Skip to content
Open app

Security

Your limits, enforced onchain.

Your Stock Tokens and USDG stay in your wallet. Rules you turn on become onchain policies, and the Orlo Rules contract checks every limit before anything moves.

What the keeper can and can't do

The Orlo keeper can

  • Trigger a policy you turned on, once its condition is met.
  • Pay the gas for that run from its own key.
  • Nothing else. The Orlo Rules contract rejects any run that breaks one of your limits.

The Orlo keeper can't

  • Change a policy, raise a limit or pick a new destination.
  • Move funds outside a policy, or spend more than you approved.
  • See or use your private key or recovery phrase.

Details

Custody

Orlo doesn't hold your funds. Assets stay in the wallet you control, on Robinhood Chain. A run sells only the amount its policy allows and sends the proceeds straight to your wallet as USDG or into the vault you chose.

How a rule is enforced

When you turn a rule on, your wallet signs it into the Orlo Rules contract as a policy. Before every run the contract checks the per-run ceiling, the number of runs left, the cooldown, the expiry, the slippage limit and the destination. If any check fails, nothing moves.

The Orlo keeper watches your condition and calls the contract when it's met. It holds only a gas key and has no special access. It can trigger what you authorized and nothing more. Orlo can pause all runs at once in an emergency, but it can't edit or run a policy outside its limits and has no path to your funds.

Approvals

Approvals are exact amounts. Orlo asks your wallet to approve the amount a policy can sell, never an unlimited allowance. You can see every approval in Wallet permissions.

Pause and revoke

You can pause, resume or revoke a policy from your wallet at any time. Pausing stops new runs straight away. Revoking ends the policy for good. A transaction already sent to the network can still complete.

What your wallet is asked to sign

  • Connecting. Your wallet shares its public address so Orlo can read balances. Nothing is signed.
  • Signing in. To save rules to your account, your wallet signs a plain-text sign-in message (Sign-In with Ethereum). It names this site, has a short expiry, and can't move funds or approve spending.
  • Transactions. Turning a rule on, approving an amount, depositing to a vault, claiming test assets, pausing and revoking. Orlo shows the amount, recipient, contract and fees before your wallet opens.

Testnet contracts

Every Orlo contract on Robinhood Chain testnet, plus the keeper's gas key, with links to the explorer.

What Orlo depends on

  • Robinhood Chain for balances, policies and transaction history, read through an RPC provider. See network details.
  • The Stock Token issuer's public API for reference prices, which also price the testnet market, and on mainnet for the list of canonical Stock Tokens and their multipliers. See Stock Token APIs.
  • The Morpho API on mainnet, to find USDG vaults. Orlo checks each vault's asset onchain before listing it.
  • Canonical USDG on mainnet at 0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168, per the token contracts list.

If a source is slow or unavailable, Orlo shows the last value it could verify with its time, or says the value is unavailable. It doesn't fill gaps with guesses. The contract refuses to run on a price older than its freshness limit.

Risks that remain

  • Orlo's contracts are provided as-is and haven't been independently audited. Smart contracts can have bugs.
  • A run depends on a fresh price. If the price source or the keeper is delayed, a run can happen later than you expect.
  • Stock Token prices can fall, and selling part of a holding means you own less of it.
  • A website can be imitated. Check that you're on orlo.quest before connecting.

Read the full risk statement.

If something looks wrong

  1. Don't sign anything you don't recognize. Orlo will never ask for your recovery phrase.
  2. Pause or revoke your policies from the Rules page.
  3. Check your wallet's approvals on the Robinhood Chain explorer and remove any you don't recognize. Removing an approval is a transaction and costs a small network fee.
  4. If you think you've found a problem in Orlo, contact us through the support details on the Help page.

Connected already? See the approvals your wallet has granted on Robinhood Chain.

View permissions