XFUND is a 444-piece ERC-721 workforce. Every pixel employee has a deterministic rank, role, department, office, outfit, equipment and stat line. Each NFT controls an ERC-6551 briefcase that can hold ETH, canonical Robinhood Stock Tokens, equipment and other NFTs.
Headcount is capped at 444 employees priced at 0.0025 ETH each, max 5 per wallet. A confirmed hire atomically creates the ERC-721 and its briefcase, then books 80% to holderPot and 20% to operationsBalance. A confirmed mint has no buyer cancellation or refund path.
The contract model defines cumulative $XFUND burn bands at 25K, 75K, 150K, 300K and 500K. They increase an employee's recorded desk weight. Training remains unavailable until a separate utility-token address is permanently linked to the new Fee Desk. Every burn is permanent.
Each employee can run one shift per UTC day at client difficulty 1, 2 or 3. The public score combines merger power, level, a saved three-item ERC-1155 loadout and a deterministic daily game modifier. Balanced, aggressive and defensive stances change both target and points. A successful shift records clients closed, sales points, reputation and XP. Pitch rounds remain a separate Chainlink-resolved Bull/Bear game with no user funds wagered.
A claimed pitch reward mints one ERC-1155 item shard to the other desk and two to the winning desk. Paid loot pulls are excluded. Crate opening, random loot tables, quests and season points are not live unless separate audited contracts are deployed.
The Core accepts primary recruitment ETH and exposes a three-asset client-book allocation for trained employees. The disclosed treasury can immediately execute a one-way terminal sweep to any nonzero recipient, including the deployer address. Assets already delivered to employee briefcases remain outside that action.
Two revealed employees can merge: one ID survives and the other burns. Their recorded XP and desk power combine while every absorbed briefcase remains reachable through the public ownership link. The contract rejects a merger before a chain could exceed the tested 32-hop ownership bound. A merger is irreversible.
At full 444-employee recruitment, gross primary input is 1.11 ETH: 0.888 ETH recorded in the holder ledger and 0.222 ETH in operations. The treasury can withdraw operations. It can also call withdrawAllProtocolAssets immediately to move every remaining Core asset to any address; that terminal state cannot be reversed.
XFUND uses a separate 444 hard-cap collection. Metadata roles use the same tokenId-modulo-five rule as the game contract. Immutable metadata provenance 0x142285322ff1cadc62ac47cde50f7276fce48b93bf3b509d251de86d91cb5883 is pinned before recruitment opens.
The default release check is intentionally compact: one production build, Solidity compilation with bytecode limits and one source-level security-invariant suite. Collection generation and provenance are checked only when those assets change. This remains an internal engineering review, not an independent audit.
The ERC-721 implements ERC-2981 and reports a 2% secondary-sale royalty to the treasury address. OpenSea and other marketplaces may index the verified collection after the first mint, but marketplace availability and actual royalty payment are external policies; the NFT contract reports the fee and does not force arbitrary marketplaces to collect it.
Public pages require no account and read only public chain state. Wallet routes may use Privy email, Google or wallet authentication; those providers process login data under their own policies. A project-specific privacy policy, terms and qualified review of the tokenized-asset mechanics remain release blockers and are not represented as complete.
0x6e273a8518bdf4476727910bc296f7e12fb462c10x9c1a7b073c4902c8729b731148c2c6484be1564e0x7f4b82c7cfbaa46f128b7083a431f7856e64faf20x2609a8aad3dc6fda4c5a0ad003675d44a645abd50x2887bbd719a181fc1ef71a352668def8d5d6d5d70xac5ee09779fc97828905a5a6eb41440ef5dddc0b0x54779727ae662ea866979bb599da3b8a15b6ca57Open 888-file release manifestNot linkedEvery new production address will link to its public Robinhood Chain record. Until then, all contract-dependent actions stay disabled.