A risk protocol for NFTs · Robinhood Chain
Retail produces it. Makers take a rebate on it.
On a trading floor in the metaverse, a crowd of Retail traders park their capital and produce a healthy supply of $FLOW. They sit together on The Exchange and are settled regularly by their owners to farm the $FLOW. With more $FLOW, the traders can open more positions. But on the other side of every order lurks something Retail would rather not think about… the Makers.
The Makers are hunting for Retail and their precious $FLOW. They will take it by any means the rulebook permits. They will internalize an order before it ever reaches the book, or catch a trader on the way out and take the whole position in slippage. So the brokerage struck a deal with the Makers: they pay a rebate on all $FLOW production. In return, the Makers do not touch Retail while it sits quietly on The Exchange.
But when Retail withdraws, or when a new order is routed… the Makers do not hold back.
Order Flow is a risk protocol for NFTs with novel tokenomics. Your NFT can steal other NFTs and the token they produce, on-chain, with no operator able to decide who wins.
That last clause is the hard part, and it is why this is a port rather than a copy. The 2021 original resolved every roll — species, traits, theft — inside the transaction that paid for it, from a seed anyone could compute. On the chain this runs on, that seed is frozen for roughly fifteen seconds at a time and free to read in advance, so the original design would hand every outcome to whoever bothered to simulate first. Here, minting and exiting are split across two blocks against a randomness beacon whose entropy does not exist when you pay.
0xb152e7c006874A86f1b4fD34bf8cee908C0Aad480xBe3a98f9B185F2f1Ff25638Dd3d61CaAa50585510xcda7d3Be210f3b070b73aE94A3326D8d6494bB030x0e7769C9E063AF16d381c14b642801e0452A4B4c0xFb741d20d231caA32d94B6e2D2aa802fdEB36a31Live on Robinhood testnet 46630. These tokens are worthless and the contracts are unaudited. Nothing on this page is an offer.
| Token ID | Cost | Paid in |
|---|---|---|
| 1 – 10,000 (Gen 0) | 0.001 ETH | native ETH |
| 10,001 – 20,000 | 20,000 $FLOW | burned |
| 20,001 – 40,000 | 40,000 $FLOW | burned |
| 40,001 – 50,000 | 80,000 $FLOW | burned |
Minting all 50,000 burns 1,800,000,000 $FLOW. Gen 0 is priced against the market it actually launches into: the median NFT sale on this chain is sixty cents. The price is not the business — it is the only thing standing between the collection and a single wallet farming all of it, because gas here costs essentially nothing.
You have a 90% chance of minting Retail, each with its own traits. What it can do:
| Action | Notes | Risk |
|---|---|---|
| Join The Exchange | Accrues $FLOW continuously, prorated to the second. | None. |
| Settle | Receive 80% of the $FLOW accrued. | Makers take a fixed 20% rebate in return for leaving The Exchange alone. It is split across every staked Maker in proportion to Alpha. One transaction — no roll is involved. |
| Withdraw | The position is closed and all $FLOW is settled. Only available after T+2, matching the settlement cycle the equity market ran on for a decade. | 50% chance the Makers front-run the exit and take every $FLOW accrued. Two transactions: the roll cannot be resolved in the block that requests it, and the result cannot be avoided once requested. |
You have a 10% chance of minting a Maker, each with an Alpha from 5 to 8. Higher Alpha means a larger share of the rebate and a better chance of internalizing a new mint. Only staked Makers earn or steal anything.
| Action | Notes | Risk |
|---|---|---|
| Enter the Dark Pool | Earn a share of the 20% rebate on all $FLOW produced by Retail on The Exchange. | None. |
| Collect | Receive all rebate accrued against your Alpha. | None. |
| Leave | Receive all rebate accrued, and exit. | None. |
Carries all the production and all the risk. Pays the rebate, eats the slippage, and is the reason there is anything to take.
Alpha 8 is roughly one Maker in 128, not one in four — the weights are steeply skewed, exactly as they were in the original.
The staking faucet stops at 2,400,000,000 $FLOW, enforced in the Exchange. The token itself carries no supply cap in code — inherited from the original, and named here rather than papered over.
The emission schedule is the single number that decides how long a game like this lives. It pays a fixed amount per staked token per day, which means emission buys the thing that produces emission: in the original the staked population doubled every 1.54 days and the designed economy ran dry in under eight. This testnet build still carries the original rate. Correcting it — either a 50× smaller rate or 50× larger Gen 1 prices, which are the same ratio — is the last open decision before mainnet.
This chain has no VRF — all sixteen canonical coordinator addresses are empty — and none of its native entropy is usable. The block hash is identical across roughly 150 consecutive blocks, and prevrandao is the literal constant 1. So the game runs its own beacon: the operator commits to a reverse hash chain in advance and publishes only its head. A roll mixes an unrevealed link with the hash of a block that did not exist when you paid. The player cannot compute it, the sequencer cannot select it, and the operator cannot bias it, because its own preimage was fixed before the request existed. All the operator can do is stall — and after thirteen minutes anyone can settle the roll instead and take a slice of its bond.
The original's rarity tables are transcribed verbatim, so the intended curve is preserved. Its mistakes are not. Its uniqueness key silently omitted one trait, so two tokens differing only in that trait counted as duplicates. Its bucket draw was biased on ten of eighteen tables, so the published rarity percentages were not the ones the tables encoded. Its steal roll consumed eleven bits where the comment claimed ten. Asking for the Alpha of a token that did not exist returned the best possible score. Each of those has a test in this repository whose only job is to fail if it ever comes back.
The original's staking contract was paused two days after launch and never unpaused. Thirteen thousand four hundred and twenty-three NFTs are still inside it. The rescue path here is not gated on the beacon, not gated on a pause flag, and not gated on the operator being alive.
Retail against Makers is not a metaphor anyone had to invent. It is how the venue this runs on actually earns: orders are sold to the firms on the other side of them. The game just prices it.