FINANCIER mining economics and auction risks — reward period 0

Research date: 21 October 2026. Chain snapshot: Robinhood Chain 4663, block 93,984,404, hash 0xce227ff816ba74a333253130c0f05e1bfeb7ed069267c15bfea1d296da8902eb, timestamp 03:56:22 UTC. Later events are outside this snapshot.

Answer

FINANCIER distributes an already funded, finite FINCR reserve through auction tenure and agent work. Its published economics strongly favor early tenure: 60% of the reserve is scheduled in the first 42 days. Buying the financier position provides neither a guaranteed holding time nor guaranteed recovery of the bid. Successor payments can materially improve returns, but depend on someone else taking over. Agent rewards have a different risk: useful accepted work still needs a complete, timely settlement before any claim exists.

Period 0 is live. The scheduled first-day allocation is approximately 7,836,734.694 FINCR to financiers collectively and 1,959,183.673 FINCR to qualifying agents collectively. Its observed window is 20 October 18:15:57 UTC through 21 October 18:15:57 UTC; the observed grace deadline is 22 October 18:15:57 UTC. At the snapshot, agent payments were zero and the period was not finalized. These are budgets and state observations, not an entitlement for this report. The public job/admission record connects this assignment to the funded miner. Period-0 job, Intake admission, saved RPC evidence.

The largest evidence limitation is source provenance. FINCR's deployed runtime matches the published token hash, but the miner and four connected application runtimes do not match the rebuilt public candidate. Therefore this report does not present candidate-specific defects or an earlier audit as verified vulnerabilities of the live deployment.

Evidence and confidence

Labels used below: F = directly observed public fact; C = behavior traced in the pinned candidate; I = calculation or inference with stated assumptions; U = unresolved. An observed getter does not prove all of a contract's behavior.

The source pin is imd-financier/financier-open@0c866371fb280cf91df04ad2c5a85a412d998246, returned by GitHub's commit API during research. Its deployment manifest still says UNLAUNCHED_UNVERIFIED with null addresses. In contrast, the live Intake links the exact period-0 objective to payer/miner 0x06cc29c3512aceb81777acdef6e56a8c97271b08. This is evidence that the old manifest is stale, not that mining has never launched. Pinned manifest, public admission.

F — runtime comparison. The published compiler/settings reproduced the candidate build pins. Comparing deployed code after excluding the compiler-listed immutable slots gave:

Contract	Observed address	Candidate / live runtime bytes	Match
FINCR	0x2f56d8fef9f0891c952b15c3b2a94fa4326c28b5	1,897 / 1,897	Yes
Miner	0x06cc29c3512aceb81777acdef6e56a8c97271b08	18,784 / 19,521	No
Controller	0x22016f4bc1c24303d826e5f7b2720c524eec6565	8,196 / 10,130	No
Agent rounds	0xad3c013d2f6939f1564580548b39b6a862d197c5	11,763 / 12,641	No
Publisher gateway	0xde6e5251f26a2110404be1d906c9328e966e2163	3,667 / 4,104	No
Market	0x0ab32d0a45c4afb21e96ed7595c28900697106f8	10,909 / 11,038	No

The token runtime Keccak is 0x946270e19519507b25f0e64ba542b050d325476e1a397aadf1f64ea23d16064c; the miner's is 0xe9546362fcca4427d78c4fb4a550d292f97c77aa7e63dea56f1ccf608811a5f4. A mismatch establishes failure to reproduce equivalence under these settings. It does not establish maliciousness, its cause, or whether a reported defect was repaired. Build pins, comparison with saved bytecode.

1. What is being distributed?

C — allocation design. The initial 1 billion FINCR is divided nominally into 500 million pool tokens, 100 million launch-swarm tokens and 400 million founder remainder intended for mining. Mining divides that last reserve into at most 320 million financier FINCR and 80 million agent FINCR. Mining transfers existing tokens; it does not add 400 million to initial supply. The launch-swarm 10% and mining-agent 20% have different denominators and eligibility rules. The official token launch record reports the 50/10/40 split. Tokenomics, official token record.

F — custody at the snapshot. The miner reported armed=true, miningReserve=400,000,000 FINCR, and held that amount plus 338 token base units. totalFincrPaid and totalAgentPaid were both zero. Its current financier was 0xfb82a214fd2fe3f57f7ecd145cbc32ca38d03e19. Custody and zero payments do not mean zero accrued liabilities. Saved block-specific reads, miner explorer.

C/I — emission schedule. For reserve R, the first 42 days distribute 0.6R across three 14-day eras weighted 4:2:1; the remaining 0.4R is linear over 323 days. The implementation floors cumulative quantities in token base units and splits cumulative gross into 80% financier and the remainder agent. For R = 400 million:

Elapsed days	Gross FINCR/day, approximately	Financier/day	Agent/day
0–14	9,795,918.367	7,836,734.694	1,959,183.673
14–28	4,897,959.184	3,918,367.347	979,591.837
28–42	2,448,979.592	1,959,183.673	489,795.918
42–365	495,356.037	396,284.830	99,071.207

These are full-interval rates; boundary rounding uses cumulative differences. F: live cumulativeAt reads at 0 seconds, 1 second, 1 hour, 1 day, days 14/28/42/365/366 exactly matched the candidate formula. That supports these scheduled amounts at the sampled points, without proving every live distribution path. EmissionSchedule, lines 14–30, sampled reads and offline results.

I: 240 million tokens, or 24% of initial supply, are scheduled from mining by day 42. This is potential circulating supply and selling pressure, even though initial total supply does not increase. The amount actually claimed and sold remains unknown.

2. Auction cash flows and actual activity

C — price rule. Arming starts the auction clock; the first successful bid starts emissions. Each takeover resets a fixed 10 IMD opening quote, declining linearly to 0.5 IMD after one hour. Ignoring atomic rounding, P(t)=10−9.5×min(t/3600,1) IMD: 10 at reset, 5.25 after 30 minutes, 0.5 after 60 minutes. The floor persists. There is no minimum tenure. The bidder specifies expected epoch, maximum price and deadline; maximum price is a cap, not a voluntary higher bid. FinancierMining, lines 112–162.

C — IMD waterfall, distinct from FINCR rewards. Later bid payments allocate 80% to the outgoing financier, 5% work, 7.5% buyback, 3.75% supplemental liquidity and 3.75% Operations. Genesis has no outgoing financier: its 80% goes to work, making 85% work. Flooring can send a few extra atomic units to outgoing/work. These are spent bid payments, with contingent future successor proceeds; they are not redeemable deposits. Allocation code, lines 168–188, published economics.

F — two observed bids, both successful receipts:

UTC, 20 October	Incoming financier	Paid IMD	Evidence
18:15:57	Founder 0xbcf19c…424f	0.5	Genesis transaction
18:57:44	0xfb82a2…3e19	3.384305555555555556	Takeover transaction

The second price agrees with a 10-to-0.5 decay over the 2,507-second first tenure. Recorded outgoing payment to the founder was 2.707444444444444447 IMD; it exceeded the founder's 0.5 IMD entry bid. That one outcome does not forecast later entrants' returns. totalBidVolume was 3.884305555555555556 IMD, epoch 2, and the live quote was back at 0.5 IMD by the snapshot. Saved logs and receipts.

F/I — work funding constraint. One period-0 job consumed 0.5 IMD, leaving workBudget=0.094215277777777777 IMD; voluntary work funding was zero. This reconciles with 0.85×0.5 + 0.05×3.384305555555555556 − 0.5, allowing atomic rounding. Genesis at the floor contributed only 0.425 IMD, insufficient on its own to buy the 0.5 IMD job. Another job at that fee would require at least 0.405784722222222223 IMD additional work funding. Under the published 5% subsequent-bid allocation, that requires about 8.116 IMD additional bid volume, absent donations. The current job's payment is evidenced, not a proposed payment. Work dispatch code, Intake record.

3. When could a financier make money?

I — conditional model, not a price forecast. For a single tenure, let B be the entry bid in IMD, Q the next takeover price, F earned FINCR, V net sale proceeds per FINCR in IMD, and G all other costs expressed in IMD. Approximate profit is:

F×V + 0.8×Q − B − G.

The successor term is zero if there is no next takeover. V must account for fees, depth and price impact; a displayed spot quote is not executable proceeds for the whole reward. Gas is paid in the chain's native asset and requires an exchange-rate assumption to include in G. Candidate financier claims accrue by tenure and do not require a successor or successful work. Accrual and claims, lines 219–245.

At the first-era rate, one uninterrupted hour earns approximately 326,530.612 FINCR. Ignoring all other costs and with no successor payment, a 0.5 IMD entry needs net V of 0.00000153125 IMD/FINCR to break even over that hour; a 10 IMD entry needs 0.000030625. If a subsequent 0.5 IMD takeover actually pays 0.4 IMD to the holder, the 0.5 entry's net bid cost falls to 0.1 IMD, reducing that hourly threshold to 0.00000030625. Shorter tenure, falling token value and slippage worsen these examples. Longer tenure can improve reward quantity, but is not guaranteed.

I — incumbent advantage in the candidate. A self-takeover at price P pays the incumbent approximately 0.8P back, so its net cost is roughly 0.2P while resetting the quote to 10. At the floor that is 0.1 IMD net per reset, excluding gas and any deferred payout. The candidate normally attempts outgoing payment automatically, retaining a credit if it fails. Related wallets can produce the same coalition economics. This is a concrete incentive in the candidate; the observed live outgoing payment is consistent with the waterfall, but live self-bidding behavior was not tested. Automatic outgoing payout.

Hourly defensive resets would cost about 2.4 IMD/day plus transaction costs under those assumptions. They are unnecessary when no challenger exists and do not guarantee a monopoly. A bot that can secure transaction ordering could reset before a challenger, causing its old-epoch bid to revert. The challenger loses transaction fees, not a successfully transferred bid. Actual ordering access and competition on Robinhood were not established. Epoch check.

4. Period-0 agent economics and settlement

F — current linkage. Request 0xb3eff9861214fc8a7f595f3e9202519c6176546aaf7012e14eeab6653f284172 paid for this research objective. Its public admission names job c306c194-fc02-4e32-b2f1-afaf010adcb9. The miner's work record attributes it to period 0. At the chain snapshot, requestRoundPlusOne(requestId)=0, completion was unrecorded, and round 0 was unfinalized. The gateway reported unpaused with operator 0x174818c4fecb65472522ff8c7677f5a567cb3020. These observations do not prove any later failure; admission, binding, completion and settlement are separate transitions. Intake admission, snapshot reads.

C/I — equal shares, conditional on eligibility and finalization. With the first-day agent budget above, a valid complete set of N distinct accepted agents would give each floor(budget/N) token base units. Illustrative N=1, 8 and 32 give 1,959,183.673, 244,897.959 and 61,224.490 FINCR per agent, respectively. The candidate caps the set at 32, deduplicates canonical identities/seats, and aggregates multiple qualifying seats' shares into their original owner wallet. A wallet is therefore not necessarily one share. Unsupported contract owners remain in the denominator while their shares are quarantined. Agent allocation, seat-owner specialization.

C — acceptance is more than completion. The candidate requires prospective scope, paid request/job binding, submission after binding, in-window completion timing, evidence of accepted FINANCIER work, deduplication and an ownership snapshot. Only the designated publisher can assert the complete accepted set. The system trusts an off-chain relay for Ethereum ownership and completeness; there is no trustless Ethereum-to-Robinhood proof in this candidate. A dishonest relay could omit or falsely include agents within the bounded agent stream. Distinct agent IDs do not by themselves prove distinct beneficial human ownership. Binding and validation, controller settlement.

U: the final accepted agent count, ownership evidence, timely binding and actual period-0 claims are not yet established by this snapshot. Completing this report alone does not prove reward eligibility. The candidate's finalized claims do not expire, whereas an unfinalized round can expire after grace and quarantine its entire budget. Claim and expiry code.

5. Risks ranked by practical consequence

These are research priorities, not audit severity ratings for the unmatched live code.

Risk	Evidence / status	Economic consequence
Live source cannot be reproduced	F: five application runtimes differ; token matches. U: cause and authoritative live source.	Cannot establish that candidate restrictions, fixes or payout guarantees govern the deployed reserve. Highest priority evidence gap.
Agent settlement can fail despite good work	C: purchases and bindings both close at period end; finalization requires every purchase to be completed and bound. A purchase too late for admission/binding can permanently prevent candidate settlement.	Whole agent-period budget can expire into quarantine; financier accrual remains independent. This is a source-traced candidate risk, not a reproduced live exploit.
Operational deadlines and publisher trust	C: later scopes must be prepared before their windows; snapshot/settlement have bounded grace. F: scope 1 was not committed at the snapshot, before its start.	Operator/keeper failure or incomplete evidence can prevent agent payout. An uncommitted future scope alone is not proof of a missed deadline.
Incumbent bidding advantage and ordering races	C/I: 80% outgoing recovery, same-address bids permitted, epoch changes.	Defending tenure may be cheaper for incumbents; challengers risk failed-transaction costs and brief tenure. No observed attack is claimed.
Token sale liquidity and early emissions	F: front-loaded curve samples; I: substantial early circulating supply possible.	Token rewards can be large while realizable IMD proceeds are small; both FINCR value and IMD's external value can vary. No sustainable yield follows from token quantities alone.
Buyback/LP execution and spot manipulation	C: orders use current pool spot, bounded batches and transaction-local movement bounds. F: some market spending occurred.	Pre-transaction manipulation can anchor an unfavorable quote; slippage protection is not an independent fair-price oracle. Failed execution leaves budgets unspent.
Reserve immutability / no economic rescue	C: documented candidate has no reserve sweep, upgrade or redirection; unused/dust shares are quarantined.	Custody conservatism also makes operational mistakes costly. U: equivalent constraints of the unmatched live code.
Bidding after emissions end	C: bid lacks an emission-end rejection although cumulative emissions stop at day 365.	A candidate bidder can pay after the reward stream ends and earn zero new FINCR. U: live behavior after the horizon.

Sources for the deadline risk are the purchase cutoff, binding cutoff and all-purchases finalization check. The public audit independently reported this candidate issue, but its proof suite was not rerun here and it does not establish the live defect. Public audit record.

C — an additional policy distinction: the documented standard off-chain resolver refuses an entire period containing any failed commissioned job. The controller itself checks successful completion for accepted contributions and recorded closure for all jobs; the broader refusal is a resolver policy, not the same Solidity rule. This is separate from an unbound late purchase. Trust and limitations.

F — budget versus execution. The snapshot showed 0.1 IMD buyback spending, 39,265.946965 FINCR burned, and approximately 0.099377 IMD supplemental-liquidity spending. Unspent buyback and liquidity budgets were approximately 0.191323 and 0.046285 IMD. Thus some execution is evidenced, but allocation percentages do not equal immediate executed support. The genesis receipt explicitly logged market deferral for gas thresholds. Saved receipts. The candidate's market maximum batch is 0.1 IMD, and the market uses a 1.25% fee pool with spot-based limits; its positive-only supplemental positions expose no removal or fee-collection route. Locked supplemental LP does not guarantee a liquid exit at a particular price. Market bounds and execution, vault market attempts.

6. Unanswered questions and decision implications

1. What exact public source and compiler settings reproduce the five deployed application runtimes? A release tied to creation receipts, constructor values, bindings and deployed bytecode is needed to transfer candidate findings or fixes to live contracts. Different byte counts cannot be explained by changing immutable values alone.
2. Was the period-0 request bound before the relevant submissions, and can the live round finalize? Preserve the actual binding event, work acceptance record, complete membership/owner snapshot, settlement commitment and claim receipt. They were unavailable at this snapshot; the period had not ended.
3. Which settlement policies does the live deployment enforce? In particular: late/unadmitted requests, failed-job mixtures, maximum accepted agents, unsupported owners and missed future scope preparation. Candidate policy is documented; live equivalence remains unproven.
4. What are executable net proceeds for realistic reward sizes? No sell-depth study, manipulation-cost simulation, future challenger arrival model or gas-cost forecast was completed. Two bids and a small buyback do not establish sustainable demand or profitable mining.

For period 0, the useful operational evidence is timely request binding and eventual complete settlement, while the useful financial evidence is actual net realizable FINCR proceeds and takeover cash flows. A fixed reserve limits token liabilities in the candidate; it does not establish market value, broad access to tenure, or an agent payout.

Method and checks

Public GitHub source, official IMD job/token/admission records and read-only Robinhood RPC evidence were inspected. The public RPC source is Robinhood mainnet RPC, documented by IMD. Block reads were pinned to the hash above and logs collected from the token launch block through the snapshot. One provider supplied chain observations; no independent consensus or source-authenticity attestation was obtained.

Local checks: candidate compilation succeeded with Solidity 0.8.30, optimizer 200, Cancun, no metadata bytecode hash; the repository's build verifier passed 10 build pins, 19 ABIs and 471 manifest payloads. The eight candidate auction tests passed, including 512 fuzz cases in the price test. This was not a full audit or full test-suite run. The compiled template comparison found the mismatches reported above. The offline standard-library check verified 17 saved source hashes, nine live cumulative samples, period timing, job/request linkage, bid totals and event/receipt consistency. Check script, recorded results, local build/test record.

Both documented project websites returned HTTP 403 during direct retrieval; browser retrieval also failed. The miner explorer offered source verification rather than verified application source, and Sourcify metadata lookups returned 404. These are access/search outcomes, not proof that no other public source exists. No private material, payments, signatures, deployments, third-party messages or live state changes were used. Missing future settlement evidence is reported as unknown, not as failed research or a promise of payment.