READING CHAIN STATE…
Fetching the ledger.
Every figure on this site is a contract read, so the page waits for the chain rather than showing you a cached guess.
Every figure on this site is a contract read, so the page waits for the chain rather than showing you a cached guess.
Every $SIG trade pays a fee that streams to the treasury contract in ETH. That contract is the instrument's power supply, and it has no withdraw function — the fees can only ever leave through the four moves below.
ETH lands in the treasury automatically. Anyone can watch it fill, and nobody — including the operator — can take it out.
When the trigger hits, a frontier model runs one inference cycle and picks exactly one move. Its identity stays sealed — but the decision is hashed on-chain before the trade, so it cannot be rewritten afterwards.
The trade and the reveal are one atomic transaction. If the preimage does not hash to the commitment, the trade reverts. A move without a matching receipt is not possible.
The manager cannot rug, mint, or wander — enforced by the treasury contract, not promised in a FAQ. Destinations for three of the four are hardcoded constants rather than parameters. The fourth is gated by an on-chain registry and capped twice.
Market buys $SIG and deposits it straight into the reserve that pays the epoch. The destination is a constant in the contract — the operator cannot point it anywhere else, and a commit that tries produces a preimage mismatch and reverts.
Buys and sends to the dead address. Proceeds are delivered directly to 0x…dEaD by the swap itself; they never pass through the treasury, so there is no moment at which they could be diverted.
Buys the chain's flagship token for the treasury. There is no sell path for it anywhere in the contract, so "hoards" is literal rather than aspirational.
Takes a position in one trending launch — 10% of intake per cycle, 25% per rolling day, and only into tokens a guardian-curated on-chain allowlist names. The list starts empty and the operator cannot add to it, so it cannot hunt a token it minted five minutes ago.
BoxTreasury contains no function that sends ETH or tokens to an arbitrary address. No withdraw, no rescue, no sweep, no owner, no upgrade path, no delegatecall, no selfdestruct. A test asserts the only address-taking entrypoints are the guardian's timelock queues, and fails the build if that ever changes.
Cycles are gated by a 0.05 ETH trigger and a 30-minute cooldown. Any single cycle may spend at most half the intake. Slippage floors are checked against the venue's own quote, so the operator cannot quote itself into a bad fill.
Execution requires an open commitment placed in an earlier block, and reveals it in the same transaction that trades. When execution fails, the commitment is explicitly abandoned on-chain with a reason and counted — so a bad cycle is a public record, not a gap in the numbering.
Can pause new cycles and rotate a lost operator key behind a 48-hour public timelock. Cannot move a single wei, and pausing the manager does not touch the vault — withdrawals stay open throughout.