Risks
Read this before you sign anything. We never call these tools safe. Here is what can go wrong, as plainly as we can say it.
New. They have a Foundry test suite with fuzz runs, invariants and hostile-token mocks, and a written self-review plus a second read by a separate AI agent, but no outside firm has looked at them and they have only a short history on chain. Tests find what they look for and nothing more. Start with amounts you can afford to lose.
Yes. Tokens on this chain can block addresses or pause all transfers, and stock tokens do. If the recipient, owner or staker is blocked, or the token is paused, the withdrawal reverts and the tokens stay in the contract until the issuer changes that. An issuer can also burn from any address, including the contract's. If that happens, the credited balances of that token no longer add up to what is held, and the first out are paid in full while the last are short. A stream and a lock can be withdrawn in parts, so the last holders can still take what is left; a claim, a cancel or a reclaim cannot be split and fails if it is too large.
Nobody. No owner, admin, pause, upgrade or sweep function exists in any of the four contracts. That is what stops anyone from taking your tokens, and it also means nobody can help you. Tokens sent directly to a contract by a plain transfer are not credited to anything and stay there for good.
The terms are fixed at creation. If you set a stream as cancellable you can cancel it and get back what has not unlocked. A lock's date can only move later. A date or schedule end more than 100 years ahead is refused, which catches a timestamp in milliseconds. A sent bulk row cannot be taken back. Check every field, and test with a small amount.
It raises the deposit and keeps the same release per period, counted from the same start. On a stream that has already passed its old end, the periods since then count at once, so the added tokens can unlock immediately and can no longer be cancelled back. The form shows how much before you sign.
A token that takes a cut when it is deposited is refused. That check happens at deposit only. If a tax is switched on later, payouts arrive short, and a tax charged on top comes out of the balance held for everyone in that token, so the last to withdraw get less. We chose not to refuse such payouts, because refusing would trap every holder for as long as the tax lasts. A token whose balances change on their own (rebasing) can also pass at deposit and break the accounting of its own streams later. A malicious token can do anything to its own streams, but the contracts keep each token apart, so it cannot touch another token's balances.
Yes. Anyone can create a stream, lock or pool for any token, and a ticker is not an identity on this chain. Compare the token address, and check who the sender or funder is, before you trust a page that someone sends you.
No. A team's budget is shared among whoever is staked, so your share falls as others stake. The stake token's price can fall by more than any share is worth. We show no annual rate and no estimated return. Whoever is staked takes all that is released, so one early staker alone takes everything until others join; a pool's minimum stake limits how small that staker can be, and a pool can set none. Only what is released while the pool holds no stake at all returns to the funder. A reward token can also stop working, in which case your stake can still leave after its lock.
The contract cannot see the list, only its root. If a sender funds less than the list totals, a claim larger than what remains is refused whole. A sender can also put a row for itself in the list, worth up to the whole deposit, and claim it before anyone else, so reclaiming only after the end does not mean nothing can leave earlier. The claim page compares the list with what was funded and flags the sender's rows when it has the list; a personal link alone cannot show them. Recipients need their row to claim, and a claim page never asks for a fee.
The site is a convenience. It can go down, and a copycat site can ask you to sign something else. Check the address bar, read what your wallet shows before signing, and remember the contracts can be used directly from an explorer.