ORBIT NOVA
Documentation

Transparent by design.

Fee-funded staking, buybacks and recovery bonds. The protocol is deployed on Robinhood Chain. All addresses are listed under Contracts below and can be verified on the explorer.

Overview

Orbit Nova uses an ordinary fixed-supply token created through Pons. FeeSplitter receives native-ETH creator revenue, reserves two thirds for the treasury and sends one third to OrbitEngine. At the defaults, the engine assigns half its receipts to active stakers and half to the buyback reserve. With no stakers, the whole engine share goes to the reserve.

The design is inspired by Lunarray. Orbit Nova uses its own implementation and addresses. It is not affiliated with or operated by Lunarray.

Fee flow

The proposed creator tax is 3%, charged in addition to the Pons base fee. The 2/3 treasury, 1/6 staking and 1/6 reserve division applies to ALL creator revenue actually harvested, which can include a share of the base fee. Therefore treasury, staking and reserve allocations are not exactly 2%, 0.5% and 0.5% of total trading volume.

Harvested ETH revenue 2/3 → treasury credit (withdrawable to the fixed treasury) 1/6 → staking rewards, at default parameters 1/6 → buyback reserve, at default parameters

Fees first accrue on the curve or Pons hook, then enter Pons escrow through a sweep. Harvest claims the escrow credit and splits it. Pons restricts sweeps that require internal swaps to its authorized operator. Fees awaiting that operation are not yet harvestable. The built-in Pons buyback is disabled in this launch configuration because OrbitEngine runs the separate buyback strategy.

Market and oracle

The immutable market adapter reads Pons pricing reserves before graduation and the exact Uniswap v4 pool price after graduation. The pair must be native ETH. Values are stored as tokens per ETH: a higher value means a cheaper token.

Start records one sample. Each successful hourly poke records one more, up to 168 retained samples. Missed hours are never filled with repeated current prices. The default target is the mean of the latest 24 samples. At least six real samples are needed for bonds; a sample history older than two hours requires a new poke before entry.

discountBps = (spotTPE − targetTPE) × 10,000 / spotTPE bonusBps = maxBonusBps × min(discountBps, bandBps) / bandBps

Bonds open only when spotTPE exceeds the target. Historical sampling does not make the spot price manipulation-proof.

Bonds

Entry transfers tokens, sends 1% to the dead address, and adds the remaining principal to the crypt. The quoted bonus, maturity and exit penalty are fixed for each bond when opened. At the defaults, the maximum bonus is 50%, reached at a discount of 50%; maturity is 24 further recorded epochs.

Settlement pays mature bonds in order only when the crypt can cover the next entire payout. Exit forfeits the bonus and returns principal less the bond's recorded penalty (20% at the defaults), only if the crypt has enough liquidity. Other bond payouts can consume that liquidity. Staked tokens are accounted separately and never used for bonds.

Buybacks

Each poke attempts to spend 10% of the current reserve. Bought tokens enter the crypt. Curve refunds return only to the reserve and are not treated as new staking income. A failed buyback emits a skipped event, preserves the ETH and still allows the sampled epoch to advance.

The contract enforces a minimum output based on the lower of the current and prior target tokens-per-ETH prices, minus a 10% default tolerance that includes trading fees and price impact. A caller may demand a stricter minimum. This reduces execution risk but does not eliminate MEV. A sharp price increase can cause buybacks to wait for the target to catch up.

Successful buybacks accrue a keeper tip of 0.1% of the remaining reserve, capped at 0.0001 ETH, payable through a separate claim. A running keeper or a user must submit the maintenance transactions; contracts do not wake themselves up. The keeper requests curve or pool fee sweeps, harvests, advances due epochs and settles bonds. If graduation leaves the v4 pool pending, it retries pool creation. An operator-restricted sweep does not stop settlement of funded bonds or distribution of ETH already in escrow.

Staking

Stake deposits ORBITNOVA; unstake withdraws it without a lock or protocol withdrawal fee. ETH rewards accrue per staked token only while it is deposited, and can be claimed separately. Pausing entries never blocks unstaking or reward claims. No fixed APR is promised. A transferable liquid-staking receipt is not part of this release.

Parameters and governance

  • Immutable epoch length: 3,600 seconds.
  • Default window: 24 samples; minimum history: 6 samples.
  • Default bond terms: 1% entry burn, up to 50% bonus, 24-epoch maturity, 20% exit penalty.
  • Default reserve release: 10% per epoch; staking share: 50% of engine receipts.
  • Parameter changes require a guardian proposal and a 48-hour delay. Existing bonds retain their recorded payout, maturity and penalty.
  • Guardian may pause new stakes and bonds for up to seven days per call.
  • After 30 days without bond activity, and only with no open bonds, guardian may send idle crypt tokens and reserve ETH to the fixed treasury. Stakes, owed staking rewards and keeper credits are excluded.

Implementation status

This release has no upgrade proxy and no admin withdrawal path for staked tokens or reward liabilities. FeeSplitter can be connected to its engine only once. Reentrancy guards protect fund-moving functions; treasury payouts use a separate credit so a failing treasury transfer does not block harvest.

The current code is unaudited. Test results, integration limitations and deployment instructions are maintained with the project source. Deployment alone does not constitute an independent security review.

Contracts

Addresses are published here once the protocol is deployed on Robinhood Chain.

Risks

Tokens can lose value. Bond payouts and exits depend on crypt liquidity; a mature bond can remain unpaid. Fees depend on market activity and Pons operations. Price samples may be manipulated, buybacks may fail, keepers may stop and contracts can contain bugs. Verify the published token and protocol addresses before transacting.