Robindex is built on the assumption that anything that can go wrong with money eventually will. Every path is designed so funds are never lost, never double-spent, and never stuck.
Your tokens
- Held in escrow from listing until sale or cancellation.
- Returned in full on cancel, always.
- Only reachable by you (cancel) or a paying buyer (fill).
Signatures protect every action
Sensitive actions require a wallet signature, and that signature commits to the exact action you approved:
| Action | What the signature covers |
|---|---|
| Create order | Your wallet, the token, the deposit, your exact terms, and visibility |
| Edit order | The exact change you asked for |
| Cancel | The order, and your wallet |
| Reveal private link | The order, and your wallet |
Because your terms are signed, nobody can front-run your listing or alter it in transit. Signatures expire after 10 minutes.
Nothing happens twice
- One deposit, one order. A deposit can back exactly one listing.
- One payment, one fill. A payment can settle exactly one purchase.
This is what makes every refund and every settlement happen exactly once. A repeated request can never trigger a second refund or a second delivery.
Two buyers at once
If two buyers hit the same order at the same instant, they're handled one at a time, and neither can claim stock the other already took:
- The first buyer gets what they asked for.
- The second gets whatever remains, and is refunded the difference.
- If nothing remains, they're refunded in full.
The escrow can never promise tokens it doesn't hold, and the seller is only ever paid for what was actually delivered.
Live pricing at settlement
Market and discount fills are priced against live market data at the moment they settle, so a stale or manipulated quote can't be used to extract value. If the price moved more than 1.5% against the buyer, the fill is rejected and refunded.
Audits
The Phase 3 smart contract will be independently audited before it holds real value.