Risks

Issuer and asset risk

• The stock token issuer can pause a token, block any address, including yours, and burn a blocked balance under its terms. Every stock token is upgradeable through one shared beacon the issuer controls. Redemption depends on the issuer.
• A tokenized stock is not a share held in a brokerage account. Corporate actions are folded into the token’s multiplier (ERC-8056) as the issuer specifies; contracts work in raw units and the site shows the multiplied figure, never applying the multiplier twice.
• A stock whose market becomes too thin to buy or sell at size can be retired from the roster; its outstanding epochs still pay.
• Eligibility is the issuer’s: these tokens are not offered to persons in the US, UK, Canada or Switzerland, and holding the protocol token does not change that. Connecting a wallet does not establish eligibility for anyone.

Prices, and when they stand still

Every buy is guarded by two Chainlink feeds: ETH/USD and the stock's own feed. The stock feeds are total-return feeds with 8 decimals that already include the token's multiplier. Equity feeds do not update outside market hours, so the bound is by asset class: a stock price may be up to 4 days old, the ETH price up to 24 hours. A corporate action can pause a token's oracle without any signal on the feed, so the keeper reads the token's own pause flag before every guarded buy and skips a paused stock. A price past its bound is dropped, and the value that depends on it shows as unavailable.

Revenue is uncertain

• Payouts are proportional to fee revenue, shared out by holding time. Low volume means low or zero payouts, however long you have held.
• Only trades in the launch pool pay the treasury. More $OMNIA volume elsewhere does not mean more revenue, and the fees the protocol's pool positions earn are collected to a separate wallet rather than distributed today.
• The launch market is thin at first, and a buy that is large for it moves the price. The keeper caps what it spends per cycle and carries the rest forward rather than paying up.
• Protocol-owned liquidity is a two-sided position in a stock market. It can lose value, and impermanent loss is real: against a stock that moves, a position can hold less value than the two sides would have held separately.

Holding time: what the weighting defends against, and what it does not

• Your share of a payout is your average eligible balance over the last 48 epochs (24 hours at the 30-minute cadence), not your balance at the snapshot. It defeats renting supply for a payout: a position bought for the snapshot earns 1/48 of its balance-weight and has to be held for a day to earn the rest, and it decays at the same rate afterwards, so buying before and selling after leaves nothing to collect.
• It is symmetric on purpose, so it does not penalise a wallet that genuinely held for the window and then sells: that wallet is paid, at a falling weight, for the following window, which is the same value it would have received had the payouts arrived on time.
• It does not stop a wallet from holding for a day and then selling, and is not meant to. It cannot tell one wallet from many under one owner. It does not change who is eligible, only how much of the pot each eligible wallet is weighted for.

Pools the protocol does not control

• The SPY, NVDA, TSLA and GOOGL pools are third-party Uniswap markets, some on Uniswap v3 and some on Uniswap v4. The protocol provides liquidity in them; it did not create them, does not operate them and cannot pause, drain or close one. A bug, an exploit or a price manipulation in one of those pools hits the protocol's position exactly as it hits every other provider's, yours included.
• Who else provides liquidity in a pool, and what they do with their positions, is outside the protocol’s control. A provider far larger than the protocol can withdraw at any moment and leave the market thin.
• Each pool's fee tier is a property of the pool. The protocol takes the tier the pool was created with and cannot change it.
• Fees the protocol’s positions earn are collected to the fee wallet. What that wallet is, and what you are relying on, has its own line below.

The fee wallet is not a promise

Every fee the protocol’s own pool positions earn is collected to one address, the fee wallet. It is an ordinary externally owned address the owner controls. It is not a contract, it is not the treasury, and nothing in the code governs what leaves it.

• Holders have no on-chain claim on what accumulates there. There is no root to prove against, no claim function, and no balance the contracts owe you.
• The owner can spend it. Whoever holds that key can move the whole balance at any time, to anyone, and nothing on chain stops or delays it.
• The plan to distribute it to holders later is a stated intention, not a contractual obligation. Nothing has been paid out of it, no date is set, and no line on this site should be read as a promise that anything will be.
• Only the epoch payouts are enforced. Those are bought with the payout leg, committed to a Merkle root on chain and claimable against it. Treat those as the thing you are owed, and the fee wallet as something separate that you are not owed.

Software and privileged roles

• Bugs in the contracts, the keeper, this site, the Uniswap v3 and Uniswap v4 contracts, the launch hook, Chainlink or the stock token contracts can cause loss.
• The keeper is trusted to compute allocations honestly. A compromised keeper can misallocate a future epoch; it cannot move funds out of the treasury or rewrite a published root.
• The authority can withdraw liquidity from a pool at any time, immediately and even while the protocol is paused. The proceeds land only in the treasury and cannot be paid out as holder rewards, and moving value out of the protocol still takes seven days of continuous public pause. You are trusting the authority not to exit the protocol’s positions without cause.
• The governance owner can pause the protocol, change the operator and, after seven days of continuous pause, recover assets to itself. It is intended to be a multisig; until then it is a single key held by the operator.
• The contracts are not audited yet. The source is public and verified on the explorer; an audit is planned, and this line changes when it is done.

Network and market conditions

• RPC outages, congestion and gas spikes can delay epochs and claims. A delayed epoch is published late, not skipped.
• A stale or paused oracle stops buys until fresh prices arrive; that is the guard working. Equity feeds stand still every weekend by design.
• One flaky read never blanks a working page: the last good value stays with a stale mark until the next read answers.

Primary sources

• Chainlink tokenized equity feeds
• ERC-8056