# $SHHH: Anti-Viral Token

**White paper v0.6 · Robinhood Chain · pons V2**

> The fewer people know, the better it is for the ones who do.

---

## 0. Summary

$SHHH is an experimental memecoin on Robinhood Chain that inverts the usual memecoin logic. A normal token rises when attention rises. $SHHH pays out on the opposite: a shrinking count of active addresses, no marketing, and holders who do nothing. The mechanics are public, time-boxed, and described from day one as a game, not an investment.

The project has two layers:

1. **Base layer**: an ordinary fixed-supply token, launched on the pons V2 launchpad with liquidity locked automatically at graduation.
2. **Silence layer**: a separate, permissionless staking contract (the **SilencePool**, wrapping $SHHH as **wSHHH**) where the reward rate rises as the number of active participants falls, and where most of every creator fee the base token ever earns (85%, the rest funds the project) turns into more $SHHH for the pool, forever. The staking layer's reward window is fixed at 90 days from its own deployment and cannot be extended; after that, unclaimed silence stops paying but redemption never stops.

This is v0.6 of the design, building on v0.2's redesign of three problems found in v0.1, a disclosure added in v0.3, a mechanism removed outright in v0.4, a website and Telegram channel added in v0.5, and a raised creator tax and project share in v0.6, after the original numbers turned out too small to fund anything. See §9.

---

## 1. Context: the meta on Robinhood Chain

Robinhood Chain (an L2 on the Arbitrum Orbit stack, mainnet since July 1, 2026) was built for tokenized equities. In practice, memecoins make up the large majority of DEX volume, and the dominant trend is pairing memecoins with tokenized-stock quote assets. The pons launchpad mints thousands of tokens a day; nearly all of them die within hours, because every one of them is competing for the same scarce resource: attention.

$SHHH starts from the observation that in an environment where attention is the most expensive, fastest-depleting resource, the one idea nobody else is running is a token that refuses to want it.

---

## 2. Thesis

A memecoin is a coordination game. The standard version of that game has one stable strategy: shill before everyone else sells. The result is a race for reach that ends the moment reach runs out.

$SHHH inverts the payoff. A holder benefits when:

- the count of active addresses **falls**,
- the token does **not** show up in new wallets,
- they personally say **nothing** about it.

This produces a game where the rational move, for any individual holder, is silence, regardless of what the project itself publishes. The project maintains one official channel (see §8); it changes nothing about what an individual holder is paid to do, since the reward is computed from on-chain activity, not from what anyone reads or posts. This is not a claim that the equilibrium holds forever. It is a claim that it is worth a 90-day test, with a hard stop built into the code rather than promised in a chat room.

---

## 3. Architecture

### 3.1 Base layer: the $SHHH token

| Parameter | Value |
|---|---|
| Network | Robinhood Chain |
| Standard | ERC-20, fixed supply |
| Supply | 1,000,000,000 $SHHH (fixed; no mint function exists) |
| Issuance | pons V2 launchpad, bonding curve |
| Creator tax | **5%.** A real, disclosed extra tax on every trade, on top of the ordinary base fee every pons launch already pays. Stated here openly, not buried: without it, the amount actually reaching Fountain was too small to fund a meaningful reward pool or anything for the project. |
| Liquidity | pons → graduation → Uniswap V4, LP locked permanently by pons itself |
| Quote asset | ETH |
| Socials at launch | Only the website and the one announcement-only Telegram channel, both listed in the launch metadata itself so anyone browsing pons sees them directly. No Twitter, Discord, or Farcaster. Ever. |
| Description at launch | "A token that pays you for staying quiet. Rules are public. We won't be advertising this." |

The base token has no custom logic whatsoever: no transfer tax, no blacklist, no owner function of any kind. Its safety is exactly the safety of any other graduated pons token. Nothing about $SHHH's game changes that.

### 3.2 The trick that makes the engine possible

pons V2 lets a launch's `creatorFeeRecipient` be a contract instead of a wallet. The same mechanism CROWN, a sibling project on the same launchpad, uses for its Harberger throne. $SHHH uses a quieter variant: **Fountain**, the contract that deploys $SHHH and receives 100% of its creator fees, turns them into more $SHHH and splits the result 15% / 85%, every single time, before and after sunset alike: 15% to the project, fixed in the contract with no setter; the other 85% to the SilencePool as reward reserve, or, once the SilencePool's sunset has passed, burned outright.

```
trader swaps $SHHH
        │
        ▼
pons collects its fee: the ordinary base fee every launch pays, plus a
disclosed 5% creator tax on top, both credited to Fountain
        │
        ▼
pons FeeEscrow[Fountain]
        │
   pump(). Anyone may call it, any time
        │
        ▼
   buys $SHHH, splits it 15% / 85%
        │
        ├─ 15% ──────────────────────▶ the project, every pump, always
        │
        └─ 85% ── before sunset ────▶ sent to the SilencePool (becomes reward reserve)
             └─── after sunset  ────▶ burned, forever
```

The 15% is a plain ERC20 transfer, visible in the `Pumped` event on every single call, not a pull balance quietly accumulating out of sight. `pump()` itself stays permissionless, and it always does the correct thing for whichever side of sunset the chain is currently on. Nobody has to flip a switch, and there is no switch to flip.

### 3.3 Silence layer: the SilencePool (wSHHH)

A separate, verified contract, deployed once $SHHH exists. Nobody has to use it; $SHHH trades and exists with or without it.

**Stake.** Deposit $SHHH, receive wSHHH 1:1. Unstake, at any time, forever, and get $SHHH back 1:1. This never requires silence and is never blocked, during the game or after it ends. wSHHH itself has no market of its own. No pool, no listing, nowhere to sell it directly. Unstaking back to $SHHH, which does trade openly, is the only way to convert it into something liquid.

**Epochs.** Time is divided into 24-hour epochs, 90 of them in total, starting the moment the SilencePool is deployed.

**The rule, precisely.** An address is *noisy* for an epoch the instant it stakes, unstakes, transfers wSHHH, or claims a reward, any of those, even once, for even one wei. Staking counts: you cannot be silent in the very epoch you join. At the close of each epoch, whatever is sitting in the reward reserve is divided by however many epochs remain (including the one closing), and that share is split **pro rata to stake** among every address that was **not** noisy during that epoch. If everyone was noisy, including the case of a single staker who is also the only address to have ever touched the pool, nothing is paid out; the reserve is untouched and simply gets divided among more remaining epochs next time. There is no division by zero, and there is no fixed reward per address regardless of stake size.

**Claiming is itself noise.** Calling the claim function pays out everything earned for closed silent epochs and, in the same transaction, marks you noisy for whichever epoch happens to be open right now. There is no way to collect a reward without forfeiting the epoch in which you collected it.

**Transfers are free, always.** Moving wSHHH between any two addresses costs nothing and carries no special-cased logic beyond the same noisy-marking every touch gets. An earlier design taxed transfers to an address that had never held wSHHH before, to discourage handing off a staked position and fund the reserve a little further. It's gone: `unstake()` has to stay unconditional and free, the one promise this whole design leans on, which means anyone could always route around any transfer tax for free (unstake, send plain $SHHH, which carries no logic of its own, restake). Both paths mark the exact same two addresses noisy for the exact same epoch, so the tax bought nothing but a false sense of an extra reserve source. Removed rather than left in place looking like it did something (unrelated to the 5% creator tax in §3.1, which is charged on $SHHH trades, not wSHHH transfers). See §9.

**The silence burn.** At the close of any epoch after the first, if the count of distinct addresses that were noisy this epoch is **lower** than the count from the epoch before, 2% of whatever remains in the reserve is burned outright. On top of, and independent from, the reward split. Activity falling further shrinks supply faster; activity holding steady or rising burns nothing extra.

**What was deliberately left out:**

- **No social-media oracle.** There is no way to verify silence on X, and no attempt to build one. That would require a trusted third party, which defeats the entire point.
- **No admin function, anywhere, ever.** The contract has no owner to renounce, because it was never written with one.
- **No mechanism that needs new deposits to pay old ones.** The reserve is whatever is actually sitting in the contract at any moment, funded by Fountain's `pump()` and by anyone's voluntary `donate()`. Rewards divide a known, finite balance; nobody's payout depends on a future depositor showing up.

### 3.4 Where the reserve comes from

| Source | Share |
|---|---|
| Fountain's `pump()`: the base token's ordinary creator fees plus the 5% creator tax, converted to $SHHH, 85% of the result | the primary, ongoing source, for as long as $SHHH trades |
| Voluntary top-ups via `donate()` | variable |

The other 15% of every `pump()` goes to the project, fixed in the contract as `CREATOR_BPS`, with no setter, paid on every single pump, before and after sunset alike. This is stated here plainly, not buried in the contract: the deployer holds nothing beyond whatever it might buy on the open curve like anyone else, *and* it draws a constant 15% of the fee stream $SHHH generates, the same discipline CROWN applies to its own creator share, a different number.

---

## 4. Sunset

The silence layer has a hard expiry: **90 days from the SilencePool's own deployment**, fixed as an immutable at construction and never extendable by any call, from any address.

After sunset:

- no further epoch ever closes, and no further reward-per-token is ever computed;
- `stake()` stops accepting new deposits. New entries would only ever dilute the final sweep below for people who actually played, without contributing anything themselves, so the door closes rather than staying open for no benefit;
- `unstake()` keeps working exactly as it always did: 1:1, unconditionally, forever, for anyone already staked;
- a one-time, permissionless sweep distributes whatever is left in the reserve pro rata to whoever is staked at that moment, with no silence requirement. The game is over, and dust does not get to sit uncollectable forever;
- Fountain's `pump()` switches, automatically and irreversibly, from *feed the pool* to *burn it*.

The base $SHHH token keeps trading as an ordinary memecoin, one that, from that day forward, has every creator fee it will ever earn converted into a permanent burn instead of a reward.

**Why a hard stop.** An experiment in inverted attention only makes sense as a game with an ending. Without one, any mechanism that rewards early, patient participants eventually becomes exactly the kind of promise this project is trying not to make.

---

## 5. What $SHHH is not

**Not a pyramid.** Every payout comes from a known, finite balance sitting in the contract, not from the deposits of whoever shows up next. Nobody needs a new entrant in order to exit.

**Not an investment.** There is no cash flow beyond a fixed 90-day reserve, no product, and no team promising a roadmap. It is a game about attention with plainly stated rules.

**Not a Robinhood or pons product.** It uses their infrastructure on the same terms as any other token launched there.

---

## 6. Risks

- **Game risk.** The mechanism might simply fail to produce a silence equilibrium. People may shill regardless of the tax, and the token may die on the pons curve like most others do.
- **Contract risk.** The SilencePool and Fountain are original code. They are tested (see the repository) and will be verified on the block explorer and published before deployment; a full independent audit is a stated goal, budget permitting, and is a precondition the deploying team is treating as non-negotiable before any real funds are staked at meaningful scale.
- **Liquidity risk.** Low liquidity at launch means high slippage and volatility, same as any fresh curve launch.
- **Regulatory risk.** Memecoins on Robinhood Chain are issuer-less tokens without investor protection; trading them may be restricted in some jurisdictions.
- **Infrastructure risk.** Robinhood Chain's gas waiver for in-wallet transactions is scheduled to end September 29, 2026, inside this project's own 90-day window. That is not incidental: from that date, ordinary trading and shilling carry a real cost that silence does not, which sharpens rather than undermines the thesis. It also means overall chain activity, and this token's visibility, may fall for reasons that have nothing to do with the game itself.

You can lose the entirety of what you put in. Do not buy more than you are willing to burn.

---

## 7. Timeline

| Phase | Action |
|---|---|
| T0 | Publish this document and the Fountain/SilencePool source together |
| T0 + 1–3 days | Deploy Fountain, then SilencePool (bound to it), then launch $SHHH on pons in the same sequence. `launch()` refuses to run until a SilencePool is bound, so staking exists from the moment the token does, not after graduation. Website and Telegram listed at launch, no Twitter/Discord/Farcaster. Description "A token that pays you for staying quiet. Rules are public. We won't be advertising this." Contract sources verified on the explorer. |
| At/after graduation | Deploy `PonsV4Swapper` and bind it to Fountain, the one piece that genuinely can wait, since `pump()` only needs it once the bonding curve has graduated into the Uniswap V4 pool |
| Deploy + 90 days | Sunset: the silence layer's reward window closes for good |

---

## 8. Communication policy

$SHHH maintains one official channel: a Telegram, linked from the project's site. It exists for two things only: publishing the canonical contract addresses once they are deployed, and posting updates when something on-chain actually happens (launch, graduation, sunset, an incident if one ever occurs). It is not a discussion venue the project depends on, and it is not where trust is supposed to come from.

The channel has no power over anything. No admin key controls Fountain or SilencePool from it or from anywhere else. That was true before the channel existed and remains true now. This document and the verified, published contract addresses are still the actual source of truth; the channel is where you get pointed at them, not where you are asked to take something on faith.

Anyone posting elsewhere claiming to speak for $SHHH, a different channel, a copycat group, a DM, a comment thread, does not speak for $SHHH. Only the channel linked from the site does, and even it can tell you nothing the contract itself doesn't already show.

---

## 9. Changes from v0.1

v0.1 (the original concept note) described the right shape of a game but its reward mechanics did not hold up under scrutiny. v0.2 fixes three specific problems, by redesigning the mechanism rather than patching the arithmetic:

1. **The reward formula could pay out more than the pool held, and divided by zero at the exact moment the game succeeds.** v0.1 proposed `reward per staker = Pool_epoch / N` where N is the count of active addresses. This both ignores stake size (everyone gets the same reward regardless of position) and breaks arithmetically the moment silence actually happens (N approaching zero being the entire point of the game). v0.2 replaces this with pro-rata-to-stake distribution among the **silent**, computed lazily per address from a per-epoch reward-per-token index, bounded to at most 91 epochs of iteration ever, provably unable to distribute more than the funded reserve, and well-defined precisely in the all-silent and no-stakers cases the original formula could not handle.
2. **The reward engine had no ongoing source of funding.** v0.1 seeded its pool with a one-time 1% dev buy and hoped a small, easily-avoided transfer tax would sustain it. v0.2 gives the pool a real, recurring engine: Fountain routes the base token's actual, ongoing creator-fee income, the same fees every pons launch already earns, into the pool for as long as the token trades, switching automatically to a permanent burn once the game ends.
3. **The game's proxy for silence (on-chain inactivity) never matched its stated goal (silence about the token).** This is stated plainly rather than solved: there is no way to verify off-chain silence trustlessly, so the game measures the only thing it can: activity on the SilencePool contract itself. A holder who trades loudly elsewhere while leaving their stake untouched is playing exactly as designed, not exploiting a flaw.

v0.3 adds one honest disclosure, no mechanism change beyond it:

4. **`pump()` now pays the project 10% of every conversion, always.** Earlier drafts of this document said the entire creator-fee stream flowed through Fountain into the pool or the burn, with nothing carved out anywhere. That was true of the code at the time, and is no longer true: `CREATOR_BPS`, fixed at 10% with no setter, now pays the project on every single `pump()`, before and after sunset alike, visible in the `Pumped` event each time. The remaining 90% is unaffected: same routing to the pool pre-sunset, same permanent burn after.

v0.4 removes one mechanism outright, rather than leaving it in place looking like it did something:

5. **The gossip tax (5% on wSHHH transfers to a fresh address) is gone.** It was never actually collectible from a rational actor: `unstake()` has to stay unconditional and free, the one promise the whole design leans on, which means anyone could always route around any transfer tax for free (unstake, send plain $SHHH, which carries no logic of its own, restake). Both paths mark the exact same two addresses noisy for the exact same epoch, so the tax could never fund anything in practice; it only ever risked collecting from someone who didn't know the free path existed. Removed rather than fixed, because there is no version of a transfer tax that survives a free, unconditional unstake sitting right next to it. The reserve's other two sources (`pump()`, `donate()`) are unaffected: `pump()` was already documented as the primary source, this only removes a secondary one that would never have materialized.

v0.5 adds one thing, after earlier drafts said this project would run with none:

6. **A website and a Telegram channel are listed in the launch metadata itself.** Earlier drafts of this document said socials at launch were "none, deliberately." That held while there was nothing built yet to point to. There is now: a site with the full rules in plain language and an FAQ, and one Telegram channel that only posts canonical addresses and on-chain events, with no discussion and no admin power over either contract. Both go into pons's own `website` and `telegram` fields at launch, visible to anyone browsing the listing, not hidden behind a later announcement. Twitter, Discord, and Farcaster stay empty. Those are the channels built for shilling and engagement farming, and this project still isn't running any of them.

v0.6 raises both numbers involved in funding the game, because the old ones turned out too small to matter:

7. **Creator tax goes from 0% to a disclosed 5%, and `CREATOR_BPS` goes from 10% to 15%.** Verified directly against the real pons fee split on a mainnet fork: with 0% creator tax, only 0.7% of a trade's value ever reached Fountain (the creator's share of the ordinary base fee pons already charges every launch), which put the project's own cut at 0.07% of trade value and the pool's at 0.63%, genuinely too little to fund either side meaningfully. Adding a 5% creator tax (the same mechanism CROWN uses, well inside pons's own ceiling) brings the combined stream Fountain receives to 5.7% of trade value; splitting that 15% / 85% puts the project's cut at 0.855% and the pool's at 4.845%, roughly 12x and 8x their previous size. This is a real, felt cost on every trade now, not the "no extra tax" position stated in earlier drafts, traded deliberately for a reward reserve and a project revenue that can actually fund something.

---

*This document describes an on-chain game and does not constitute an offer, a recommendation, or investment, legal, or tax advice.*