6.1
The escrow program
Live on mainnet since 5 November 2026, and open source: both contracts are public at github.com/darkstonk/contracts, and the deployed Solana program matches a build of that source byte for byte. Every order sits in one program on Solana. What it says about itself right now, read from the chain as this page loads:
The contract
Reading the chain- Program
- Config
6.2
What the keys can do
- The admin
- Can pause new orders and fills, and set the fee up to the 1% cap. Cannot move funds held in escrow.
- The matcher
- Co-signs fills so the book stays sealed. Cannot fill an order at a price its owner didn't seal.
- The upgrade key
- Can replace the program's code. Its current holder is shown on the program page. This is the key to watch.
- You
- Can cancel your own order at any time, paused or not.
6.3
Coins the escrow refuses
Standard SPL coins and Token-2022 coins are fine, transfer tax included: many StonkFun coins in reward mode keep a cut of every transfer, so the escrow books what actually arrives and a buyer pays only for the coins that reach them. The order card shows the coin's tax before you sign. The program still refuses a transfer hook, a permanent delegate or accounts frozen by default, because each of those can block a transfer or move coins out of escrow.
6.4
Robinhood Chain
On Robinhood Chain the pool takes every Pons coin that has reached a DEX and settles in ETH, through an escrow contract that can't be upgraded and whose source is verified on Sourcify. Your EVM wallet sends the fill itself, with an approval from the engine that works once, for your wallet, within two minutes. Coins that take a cut of every transfer work here too: the contract books what arrives. There is no $HUSH holding rule and no Blackout there.
6.5
The risks
- New code
- No third-party audit yet. The contracts have their own tests and our security review. Keep sizes small until an audit is published.
- Upgrades
- The Solana program can be upgraded by its upgrade key, and an upgrade can change what it does.
- The market
- Memecoins move fast. A price under spot can still be a loss an hour later.
- Waiting
- An order can rest unfilled if nobody wants the other side.
- Thin crowds
- A coin with few orders resting gives you little privacy.