 10-minute batch opening on batch launches: buys become ETH bids, sells are refused, and settle() executes one swap for everyone
  • Charges a per-pool fee on the ETH side of every trade and splits it to the Furnace (burn), creator, treasury and token holders
  • Applies an opening surcharge on instant launches that starts at 95% in the launch block and decays linearly to zero over 60 seconds, sent to the Furnace
  • Waives the surcharge for buys carrying a pass signed by the immutable passSigner and bound to tx.origin
  • Restricts pool initialization to the factory and requires ETH as currency0
  • Converts accrued ETH into zZEC for holder distribution and into USDG for creator payouts via separate permissionless flush calls
Swap behaviour
During a batch opening (first 10 minutes of batch launches), buys are taken as bids and sells are refused until settle(). Outside that, swaps run normally; each swap pays the pool fee on the ETH leg via beforeSwap or afterSwap return deltas. On instant launches, buys in the first 60 seconds pay a surcharge decaying from 95% to 0%, except zealz.fun-signed passes.
Liquidity behaviour
No liquidity callbacks. The hook does not add or remove liquidity; it only custom-accounts fee and bid amounts via ERC-6909 claims.
Fee behaviour
Every trade pays the pool's per-launch fee on the ETH leg, split by immutable-at-launch shares between burn (Furnace), creator, treasury and holders. On an instant launch, buys in the first 60 seconds also pay an opening surcharge that decays linearly from 95% to 0%, all sent to the Furnace and burned, except buys carrying a valid zealz.fun pass which are waived. Sells are never surcharged.
Owner & admin controls
No owner or admin role on the hook; passSigner is immutable and set at deployment, and only it can issue waiver passes. Fee split shares, the opening window and the surcharge schedule are immutable. Upgrades and pausing are not present in this hook.

Enabled Uniswap v4 callbacks

beforeInitialize, beforeSwap, afterSwap, beforeSwapReturnDelta, afterSwapReturnDelta

beforeInitialize restricts pool creation to the factory. beforeSwap takes ETH for batch-opening bids (during the first 10 minutes on batch launches, sells are refused) and books the specified-side fee. afterSwap books the unspecified-side fee and returns it as a delta. beforeSwapReturnDelta and afterSwapReturnDelta let the hook take fees and bid ETH from the swapper's balance.

Security & trust assessment

Risk level: low (verified source, high confidence).

Who controls it: No privileged key can move user funds or change parameters after deployment, since the contract has no owner. The only trusted party is the passSigner, which can grant or withhold the surcharge waiver for individual buyers; it cannot block swaps or take funds.

Risk to user funds: The hook can hold ETH from bids, fees and surcharges as ERC-6909 claims until flushed, and it moves that ETH to the Furnace, creators, treasury and holders. It cannot withdraw to an arbitrary address, and no owner path exists to sweep balances. Unclaimed bid ETH and token output are only released to the bidder who placed them via claim.

Security findings

  • [info] Hook takes fees and bids through return deltas: The hook takes the swapper's ETH via return deltas and ERC-6909 mint claims, then later pays it out to the Furnace, creator, treasury and holders through flush and flushHolders. Accrued claims are backed by ETH settled into the PoolManager.
  • [info] Batch settlement uses an unbounded price limit: Batch-opening bids are taken into the hook and settled in one swap by anyone after the window. Bidders claim tokens pro rata, and the hook depends on the pool's price limit (MIN_SQRT_PRICE+1) for the batch swap.
  • [low] Surcharge waiver depends on an off-chain signer key: The opening surcharge is taken from buys inside the first 60 seconds; waivers depend on an off-chain signature from passSigner over tx.origin, expiry, pool and chain, verified with ecrecover and malleability checks. Compromise of the passSigner key would allow anyone to obtain waivers.
  • [low] Payouts depend on external pool liquidity and caller-set slippage floors: The holders' share is converted to zZEC through the pinned ETH/zZEC pool with a caller-supplied minimum output, and a thin market can leave the balance on the ledger rather than locking funds. Creator payouts similarly depend on the ETH/USDG pool and a caller floor.

Contract details

Verified source
Yes (ZealzNativeOpeningHook)
Compiler
solc 0.8.24+commit.e11b9ed9
Bytecode size
15,294 bytes
Upgradeable proxy
No
Detected patterns
moves-currency, return-delta, self-unlock

Pools using ZealzNativeOpeningHook