Custody
Zunix holds nothing. There is no platform account, no omnibus wallet and no balance that belongs to the protocol on your behalf.
Privy provides the session. It proves a call belongs to your handle and that rewards resolve to your address, and that is the whole of its authority. Signing stays inside your own wallet.
Why an embedded wallet is refused for trading. An email-only login gets a Privy embedded wallet. It is a perfectly good identity, but it can sign without showing you a prompt, so trading asks for your linked external wallet instead. The signer is also re-resolved at send time rather than reused from sign-in, because linking a wallet mid-session updates Privy before the page catches up.
Execution
A trade is a swap you sign, settling between your wallet and a public router on
Robinhood Chain, chain id 4663.
- Quotes come from the same pool the fill executes against. A chart drawn from one venue and a fill taken on another disagree by design, and the difference lands on the trader.
- A 1% slippage floor is enforced inside the swap. It bounds what a sandwich can take before the transaction reverts instead of filling. It does not prevent one.
- Routing prefers a V4 pool and falls back to V3. Neither works everywhere, so each candidate is simulated and whichever actually fills is used.
- Tokens settle to
msg.sender, which is you. No intermediary appears in the transfer.
This is not MEV protection. Private routing and batch auctions are in the design and are not built. On a public mempool the slippage floor is the only defence in place today.
The callout
A call records its own terms once. There is no edit endpoint, no early close and no delete.
| Field | Stored | Why it is fixed |
|---|---|---|
| Callout id | Immutable | The identity scores and payouts attach to. |
| Wallet and handle | Immutable | Rewards resolve to the address that called it. |
| Asset | Immutable | Otherwise a losing call is re-pointed at a winner. |
| Direction | long or short | A short is scored on the stock falling, sign inverted downstream. |
| Entry price | Immutable | Fixed at publication so the entry cannot be chosen later. |
| Timestamp | Immutable | Sets the cooldown window and the age the evaluation depends on. |
| Thesis | Immutable | The reasoning is part of the record, not a caption to revise. |
The entry price is client-supplied. Settlement validates that it is a positive number, not that it was honest. What compensates is that the price it is measured against and the benchmark it is judged by are both fetched server-side, so nobody reports both ends of the trade. The five-minute VWAP the design calls for is not implemented.
Scoring
A call scores out of 100 on four weighted components. Two are measured today.
| Component | Weight | How it is measured |
|---|---|---|
| Market performance | 40% | Excess return over the market benchmark, not the raw move. Beating the tape counts; being carried by it does not. |
| Attention | 25% | Log-normalised against the busiest call of the cycle. Today only likes reach a server. |
| Community PnL | 20% | Designed: realised and unrealised profit of followers who executed, log-scaled, losses weighted heavily. Not wired. |
| Social impact | 15% | Designed: new followers from the call over unique viewers. Not wired. |
Because two components would score zero for everybody, the score is taken over the weight that can
actually be observed, 0.65. Left alone it would cap every call at 65 and turn a 35/100
gate into a far harsher bar than intended.
Rewards
Trading costs nothing. The treasury is funded by the trading fees on the Zunix coin, and a settlement cycle distributes a slice of what is free rather than emptying it.
Score to the power of 1.3
Convex, so a call that was clearly right earns disproportionately more than one that merely was not wrong. Weight is also scaled by performance, so attention can lift a good call above another good one but cannot make a flat call worth anything.
35 out of 100
Below the threshold a call earns zero. One paid call per caller per stock per 30 minutes: the earliest keeps its place, reposts stay visible and earn nothing.
10% and 20% of a cycle
No single call takes more than a tenth of a cycle, no single caller more than a fifth. These are proportional, so they grow with the pool, and what they remove is redistributed.
$2.50 per call
A hard limit in real money whatever the treasury holds. Unlike the caps it does not grow and does not redistribute: what it removes stays in the treasury.
Settlement is not trustless and claiming is not deployed. A cycle is closed by an authenticated request a person triggers, not by an on-chain process and not by a scheduler. The result is published as a Merkle root so the payout list checks against a single hash, and a settled cycle can be voided only while nothing has been claimed against it.
Rewards are claimed against a distributor contract rather than pushed. That contract is not deployed: its address is empty in the shipped configuration, and the app reports payouts as unconfigured rather than pretending.
Yield
A call takes days to resolve. The capital behind it does not have to sit still while it does.
The design supplies uninvested capital, or tokenized stock liquidity, into integrated on-chain vaults: Robinhood Earn and Morpho-backed money markets. You would earn whatever those vaults earn, net of their fees. It is a deposit rather than a lockup, and Zunix is not the counterparty.
None of the yield layer is built. It is design, not shipped. It appears here and on the site because it is where the protocol is going, and it is labelled everywhere it appears so nobody mistakes it for a live feature.
Safeguards
A reward pool attached to engagement is an invitation to manufacture engagement.
The design filters bot-driven views, purchased likes, engagement farms, self-referral, wash trading, circular trading and wallet clustering, so only qualified activity scores. The thresholds are deliberately not published, because publishing them is publishing the instructions for clearing them.
That detection does not exist yet. What is in place is arithmetic: a minimum score, a 30-minute cooldown, the 10% and 20% caps and the $2.50 ceiling. They bound what any one account can extract without needing to catch anybody, which is why they are the defence being relied on today.
What is live
The short version, with the marketing removed.
Shipped and working
Non-custodial execution, no auto-signing, the 1% slippage floor, the immutable record, market performance scoring, the convex curve, both caps, the ceiling and the 30-minute cooldown.
Design, not shipped
VWAP entry pricing, maximum adverse excursion, server-side evaluation windows, community PnL, social impact, the full attention hierarchy, sybil detection, reward claiming, short execution and the whole yield layer.
The full row-by-row table lives on the receipts section of the main site.
Glossary
| Term | Value | Meaning |
|---|---|---|
| Tokenized stock | ERC-20 | A separate on-chain asset backed 1:1 by the underlying equity. Not the company, no shareholder rights, and it can trade away from the underlying. |
| Robinhood ETH | native | The gas and settlement asset of Robinhood Chain. |
| Excess return | % | A call's move minus the market's move over the same period. |
| Cycle | manual | A settlement round. Scores are computed, a Merkle root is published, and payouts become claimable. |
| Cooldown | 30 min | One paid call per caller per stock in that window. |
| Minimum score | 35 | Below it a call is eligible for nothing. |
| Chain id | 4663 | Robinhood Chain. |