Addresses
Per-environment contract addresses + Blockscout links.
CTFExchange
Signed-order matching with quadratic taker fee.
Vaults
Per-user custody, dual-sig withdrawals, emergency path.
Conditional Tokens
Gnosis-based ERC-1155 position tokens.
Neg-Risk Adapter
Multi-outcome markets + convertPositions.
Oracle
Outcome proposal, challenge, finalise.
Key invariants
- Non-upgradeable vault logic. Each user’s vault is a standalone
contract deployed by
VaultFactoryfrom bytecode pinned at factory deploy time; no admin can change it. - Dual-signature custody. Withdrawals, splits, merges, neg-risk conversions all require user + backend EIP-712 signatures.
- Emergency withdraw timelock. Users can unilaterally drain their vault after a 7-day on-chain delay.
- No unbounded admin power.
onlyAdminis restricted to pause / register / configure actions. - Digest-based replay protection. Every signed operation is single-use.