Guide 11 · 5 min read · Updated epoch 137

Risks

Issuer powers, no volume, no audit yet, and the emergency path.

Issuer and asset risk

  • The stock token issuer can pause a token, block any address, including yours, and burn a blocked balance under its terms. Every stock token is upgradeable through one shared beacon the issuer controls. Redemption depends on the issuer.
  • A tokenized stock is not a share held in a brokerage account. Corporate actions are folded into the token’s multiplier (ERC-8056) as the issuer specifies; contracts work in raw units and the site shows the multiplied figure, never applying the multiplier twice.
  • A stock whose market becomes too thin to buy or sell at size can be retired from the roster; its outstanding epochs still pay.
  • Eligibility is the issuer’s: these tokens are not offered to persons in the US, UK, Canada or Switzerland, and holding the protocol token does not change that. Connecting a wallet does not establish eligibility for anyone.

Prices, and when they stand still

Every buy is guarded by two Chainlink feeds: ETH/USD and the stock's own feed. The stock feeds are total-return feeds with 8 decimals that already include the token's multiplier. Equity feeds do not update outside market hours, so the bound is by asset class: a stock price may be up to 4 days old, the ETH price up to 24 hours. A corporate action can pause a token's oracle without any signal on the feed, so the keeper reads the token's own pause flag before every guarded buy and skips a paused stock. A price past its bound is dropped, and the value that depends on it shows as unavailable.

Revenue is uncertain

  • Payouts are proportional to fee revenue, shared out by holding time. Low volume means low or zero payouts, however long you have held.
  • Only trades in the launch pool and in the protocol pools pay anything to the treasury. More $OMNIA volume elsewhere does not mean more revenue.
  • The launch market is thin at first, and a buy that is large for it moves the price. The keeper caps what it spends per cycle and carries the rest forward rather than paying up.
  • Protocol-owned liquidity in the protocol’s own token is a long position. It can lose value, and impermanent loss is real.

Holding time: what the weighting defends against, and what it does not

  • Your share of a payout is your average eligible balance over the last 48 epochs (24 hours at the 30-minute cadence), not your balance at the snapshot. It defeats renting supply for a payout: a position bought for the snapshot earns 1/48 of its balance-weight and has to be held for a day to earn the rest, and it decays at the same rate afterwards, so buying before and selling after leaves nothing to collect.
  • It is symmetric on purpose, so it does not penalise a wallet that genuinely held for the window and then sells: that wallet is paid, at a falling weight, for the following window, which is the same value it would have received had the payouts arrived on time.
  • It does not stop a wallet from holding for a day and then selling, and is not meant to. It cannot tell one wallet from many under one owner. It does not change who is eligible, only how much of the pot each eligible wallet is weighted for.

Software and privileged roles

  • Bugs in the contracts, the keeper, this site, the Uniswap v3 and Uniswap v4 contracts, the launch hook, Chainlink or the stock token contracts can cause loss.
  • The keeper is trusted to compute allocations honestly. A compromised keeper can misallocate a future epoch; it cannot move funds out of the treasury or rewrite a published root.
  • The authority can withdraw liquidity from a pool at any time, immediately and even while the protocol is paused. The proceeds land only in the treasury and cannot be paid out as holder rewards, and moving value out of the protocol still takes seven days of continuous public pause. You are trusting the authority not to exit the protocol’s positions without cause.
  • The governance owner can pause the protocol, change the operator and, after seven days of continuous pause, recover assets to itself. It is intended to be a multisig; until then it is a single key held by the operator.
  • The contracts are not audited yet. The source is public and verified on the explorer; an audit is planned, and this line changes when it is done.

Network and market conditions

  • RPC outages, congestion and gas spikes can delay epochs and claims. A delayed epoch is published late, not skipped.
  • A stale or paused oracle stops buys until fresh prices arrive; that is the guard working. Equity feeds stand still every weekend by design.
  • One flaky read never blanks a working page: the last good value stays with a stale mark until the next read answers.

Primary sources

Risks · Omnia