Risks

Contract risk

The contract is tested, including fuzzing of settlement, but it has not been audited. Deposit what you are prepared to lose.

Price reference risk

Blackpool's price is the pool's price. A thin pool can drift from the listing venue, and a determined actor can move it. The price guard voids a batch whose settlement price has jumped away from the batch average, but it cannot tell a slow, sustained move from a real one.

Reveal window

Revealed orders are public for about a minute before settlement. Someone who reads a large imbalance can trade on the pool during that minute. The guard limits how far the settlement price can be pushed; it does not stop anyone from acting on the information elsewhere.

Issuer controls on stock tokens

Robinhood's stock tokens share one upgradeable implementation. The issuer can pause every token at once, block individual addresses, and change the token logic. A paused token cannot be deposited or withdrawn; a blocked address cannot receive it. Blackpool has no way around this, and would not want one.

Corporate actions

Stock tokens carry a UI multiplier for splits and similar actions. Blackpool works in raw token units, like the pool it reads, so a change in multiplier does not affect settlement. It does change what a raw unit means to you; the app shows both.

Liveness

Settlement and price sampling rely on someone calling settle and poke. A keeper will do it for every market. If it stops and nobody else steps in, batches are voided after 26 blocks and every order is returned: funds are never stuck, trades simply do not happen.