Contact: https://github.com/bongbongcrypto
Preferred-Languages: en, ko
Expires: 2027-09-08T00:00:00.000Z
Canonical: https://dustpan.chainhand.org/.well-known/security.txt

# Dustpan is a Chainhand tool (https://chainhand.org). Independent studio; not affiliated with
# Robinhood Markets, Inc., Uniswap Labs, or any issuer of the tokens it reads.

# What this site does
# - Reads token balances on Robinhood Chain (chain id 4663) for any address, through
#   a read-only JSON-RPC proxy at /api/rpc (whitelisted read methods only).
# - Fetches official quotes for those tickers through /api/prices.
# - Reads the price out of the relevant Uniswap V3 pool (slot0) and works out, in the
#   browser, the least the seller will accept.
# - Builds one multicall the seller's wallet can sign: the sale, split into the
#   operator's share and the seller's, both settled in the same transaction.
# - Sends that transaction to the user's own wallet for signature.
#
# The service fee is at most 10% and falls with the size of the position. It is taken
# by the router inside the same transaction; nothing is ever held by us.
#
# What this site never does
# - Custody funds. There is no contract of our own on chain and no deposit step.
# - Ask for seed phrases or private keys, ever, anywhere.
# - Send a signed transaction on the user's behalf. Wallets broadcast directly.
#
# Contracts this site asks a wallet to interact with
# - The 194 Robinhood Stock Token ERC-20s listed in /assets/registry.json (approve).
# - Uniswap V3 SwapRouter02 0xcaf681a66d020601342297493863e78c959e5cb2 (the sale).
#   Its factory() is 0x1f7d7550b1b028f7571e69a784071f0205fd2efa, which is the factory
#   that created the pools in /assets/registry.json. Note that the canonical Uniswap
#   addresses hold unrelated contracts on this chain.
# - USDG 0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168 as the output token.
# - Multicall3 0xcA11bde05977b3631167028862bE2a173976CA11, for reading balances only.
# If this list changes, this file changes with it.
#
# Fee address (public, and readable on chain)
# - 0x52e9DF340ff6F4AD2802aB76c797da880D3736c2
#
# Reporting
# - Anything that could move a user's funds without their signature, redirect the sale
#   or the fee, or make the interface recommend a losing trade, is in scope and worth
#   telling us about. So is anything that turns this page into a way to serve code we
#   did not write. No bounty programme; credit given on request.