Bucket ShopRobinhood Chain · read from the verified contracts · 15 September 2026
What can never change.
What can, and who can change it.
Every number in Bucket Shop falls into one of four classes. Most of the protocol is code with no owner and no upgrade path, including the part that pays you. The rest is listed here with the exact hand that can move it and the limit it can move to. Nothing on this page is marketing. If a row reads badly, it is because the code reads that way.
The one owner
0x2CCc152AD68419f777531E6A40a52325e2A80EE2
Every contract on this page that has an owner has this one. It is a single key, held by Bucket Labs, and it also signs the keeper's transactions every five minutes. No multisig, no timelock, no renounced ownership. That is the honest state of the protocol today, and moving it behind a multisig is the next step once the company is formed.
0proxies or upgradeable contracts
0pause switches on anything deployed
0mint functions on BUCKET or any launch token
1key that holds every owner role
Live readings
The contracts, right now.
Reading Robinhood Chain from your browser. No wallet needed.
| Parameter | On chain now | What it should be | Contract |
|---|---|---|---|
| Reading… | |||
Base
BUCKET on Base, and who holds the keys there.
Same token, bridged one for one over LayerZero. Minted on Base only when BUCKET is locked in the adapter on Robinhood Chain, burned to unlock it.
| Contract | Address | Controlled by | What that key can do |
|---|---|---|---|
| BUCKET on Base (OFT) | 0x4a7634d050cEfE28748f03f6f47E157506a1d0eF | Protocol Safe, 2 of 3 | set the bridge peer and its security config. Cannot mint, pause or move holder balances. |
| Bridge adapter on Robinhood Chain | 0x72077d1f8a245c4736BBC6f89D5cd5216211613E | Protocol Safe, 2 of 3 | set the bridge peer and its security config. Holds the locked BUCKET that backs Base. Cannot withdraw it except by burning on Base. |
| Previous BUCKET on Base, and its adapter | 0x734f85d78BABBFB6030193F13f60B5BC34288bc10xA5DeB6bad679d38a13Eed56897AD81f1d9868699 | Protocol Safe, 2 of 3 | the Base token until 1 November 2026, replaced from a clean deployer after a wallet security vendor flagged it. Same powers as above, nothing more. Stays fully backed; its holders bridge back to Robinhood Chain any time, and its balances count for Drops. |
| BUCKET/USDC pool hook, 2% | 0xbFb882C0eeA3981F9bC7CCB53782e9E6ac47A0cc | nobody | fee rate and vault address are immutable. |
| FeeVault on Base | 0xF2726c196dB84347Aa70019E040b24CF7EE92E61 | keeper key | sweep fees out. Half becomes Drops, half grows the locked pool, by the keeper's code. |
| Bucket router on Base | 0xb69bb1797931f9cfa897dc94d6b13ce0d36016a3 | nobody | swaps BUCKET and USDC through the pool for whoever calls it. No fee, no owner, nothing to change. |
| Liquidity lock on Base | 0xf76153d09e078b94997c23d05004032d7bb6e269 | keeper key | add liquidity and collect fees. No withdraw exists. |
| Previous pool's router and lock | 0xd2ad1ca39fd6dc08b7bd509c2796eaea23406c3b0x8f5Db8549f3BB07C39eee7DA0b6144BD4d894aB2 | nobody / keeper key | the same two contracts for the previous token's pool. Its liquidity stays locked there for good; nobody can withdraw it. |
Bridge messages are verified by two independent networks, LayerZero Labs and Horizen, both required, 20 block confirmations. Drops are one pot across both chains: the engine counts a wallet's BUCKET on Robinhood Chain plus Base against the same 65,000 bar and pays on Robinhood Chain at the same address. The Base keeper sweeps the FeeVault every 10 minutes, adds half to the locked pool and bridges half to the Robinhood Chain Treasury as ETH through Relay.
Class 1 · Immutable forever
Set once. No setter, no owner, no way back.
These are constants or values written in the constructor. Changing any of them means deploying a new contract at a new address, which every wallet would see.
| Parameter | Value | Where it lives |
|---|---|---|
| BUCKET and the fee engine | ||
| BUCKET total supply | 1,000,000,000 | Minted once in the constructor. The token contract has no owner, no mint, no pause, no transfer hook. |
| Fee on BUCKET/ETH trades | 3.00% | A constant in the pool hook. This is the fee that funds every Drop. It cannot be raised or lowered by anyone. |
| Fee on BUCKET/USDG trades | 1.50% (cap 3.00%) | Immutable in the USDG hook, with a hard ceiling checked at deployment. |
| Drop eligibility | 10,000 BUCKET | A constant in the Distributor, re-checked on chain for every recipient at send time. The keeper cannot pay a wallet below it. |
| Stockback router fee | 0.50% or 0% (cap 1.00%) | Each router's fee is immutable. A different rate is a different address. Stock-token legs route through the 0% router. |
| Locked liquidity | no removal path | The LP lock contracts contain no code that removes liquidity. Not for the owner, not for anyone, ever. 970M BUCKET was seeded this way at genesis. |
| The v2 payout engine | ||
| Bucket vaults (CORE, TECH, CHIPS, DEGEN, MKT, CRYPTO) | no owner | Composition is fixed at deployment. Shares can only be issued fully backed. Redeem is permissionless and cannot be paused. |
| Series C revenue seats | 251 seats, no owner | Every deposit splits across all 251 cards. Claims can only pay the card's owner. |
| Bucketheads | ||
| Series B supply | 420 | Sold out. |
| Series C supply · multiplier tiers · boost cap | 251 · 3x to 30x · 250,000 BUCKET | Tier is derived from the token id by a pure function. The cap on what a card can amplify is immutable, so the published worst case cannot be revised. |
| Series D supply · max tier · boost cap · ascend cost | 100 · 6x · 1,000,000 · 25k/75k/150k BUCKET | All constants or pure functions. Ascension burns BUCKET to the dead address. |
| The launchpad | ||
| Creator's trade fee range | 1.00% to 5.00% | Enforced on every launch by the factory. |
| Launchpad share · infra share · protocol ceiling | 25% of the first 1% · 7.5% of the holder leg · 31% max | The factory refuses any launch where the protocol's combined cut would exceed 31%. The split is a public pure function anyone can check before signing. |
| Quote assets and graduation tiers | 193 assets · 579 tiers · sealed | The list was frozen by a one-way seal. No asset can be added, changed or removed. |
| Launch token allocation | 100% to the curve | No allocation is minted to anyone, including the creator. The token has no owner, no mint, no tax. |
| Per-launch fee split | immutable per launch | Holder, protocol and creator shares are written into each curve and splitter at launch and sum to 100%. Nobody can raise their cut later. |
| Engine wallet and fee sink | immutable | Where launchpad fees go is fixed in the factory forever. |
| Creator recipient change | 3-day delay + 3-day window | The only mutable field per launch, and it belongs to the creator, not to us. |
| CreatorVest | 30 to 1,460 days | No owner, no early exit. Top-ups can add tokens but never shorten time. |
| XCORP and markets | ||
| XCORP founder share | 6% (cap 20%) | Immutable, with the cap enforced at construction. Fixed supply, no owner. |
| Prediction market fees | 3% · 1% · 20% of the losing pool | Conviction, position and binary markets respectively. Constants. |
Class 2 · Owner-controlled
What the owner key can change, and the limit on it.
Where the code enforces a bound, it is shown in green. Where it says none, the only limit is us. We list those first because they are the rows you should weigh.
| Power | What it moves | Hard bound in code |
|---|---|---|
| Protocol funds | ||
| Treasury: withdraw ETH | Fee ETH held by the Treasury can be sent to the owner's wallet. The v2 engine uses this every cycle to fund its buys. | none |
| Treasury: set distributor · register assets · buy with slippage floor | Which assets the engine may buy, where they are delivered, and the minimum-out on each buy. | none |
| FeeVault: sweep any token or ETH | The vault that receives launchpad and USDG-hook fees. Any amount, any destination. 20M BUCKET was swept from it to fund operations in September 2026; about 6.8M remains. | none |
| LP locks: collect fees | Trading fees earned by locked liquidity go to the owner. Principal is unreachable. | principal locked |
| NFT and vault contracts: withdraw balance | Mint and acquire proceeds, whole balance, any address. | none |
| Who gets paid | ||
| Distributor: send | The owner names the asset, the recipients and each amount. Pro-rata fairness is computed by our indexer, not enforced on chain. | 10,000 BUCKET floor re-checked on chain |
| Price oracle for prediction markets | The owner writes the prices every market resolves against. No deviation cap, no second signer. | none |
| Trench War result · trivia survivors | Weekly winner and survivor lists are submitted by the owner. The contract checks eligibility, not the answer. | asserted, not verified |
| Prices and lists | ||
| Buckethead marketplace fees | Sale fee and listing fee. Today 1% and 3%. | 10% ceiling each |
| Buckethead marketplace: sweep | Sends the whole contract balance, which includes ETH escrowed for open buyer offers. This is the one owner power that can touch user funds, and it is scheduled to be fixed by a new marketplace contract that tracks escrow separately. | none |
| Mint and acquire prices | Series A to D mint price, card acquire fee, Series D presale prices. | none |
| Basket size · opening moves | How many assets a fresh card draws, and how many opening moves it gets. | 1 to 20 · 1 to 3 |
| Candidate pools | Which assets a new card can be drawn pointing at. | duplicate check only |
| Series C and D renderer · Series D war module | Card art and the contract allowed to stamp medals can be re-pointed. Art bytes for Series D are locked, but the renderer address is not. | none, repeatable |
| Lending (v1, halted in the interface) | ||
| Lending engine parameters | Collateral registration, per-asset debt caps, feed address, reserve withdrawals. | LTV ≤ 50% · bonus ≤ 20% · utilisation ≤ 80% · debt cap ≤ 40% |
What is not on this list. There is no pause on any deployed contract, no proxy, no upgrade path, and no mint on BUCKET or on any launch token. The owner cannot remove locked liquidity, cannot change the 3% fee, cannot change any launch's split, and cannot pay a wallet below the 10,000 BUCKET floor.
Class 3 · One-way switches
Things that only move toward less control.
Each of these can be flipped once and never unflipped. The column on the right is the live state on Robinhood Chain.
| Switch | What it does | Flipped |
|---|---|---|
| Launch factory seal | Freezes the quote list and tiers forever and removes the last admin function. The factory now has no owner at all. | yes |
| Genesis liquidity seed · lock keys | Binds each LP lock to one pool, once. | yes, all live locks |
| Vault-only minting, Series B, C and D | Permanently closes public self-mint on the card collections. | yes, all three |
| Series B one-of-one reveal | Picks the one-of-one card from block randomness. | yes, card 219 |
| Series D presale window | Opens a 48-hour presale that cannot be reopened. | yes |
| Series D art lock | Freezes the stored art bytes. | yes |
| Launch graduation · refund mode | Per launch. A curve that graduates or enters refunds never leaves that state. | per launch |
| Renounce ownership | Would give up the owner key on any owned contract. | no, nowhere |
Class 4 · Run by the keeper
Decided by our software, off chain.
The keeper is a program Bucket Labs runs on a server. It signs with the owner key on a five-minute loop. These are its decisions. None of them is enforced by a contract, which means you are trusting us on them, and the ledger on the You page is how you check.
| Decision | Today's setting | Enforced on chain |
|---|---|---|
| Payday threshold | $2.00 per wallet | No. The contract only checks the 10,000 BUCKET floor. |
| Who gets how much | pro-rata by BUCKET held, card multipliers applied | No. Computed by the indexer, submitted by the keeper. |
| Which stocks the engine buys, at which venue, with what slippage | Bucket choice + card picks · best venue · 3% tolerance | No. The minimum-out on each buy is set by the keeper. |
| Buy round trigger | 0.02 ETH in the Treasury | No. |
| Volume multiplier ladder | up to 2x at 0.30 ETH of volume | No. |
| Buyback split | 20% burn · 80% liquidity | No. |
| Referral share | 5% | No. The registry only records who referred whom. |
| Which Bucket a choice id maps to | keeper config | No. The contract stores a number. |
| XCORP fee split | 1.5% holders · 1.5% backing | No. The 3% pool fee is locked; the split of proceeds is ours. |
| Launchpad payout floors | $5 minimum round · $2 threshold | No. |
| Which trades pay the Stockback fee | token swaps 0.5% · stock legs 0% | Routing is client-side. Each router's own rate is immutable. |
| Lounge access and moderation | 100,000 BUCKET · two moderators | No. Entirely off chain. |
| Engine on or off | on since 2026-09-02 | No. A config file on our server. |
Why we publish this. A protocol that says "trustless" and hides its keeper is asking you to trust it anyway. We would rather you know exactly which twelve numbers we can turn, so that when we say the other hundred cannot move, you have a reason to believe it.
Addresses
Verified on Blockscout.
Source is verified for every contract below. The audit of the launchpad contracts by SB Security begins 16 September 2026 and will be published here.
BUCKET0xbc9E7b1c5C0081f4aE85e71eC95703d3dEC9ffaD
Fee hook, BUCKET/ETH (3%)0x11aFe0130450df7127276e7AF474Eccdf4D420Cc
Fee hook, BUCKET/USDG (1.5%)0xc7E686D9F1dB6622B3014C8A755FC2b2c2E0A0Cc
Treasury0xe211898a898e5788878C91A1e458F3FFF3A8dD92
Distributor0x30f3916201E49bD6e5f47566BB59a68e6cEdE5C5
FeeVault0x916d379958125702014AC690899f9C8d53880911
Genesis LP lock0x922B61f06262a851c9D782a97aDf6ef527883790
Stockback router (0.5%)0xbAE74d90D874943674C9aB7F9392601A06F544C2
Pool router (0%)0x584c636ead69fe8f2baa1528a6139b2c0f1ede66
Launch factory (sealed)0x7Eb30f769403c6689944479b135620d674DEDCe3
Launch registry0x76BFb87D852E824ed97122b6Bef84E27A08249A5
CreatorVest0x81f45784414f3c8EbC80aDaa3fB7d9032B42FaB7
CORE bucket vault0xd6d9e6e40dec4bbae488fe18c976a62343c8e7cb
Bucketheads Series C0xBB2bBeA5B4Ee41E3e4A2055633E7037ef8BaEce3
Trench Lords Series D0xC2AdAC3Bc6e92F7d085631Ec443Cdf296f36ce27
XCORP0xbd66Abc0FF7D1C10468D6b51BE19B6543B1d432c
Price hub (markets)0x86e74664337795B51605d357b4012ab6F60cf5cb
Owner and keeper key0x2CCc152AD68419f777531E6A40a52325e2A80EE2