What has actually been built,
in the order it was built.

The position, and the attack it has to survive

The concentrated V3 position behind a vault: USDG in, half becomes the Stock Token, the pair works in a band around the oracle price. The tests run against Uniswap's shipped pool bytecode, deployed by Uniswap's own factory — a mock of a pool would only prove the strategy agrees with our idea of Uniswap.

• 9b1eb20The Uniswap position, and the attack it has to survive

Two faults the tests found, both fixed before the commit landed: a price limit taken straight from the oracle points the wrong way once the pool has drifted past it, and a swap that stopped short of its limit used to pass the ratio check on the fraction that went through.

The vault the site describes, in Solidity

An ERC-4626 on USDG with a cap, a guardian pause, an oracle check and a harvest that splits fee revenue 70/20/10. Three properties it is shaped around: withdrawals are never pausable, a dead oracle stops money coming in and never money going out, and rounding always favours the vault.

• 27d5ca5The vault the site describes, in Solidity, with tests

131 assertions now run on a real EVM. Nothing is deployed and nothing is audited — the proof page says so at the same size as it says the rest.

Holding the desk to what the page claims

The site said a deposit compounds into the share price. It did not — the price was computed once at load and never moved again. Then the same discipline applied to the parts the happy-path tests never touched.

• 2a2f89fThe share price actually moves now
• 7683ee8Hold a deposit to what the page says a deposit does
• dcc7ac0Three ways the money desk could be handled badly
• 38de1f6Two real bugs, found by testing the parts the swap tests never touched

Found and fixed: a double-click on Deposit spent twice, a fraction of a cent opened a position the button had promised was worth $0.00, Max filled an amount the button then refused, and the swap offered to “Swap 0 ETH”.

The connection became real

The wallet is a real EIP-1193 connection now: it reads the address, the network and the native balance from whatever wallet the browser has. It asks for nothing else.

• d19ac80The wallet connection is real now. The rest cannot be, and says so.

Three read-only methods, and no others: eth_requestAccounts, eth_chainId, eth_getBalance. There is no eth_sendTransaction and no personal_sign anywhere in the source, and a test proves it against a provider that throws on anything else.

A header, an avatar and a reel

The X assets went through flat, glass, liquid crystal and a clean room before settling. The launch reel was rebuilt as a motion-graphics cut once the reference turned out to be one.

• 60cb3a5Faster, and a different piece of music
• 5aba8d9The reel to thirty seconds, with sound and real cuts
• 23dfb70The header joins the avatar in the same room, in the same material
• 35b5242A page arrives now instead of appearing