Skip to content
Live on Robinhood Chain testnet

Track records you can actually verify

Zorpha runs curated vaults on Robinhood Chain. Every rebalance is signed by the manager and written onchain as a public receipt — with the price, the size, and the exact moment it happened. No screenshots. No edits. No quietly deleted calls.

Depositing never requires holding $ZOR.

Max supply
1B
fixed, no mint
Launch float
21%
circulating day one
Fee to buyback
50%
bought and burned
Timelock delay
48h
on every admin action
The problem

Everyone’s track record is undefeated

Screenshots get cropped. Bad calls get deleted. “Up 400% this quarter” is a claim with no counterparty, and the people who most want your capital are the ones with the least to lose by exaggerating.

Zorpha does not ask you to trust a manager’s summary of their own performance. It removes the summary. What is left is a list of signed, timestamped instructions and what each one did to the vault’s net asset value — the same data for the manager’s best month and their worst.

Anatomy of a receiptverifiable
Rebalanced
block 1,284,551
manager
0x8f2a…4c19

The key that signed. Not a display name someone typed.

targetBps
7000

70% exposure requested. The intent, recorded before the fill.

navPerShare
1.04182

Vault NAV at execution, computed from the oracle the vault is pinned to.

nonce
42

Strictly increasing. A skipped nonce is a visible gap in the record.

commitment
0xb617f5353dc8…18ff

Hash binding every field above. Change one number and it stops matching.

Emitted by the vault contract itself, so it exists whether or not this website does.

How it works

Three steps, no trust required in between

01

Pick a vault, not a promise

Each vault is an ERC-4626 contract with a fixed mandate, a named oracle, a hard slippage bound and a published fee. You can read all of it before you deposit a cent.

02

The manager signs, the chain records

Managers cannot touch your funds. They sign an EIP-712 rebalance instruction; the vault verifies the signature, enforces its own risk limits, and emits a receipt.

03

Judge them on the record

Every receipt is permanent and timestamped. A manager’s history is the sum of their receipts — including the bad ones, which is the entire point.

Curated, not permissionless

Three vaults at launch

V1 ships a small number of mandates on purpose. Every vault is deployed through a gated factory and reviewed before it exists, so there is no long tail of anonymous strategies for depositors to sift through.

HOOD Long/Flat

zqHOOD

Rotates a single tokenised equity between full exposure and cash.

Oracle-gated · 1% max slippage · 20% performance fee

RWA Rotation

zqROT

Reweights a basket of tokenised equities against a USDC base.

Per-asset oracles · basket weights onchain · 20% performance fee

USDC Yield

zqUSD

Routes idle USDC through a pluggable yield adapter.

Adapter swaps are timelocked · 10% performance fee

Audit remediation complete — deposits are open

Our internal audit found 24 issues across the token and vault layers, including one that would have caused depositors in the USDC yield vault to redeem for zero. All 24 are fixed and pinned by regression tests, and the contract suite is green at 97 of 97.

A third-party audit is still outstanding and remains a gate before mainnet. Every finding is published in full, including how each one was reproduced.

Read the audit

Design decisions

What we gave up to make this checkable

Verifiability is not free. Each of these is a constraint we accepted rather than a feature we bolted on.

Managers never custody funds

A compromised manager key can request a rebalance within preset limits. It cannot withdraw, cannot change the mandate, and cannot raise its own fee.

Fail-closed oracles

If a price feed is stale or out of bounds, the vault reverts rather than guessing. A rebalance that cannot be priced honestly does not happen.

Fees buy and burn the token

Half of every performance fee is used to buy $ZOR on the open market and burn it. The contract reports the USDC actually spent and the tokens actually destroyed.

Admin power sits behind a delay

Privileged changes are queued in a 48-hour Timelock owned by a multisig. You get two days of warning, not a surprise.

$ZOR

A token with a job, not a yield

ZOR has a fixed supply of one billion, minted once, with no mint function on the contract. It carries governance weight and captures protocol fees through buyback and burn. It pays no dividend and confers no claim on revenue.

  • Fixed 1,000,000,000 supply — supply can only ever fall
  • No owner, no pause, no blocklist, no upgrade path
  • Half of all protocol fees buy and burn ZOR on the open market
  • Real ERC-5805 voting weight, timestamp-keyed
  • Never required to deposit into a vault
Contract properties
Standard
ERC-20 · ERC-2612 Permit · ERC-5805 Votes
Decimals
18
Mint function
none — supply fixed at deploy
Owner / admin
none on the token itself
Transfer tax
none
Voting clock
timestamp (ERC-6372)

Read the receipts before you read the pitch

The portal shows every rebalance every manager has ever signed, in order, with the transaction hash next to it.