Risk

One contract can pause every security at once

All 194 securities are beacon proxies sharing a single registry at 0xe10b6f6B275de231345c20D14Ab812db62151b00. That contract can upgrade every implementation at once, pause every token at once, and refuse any address.

It has used two of the three. The system was globally paused once and unpaused a hundred and forty-two blocks later, and 175 addresses are blocked right now. The blocklist is enforced inside transfer — proved by simulating a transfer from a blocked holder and reading back a Blocked(address) revert — so a pool holding these tokens can be frozen without notice, and so can a wallet.

A role on that registry can also burn from any address. That is not a theoretical power of a proxy pattern; it is a named role with a holder.

The balance is not the position

These are ERC-8056 scaled tokens. The share count is the token balance multiplied by a value the issuer updates when a corporate action lands, and 12 of 194 already carry one other than 1.0. CrowdStrike carries exactly 4.0.

Any interface that renders balanceOf without applying it is wrong, and wrong while looking entirely normal. So is any pool price read as a price per share: a market maker prices raw token units, so the price per share is that divided by the multiplier. Cross shows both and labels which is which.

There is no oracle on this chain

No price feed is published for chain 4663. Every dollar figure anywhere in this product is a pool’s own marginal price, and is labelled as one. That is a fact about a pool, not a claim about the world price of anything, and it can be moved by whoever last traded in that pool.

It is also why the headline number here is a ratio between two securities rather than two dollar prices: a ratio needs no oracle to be true.

Most pools are not markets

NVDA / USDG has 247 initialised pools. 32 hold any liquidity, and thirteen of those charge between fifty and ninety-nine point nine percent of the trade. They are funded and they answer queries.

Cross quotes every pool that could fill, on the size actually being traded, and takes the one that returns most — which is the only defence against this. A router that picks by existence rather than by depth will find one of the thirteen.

What this build cannot settle

Cross settles a v3 path of any length through SwapRouter02, and a single v4 hop through the live UniversalRouter at 0x8876789976dEcBfCbBbe364623C63652db8C0904. The bytes it sends for that v4 fill are checked in this repository against a transaction the chain has already accepted, byte for byte.

A cross needing TWO v4 hops is declined. That calldata shape is used on this chain, but decoding it left a word in the encoded head that could not be accounted for, and calldata that has not been proven is not something to put in front of a wallet. Where the declined route would have paid more, the terminal shows the shortfall in percent rather than hiding it.

Two kinds of pool are listed and never quoted. One is the pool whose fee is set by a hook at swap time — 134 of those for NVDA / USDG alone — because that fee is not in the state that was read. The other is the pool whose hook can return a delta on the swap, changing the settled amounts after the pool’s own arithmetic has run. 82 of the funded pools indexed here carry one, and the deepest NVIDIA-against-the-dollar pool on this chain is among them: it advertises a fee of zero and, quoted from state, looked like the best venue on the chain by nearly two percent.

Unaudited

This code has not been audited. It never takes custody, never holds an order and cannot fill anything itself — it reads public state and hands your wallet a transaction to sign — but the quote it computes, the minimum it sets and the path it encodes are all its own arithmetic, and a mistake in any of them costs money.

The quoting engine is checked against pool state read off the chain: it recovers each pool’s tick exactly and reproduces the router’s own getAmountsOut to the wei. That is evidence, not an audit.

And the ordinary ones

A tokenized security carries every risk of the security it tracks, plus the risks of the chain it settles on, plus the risk that the two stop tracking each other. Cross is not affiliated with, endorsed by, or connected to Robinhood, and nothing here is investment advice.