One billion tokens, minted once, and no way to make more
Zorpha is the governance and fee-capture token of the protocol. It is not a staking product, it pays no yield, and it is never required to use a vault. What it does have is a fixed supply, a real vote, and a share of protocol revenue that is spent buying it back and destroying it.
Where the supply goes
Six buckets, summing to exactly 100%. The same basis points are hardcoded in the deploy script, which refuses to run if the distribution does not consume the entire supply and leave the deploy key holding zero.
- Community & Ecosystem38%380M
- DAO Treasury20%200M
- Core Contributors17%170M
- Protocol-Owned Liquidity13%130M
- Early Backers8%80M
- Insurance Fund4%40M
Community & Ecosystem
The largest single bucket, and deliberately so. 8% of supply unlocks at launch as the Season 1 airdrop to early depositors and vault managers. The remaining 30% is released season by season against published criteria, each season approved by governance rather than dripped automatically. Emissions that nobody votes for are just inflation with extra steps.
- At launch
- 80M (8%)
- Cliff
- none
- Vesting term
- 4 years
DAO Treasury
Funds audits, insurance top-ups, integrations and market operations. Held by the governance Safe and spendable only through the 48-hour Timelock, so every treasury movement is visible on-chain before it settles.
- At launch
- nothing
- Cliff
- 6 months
- Vesting term
- 4 years
Core Contributors
Nothing at launch, nothing for twelve months, then linear to month 48. Contributors are the last cohort to become liquid, which is the only version of this line item that means anything. Unvested tokens are held by the vesting contract and carry zero voting weight, nobody votes with tokens they have not earned.
- At launch
- nothing
- Cliff
- 1 year
- Vesting term
- 4 years
Protocol-Owned Liquidity
Fully unlocked at launch and paired into the primary market, owned by the protocol rather than rented from mercenary LPs. Thin books are what turn ordinary unlock events into 40% candles, so this is priced as insurance, not as a cost.
- At launch
- 130M (13%)
- Cliff
- none
- Vesting term
- fully unlocked
Early Backers
Intentionally small. A thin backer allocation on a 12-month cliff keeps the cap table from becoming the protocol’s largest structural seller, and keeps governance in the hands of people who use the product.
- At launch
- nothing
- Cliff
- 1 year
- Vesting term
- 3 years
Insurance Fund
Locked in the InsuranceFund contract and payable only by governance against a verified shortfall: an exploit, an oracle failure, bad debt. It is not a marketing line: it is the reason a depositor has something to be made whole from.
- At launch
- nothing
- Cliff
- none
- Vesting term
- locked until governance releases
A float you can plan around
The most reliable way to break a token is to launch 5% of supply into a thin book and then unlock the other 95% into it. Twenty-one percent of supply is liquid on day one, and no insider tranche unlocks anything for twelve months.
Modelled from the contract schedules, not from a plan. Ecosystem emissions are drawn on a straight line because that is the maximum they can be. Each season needs a governance vote, so the real curve sits at or below this one.
No insider cliff before month 12
Contributors and backers receive nothing at launch. Their first tokens arrive at month 12, then accrue per second rather than in monthly lumps.
Liquidity is owned, not rented
The 13% liquidity tranche is paired by the protocol itself. There is no incentive programme that can be turned off, taking the order book with it.
Emissions need a vote
The 30% ecosystem tail is released season by season against published criteria. It is a budget with an approver, not an automatic drip.
Fees buy the token and burn it
Vaults charge a performance fee. Fees land in the treasury, which splits them fifty-fifty: half funds operations, half goes to a buyback contract that purchases ZOR on the open market and burns what it receives.
The buyback is permissionless: anyone can trigger it once the balance clears a threshold. The caller supplies their own minimum output, so a sandwich attempt cannot force the protocol into a bad fill.
Both figures the contract reports are measured as balance deltas across the swap, not read from the swap venue’s return value. A router cannot over-report a burn that did not happen, and the burn is a real totalSupply reduction rather than a transfer to a dead address.
- 1Vault earns a performance feeCharged on gains above the high-water mark only.
- 2Treasury receives itA single contract, with no discretion over the split.
- 3Split 50 / 50Half to operations, half to the buyback contract.
- 4Buyback purchases ZOROn the open market, with caller-supplied slippage bounds.
- 5Tokens are burnedSupply falls permanently. Nothing is recoverable.
What ZOR is not
Not a dividend. Not a revenue share. Not a claim on treasury assets. Burning reduces supply. It does not entitle any holder to a payment, and it does not promise a price outcome.
What the code actually permits
Token parameters
- Name / symbol
- Zorpha / ZOR
- Decimals
- 18
- Max supply
- 1,000,000,000
- Standards
- ERC-20 · ERC-2612 Permit · ERC-5805 Votes
- Network
- Robinhood Chain
- Voting clock
- timestamp, as mode=timestamp
Powers that do not exist
- MintThere is no mint function. Supply is set in the constructor.
- Owner or adminThe token has no privileged role of any kind.
- Pause / freezeTransfers cannot be halted by anyone.
- BlocklistNo address can be denied the ability to transfer.
- Transfer taxTransfers move exactly the amount specified.
- UpgradeNot a proxy. The bytecode is final.
The only state-changing functions beyond standard ERC-20 transfer and approval are burn, burnFrom, permit and delegate.
Where the contracts stand today
Every one of the 24 findings from the internal review is closed, and the full suite is green at 97 of 97. The external audit and the mainnet deployment are the two gates still ahead. Until the deployment page says otherwise, every address on this site is a testnet address, and any token calling itself $ZOR on a mainnet today is not ours.