Security & Anti-Rug Design

Thor Exchange is designed so that the classic ways token launches hurt people are structurally impossible, not just discouraged. These guarantees are properties of the contracts themselves — all of which are source-verified on Blockscout so you can check every claim below yourself.

Token-level guarantees

Every token launched on Thor:

• Has a fixed supply of 1B — there is no mint function in the contract at all.
• Has no owner and no admin functions — no pause, no blacklist, no fee switch, no upgrade hook. The creator’s only special status is fee rights, which never touch token behavior.
• Gives the creator zero free tokens — any creator position is bought on the open curve like everyone else’s.
• Ships pre-connected to Permit2, Uniswap’s battle-tested approval hub. This lets apps request exact-amount, expiring, signature-based approvals instead of asking you to grant a separate unlimited approval to every app. Two things to know: this connection is built into the token and cannot be switched off, and Permit2 only ever moves tokens with your explicit signed authorization — if you never sign a Permit2 message, it moves nothing. We disclose it here because it means trusting one extra audited contract that Thor does not control.

Curve-level guarantees

• The ETH in a bonding curve is held by the protocol contract, not the creator. It can only leave through sells (to the sellers) or graduation (into locked liquidity).
• Every curve uses identical, hardcoded parameters — no launch can have secretly different math.

Liquidity guarantees

• At graduation, the migration is atomic: pool creation, liquidity deposit, and locking happen in one transaction that either fully succeeds or fully reverts.
• The migrated LP position is held by a lock vault with no withdrawal function — one vault per graduation venue, same guarantee either way. Nobody — creator, team, or future owner of anything — can pull that position out of the vault. Ever. (The scope of this guarantee — what Thor controls versus what the chain controls — is spelled out in “Where our guarantees end” below.)
• Each venue’s fee split is hardcoded (70/30 on Thor DEX, 50/50 on Uniswap V3) in its vault; fee collection can move fees only to the fee-rights holder and treasury, never the principal.

DEX foundations

• The Thor DEX venue is a faithful port of Uniswap V3 — among the most battle-tested AMM designs in existence, securing billions of dollars for years. The Uniswap V3 venue goes further: tokens graduating there land on the actual canonical Uniswap V3 contracts on Robinhood Chain, not a port.
• Flash loans are disabled and fee tiers are frozen at 0.05% / 0.30% / 1.00%.
• The protocol is guarded with reentrancy protection on all state-mutating entry points.

Where our guarantees end

The guarantees above cover everything Thor built — and we want to be precise about the boundary, because “trustless” marketing that hides its edges is how people get hurt.

Like every project on Robinhood Chain, Thor’s pools hold the chain’s canonical wrapped ETH (WETH), and tokens that graduate to the Uniswap venue live on the canonical Uniswap V3 contracts. Both are maintained and governed by their own operators, not by Thor — and the chain’s WETH, like bridged assets on most modern chains, is an upgradeable contract its operator can change. Thor holds no key that can touch your liquidity, but we also can’t make infrastructure we don’t own ungovernable. This is the standard trust model for every application on this chain (and on rollup-style chains generally); we monitor these contracts for changes and disclose the dependency here rather than pretend it doesn’t exist.

Every Thor token is also pre-connected to Permit2, as disclosed above.

A note on risk

Smart contracts can never be entirely risk-free, and nothing here is financial advice. The guarantees above eliminate specific structural risks (rug pulls, supply inflation, admin abuse) — they cannot eliminate market risk. Tokens can still go to zero the honest way. Trade accordingly.