Litepaper

Prop AMMs took over Robinhood Chain spot trading by replacing passive curves with quotes a market maker updates from live data. That works for crypto pairs that trade everywhere, all the time.

Tokenized stocks are a harder case. The token trades around the clock, but the share behind it trades six and a half hours a day, five days a week, on a venue the chain cannot see. opexcode is a prop AMM built around that mismatch.

It reprices by being robbed. A constant-product pool learns a new price only when an arbitrageur trades against the old one. Every correction is a loss to the pool, and between corrections takers get a stale price.

It spreads capital where nobody trades. Equity prices move a percent or two a day. Liquidity parked far from the price earns nothing and protects no one.

It cannot see the closing bell. At 16:00 in New York the share stops trading. A curve quotes Saturday night exactly as it quotes Tuesday noon, then pays for it at Monday's open.

A quote is only as good as it is fresh. A constant-product pool does not know the price moved until someone trades against it. A prop AMM is told.

Below, the engine that runs this site is timed live. Then both designs are put on the same price path, with the assumptions yours to move.

The simulation is a model, not a measurement of any named venue, and it is deterministic: everyone sees the same path. The curve is x·y=k with the fee you set, arbitraged to the edge of its fee band one slot late. Concentrated liquidity is deeper near the price but reprices the same way. The curve's default 2M USDC is an illustrative depth. opexcode's live pools are far smaller: 5,000 USDC of initial funding on NVDAx and 1,000 on each of the other nine, with orders capped at 100 USDC on NVDAx and 20 on the others.

The opexcode side uses the live pool parameters and fee: a 5 bps base half-spread, 4 bps per 1,000 USDC of size, no session premium, and the 5 bps fee taken from the input. Order sizes above 100 USDC are larger than any live pool accepts and show how costs scale. At the default depth and volatility, a curve fee below about 9 bps makes the curve cheaper at live sizes, though its price still lags the reference. On-chain transaction costs are not modelled. The model also leaves out the live confidence cost and requotes every slot; live references refresh about every two seconds.

The system has eight parts, and each has one glyph. The same glyphs mark the same parts everywhere: on this site, in the whitepaper, and in the terminal, where they show how far a quote has come.

They do not run in sequence. Ticks, the clock and orders each keep their own time, and every fill feeds back into the price of the next quote.

Each OPmode market is a pool with its own inventory. The engine prices a quote from the market's reference, the underlying share's Pyth price, and the pool's inventory. A half-spread is the sum of four terms, and skew moves its center:

half = base + size + confidence + session
ask  = ref × (1 − skew + half)
bid  = ref × (1 − skew − half)

base is 5 bps (0.05%) on each of the ten live pools. size grows with the order, 4 bps (400 ppm) per 1,000 USDC. confidence is twice Pyth's confidence interval as a share of the price, so the spread widens when the feed is less certain. session is a premium for sessions outside regular hours; the engine supports it, and the live pools set it to zero. skew moves both prices together, by up to 15 bps (0.15%), toward a pool that holds half its value in each asset: down when the pool holds excess stock, up when it holds too little. The builder uses these live values with an illustrative confidence cost. Sizes above 100 USDC are larger than any live pool accepts and show how the size term grows.

The arithmetic is integer-only Rust. Asks round up, bids round down, and a round trip can never create value.

The engine prices an exact input from its reference and pool inventory. The quote fixes input, output and fee until the displayed expiry, up to 10 seconds. The trader reviews those amounts and signs the transaction with their wallet.

At the fill, the program checks that the reference's Pyth source is no more than 20 seconds old and that the net price sits within 100 bps of it. OPmode quotes only while the US session is open; on weekends, exchange holidays and in sessions it cannot verify, it gives no quote.

A quote can settle once. Input, output and fee transfer atomically, and a receipt records the exact amounts. The fee is 5 bps of the input, included in it: 80% stays in the pool for liquidity providers and 20% goes to the protocol, and a portion of protocol fees buys back $OPEX. Current market limits and transfer conditions still apply.

One terminal offers two routes on the ticket. Quick routes through Jupiter on all 41 markets and shows expected output, minimum received, a 0.50% slippage tolerance and fees before the wallet signs. OPmode is a firm quote from opexcode's own pool with exact input, output and fee, valid for up to 10 seconds. The pricing engine, signed quote format, inventory controls and atomic settlement run on mainnet. OPmode's reference is the underlying stock or ETF price from Pyth Pro. Each update is a Pyth-signed report that the program verifies on chain, multiplies by the token's multiplier and records with its source time; no operator key can set it. Active markets refresh about every two seconds, and a quote needs a source price no more than five seconds old. The price assumes 1 USDC equals 1 USD, and new quotes stop if USDC leaves $0.99–$1.01. Quick and the charts use a separate public token price with its own freshness and consistency checks; a market whose checks fail shows no price until they pass. Charts use recorded observations. Orders use verified raw token units, with the share multiplier preserved on each quote and receipt. A Pyth market-hours calendar supplies holidays, early closes and session transitions; OPmode quotes only when that calendar and the signed report both confirm an open US session. Missing coverage is shown explicitly. Trading uses real wallet balances. opexcode runs no hedge: after a swap the pool keeps the position, and no issuer redemption takes place.

OPmode is live on ten markets: NVDAx, SPYx, QQQx, GLDx, TSLAx, AAPLx, MSFTx, METAx, COINx and CRCLx. Each is a mainnet pool funded by opexcode that also accepts liquidity providers, with 14,000 USDC of initial funding in total: 5,000 on NVDAx and 1,000 on each of the others. NVDAx takes up to 100 USDC per order and 500 USDC per fixed 60-second window; the other nine take 20 and 100. Markets are added as each pool is funded, and the other 31 trade on Quick only. A published-state pool, whose quote parameters live on chain, is a possible later step and is not built. The whitepaper covers the account model, invariants and delivery gates.

A Robinhood Chain swap cannot be atomic with a broker hedge or an issuer redemption, and opexcode runs no hedge. The pool carries inventory, basis and timing risk, shared by its liquidity providers. Nothing rebalances it automatically; skew moves inventory back toward target, and orders that would push the pool's stock value outside 25–75% are refused.

A verified price for the share does not make the token trade at that price elsewhere. The USDC price is assumed, not measured: the depeg guard only stops new quotes, and USDC risk stays with the user.

Owning a token is not owning the share. Issuer terms, transfer restrictions and corporate actions differ by asset.

The settlement program is upgradeable, and its upgrade authority is the owner wallet. There is no multisig or timelock. The program has had an internal review, not an independent third-party audit. The owner can pause a market.