Reference
Contracts and security
What the contracts do, what the owner can still change, and when upgrades end.
The contracts
| Contract | What it does |
|---|---|
| Order book | Markets, resting orders, matching, auto-flip orders, liquidity positions and fees |
| Market data | The trade feed, price candles, 24-hour stats and each wallet's fills |
| Router | Every trade from the website: swaps between the book and Kumbaya, arbitrage, firing stops |
| Stop book | Stop orders, their tokens and their gas deposits |
| Rewards | The daily LEAF pot, each wallet's volume and claims |
| Token factory and registry | Launching tokens, and each token's image, links and verified status |
Upgrades end after 180 days
Every contract sits behind a proxy that can be upgraded for 180 days after it was deployed, so bugs found early can be fixed. After that the contract can never be upgraded again, and the code is fixed for good. The deadline is written into each proxy on chain, so anyone can check it.
Until then, an upgrade could change what a contract does.
What the owner can still do
After the upgrade window closes, the owner keeps a few settings:
- Pause new orders on the order book. Cancelling and withdrawing still work while it's paused.
- Set fees, up to 5%.
- Set the minimum order size for each quote token.
- Set each market's rewards weight, exclude wallets from rewards and remove wash-trading volume from days that can't be claimed yet.
- Tune the gas figures stops use.
- Mark tokens as verified.
None of these lets the owner move your tokens, cancel your orders or take your liquidity.
Risks
- Smart contract risk. The contracts may have bugs. Only trade what you can afford to lose.
- Token risk. Anyone can launch or list a token. Check addresses, and be careful with unverified tokens.
- Liquidity risk. Auto-flip positions can end up all in one token when the price leaves their range.
- Price impact. Thin markets move a lot on large trades. Check the impact before you confirm.
The one server
Pair chat runs on a Lightbeam server. It sees your wallet address and the messages you post, and signing in costs nothing. It has no access to your funds, and trading works without it.