Skip to main content
Always compare the full address before approving a token or contract.

Swaps

The executor source is verified on Sourcify with an exact match. It:
  • Pulls the input only from msg.sender, and only amountIn.
  • Runs the swaps in the order encoded in tx.data. Each step is one of a fixed set of venue types; it never makes arbitrary calls chosen by the caller. It has no owner or admin functions.
  • Checks deadline. For ERC-20 output it also checks that the recipient’s balance increased by at least minOut, so transfer-taxed output tokens cannot short the user.
  • Takes the fee from the final output, sends it to the treasury Safe and sends the rest to recipient. Leftover dust from the route also goes to recipient.
  • Emits Settled(sender, recipient, tokenOut, grossAmountOut, feeBps, feeAmount, amountOut).
The executor was reviewed internally and by a separate review pass. It has not had a formal third-party audit.

Token and revenue

The active processor’s creation and runtime code have exact Sourcify matches. Its 6000/500/3500 bps split is a contract constant. The Safe activated it on September 27; creator fees point to it. Revenue held by the Safe enters only through explicit Safe funding calls; this is not a public deposit contract.

Liquidity destination

The ROUTE/USDG Ramp pool is 0xd40585db9c332f3dcd82a77546c9670e38f82f06f18460eb3c4fca2adeda863e, hook 0x08E52564Bad99E05a694b4809F397edcA417A080, tick spacing 60. The wide position uses ticks -345360 and -324600. Shares go to 0x09Efc01e903033D6642d20a8C5cF6Bee210cFBF8. Changing the range requires pausing and a new Safe policy. The earlier ROUTE/native ETH pool (0x220e47dde1a5180cb131d4c720abf66d5c36fbdf3af91522f7b1c7f749770d8f, Pons hook on Uniswap v4) is no longer funded. Its historical LP position #2397563 is owned by the Safe, with its liquidity withdrawn.