Risks

Smart-contract risk

The contracts can contain bugs. They have no upgradeability and no pause, so a bug cannot be patched in place: it would require a new deployment. The design limits exposure with reentrancy guards, pull-based claims, custom errors and an accounting invariant tested in Foundry, but tests do not prove the absence of bugs.

Unaudited code

No audit has been performed. Do not treat the testnet contracts as a reference for mainnet security.

Officiant failure

An Officiant can claim a Rite and stop, or make a step that cannot pass verification. The Rite then fails at its deadline: the Officiant loses its bond, and the Pot returns to Open. Sponsors lose no HYPE, but they lose time, and if the Officiant bought the ticker, that ticker is taken and the Pot cannot be listed under it. Sponsors would need to withdraw and open a new Pot with another ticker.

Ticker price spikes

After a window with a sale, the next window starts at twice the last price, or more. A run of sales can push prices up. A Pot is never charged more than its total, and an Officiant that buys above what the Pot can repay is not repaid, but a Pot may wait a long time before the auction reaches it.

The empty order book at listing

A new spot pair opens with no liquidity. Hyperliquidity is disabled for bridged tokens, so the book starts empty. Early trades can move the price far from the start price. Listing does not guarantee volume, depth or any price. The First Crossing helps holders be ready, but it does not create liquidity.

The Elysium withdrawal delay

Elysium uses standard optimistic withdrawals with a challenge period. The Elysium documentation does not publish the duration. Moving tokens from Elysium to HyperEVM, and then to HyperCore, may take time that Symbolon cannot shorten.

Unsupported tokens

Fee-on-transfer and rebasing tokens are not supported. Symbolon rejects a bounty or crossing deposit when the amount received differs from the amount sent. A rebasing token could still be opened if its transfers look exact at that moment, but its supply would no longer match the Core supply after a rebase. Do not open Pots for such tokens. Tokens whose supply can change (mintable or burnable) may fail check 3 if the supply changes during a Rite.

Dependence on Hyperliquid's rules

The protocol relies on rules set by Hyperliquid: the ticker auction, lower-only fee share, permanent freeze revocation, one-shot genesis, permanent link. If those rules change, the guarantees of the Seat may change too. The testnet simulates these rules; it does not prove how HyperCore will behave on mainnet.

Testnet specifics

• The HyperCore side is simulated.
• Prices are scaled: 0.05 test HYPE stands for the 500 HYPE mainnet floor.
• Test HYPE and demo tokens have no value.