Money can be lost here. This page names each way it can happen, shows what it would look like on your screen, and is honest about what the vault can and cannot do about it.
Essential reading
01 · First
Read this part even if you skip the rest
Only deposit what you can afford to loseQuantumPools has been independently audited (Hashlock, Sept 2026 — all findings resolved), which lowers the odds of a contract failure but can't rule one out. It's still young software on a young blockchain, and crypto markets move hard: market losses are real and some can't be undone. So never deposit money you can't afford to lose.
Hashlock audit
Secure
Sept 2026 · 2 Medium, 3 Low, 1 QA, all resolved
Public deposits
Open
On the live venues: Robinhood Chain, Base, BNB Chain
Withdrawal lock‑up
None
A pause can't stop a withdrawal
Owner-change wait
48 h
Public before a change takes effect
02 · The big picture
Where each risk sits
Two questions sort every risk: how often could it happen, and how much would it hurt? Top-right matters most. Click a dot or a name below to jump to its card.
Risk map: our rough judgment to help you rank the risks. It is not a measurement, and your own ranking may differ.
Every card answers the same three things: what the risk is, what you'd actually notice, and what the vault does about it. When the honest answer is "nothing", the card says so in red.
13 of 13 risks shown
1
Smart-contract bugs
Technical
What it is
The vault is code, and code can hide mistakes nobody has found. An outside firm (Hashlock) audited it in September 2026 — 2 Medium, 3 Low and 1 QA finding, all resolved.
For you
In a bad case, funds get stuck or stolen, with no way to reverse it. An audit lowers that chance; it can't remove it.
Our side
The code can't be upgraded and withdrawals can't be paused. The deployed vault is the Hashlock-audited code with all findings resolved, and the deployed bytecode matches that fixed source. Checking the bytecode needs repository access; the address, owner and settings anyone can read on-chain. None of this rules out a bug.Audit status
2
Automation stops
Technical
What it is
Off-chain bots called keepers check positions about every 1 to 3 minutes and trigger snuggles.
For you
If they stop, nothing gets sold or moved. An out-of-range position just waits and earns nothing. Automatic snuggles only run if you switched them on, after the delay you chose (up to 7 days).
Our side
You can withdraw any time. If the position is out of range and the vault isn't paused, you can also snuggle it yourself (you pay that gas). Keepers can't withdraw or receive your funds. Two keeper wallets are authorized on-chain, but automatic failover between them isn't proven; don't rely on it.
3
Price data & front-running
Technical
What it is
The vault decides a position has left its range using a 30-minute average price, then places the new range at today's price. Like any on-chain transaction, yours can be seen and jumped ahead of.
For you
Snuggles lag fast moves. A trader who pushes the live price at the right moment can shift where a new range lands.
Our side
Average and live price must both agree a position has left before it moves. Withdrawals skip the 30-minute average and every price check: you get back both tokens at the pool's current ratio, with no swap.
4
Chain & bridge problems
Technical
What it is
Live vaults run on Robinhood Chain (chain ID 4663) and Base (chain ID 8453), both on the same Hashlock-audited code. There is no vault on Arbitrum. Bridged tokens depend on their bridge.
For you
If the chain halts, no transaction goes through until it's back. If a bridge fails, a bridged token can lose value.
Our side
This one is outside our reach. We don't run Robinhood Chain, Base or any bridge.
5
Owner controls
Technical
What it is
The vault can't be upgraded, but it isn't frozen. Its owner is a timelock contract that holds every change for 48 hours. Only a shared wallet that needs both of its two signers can propose, execute or cancel those changes. Through it the owner can change the default fee within fixed limits, set one wallet's own fee, change the treasury and the on-chain referrer, choose pools and keepers, set range and price-average settings, and pause new deposits, top-ups and snuggles. Fees are paid to a treasury that is a single-key wallet, not the shared one.
For you
Every such change sits in public for 48 hours first. If you dislike it, you can leave during that window.
Our side
Our fee is 15%, taken only from the trading fees your LPs earn, never from your deposit, and we commit to never raising it (see the chart below). Whatever the timelock technically allows, any change would still sit in public for 48 hours first, so you'd always see it coming. A pause never blocks withdrawals. The catch: removing a misbehaving keeper also takes 48 hours.
6
Outside services
Technical
What it is
We sit on top of software we don't control: the chain's Uniswap v3 contracts, RPC nodes that read the chain, your wallet, and the hosting behind the site and keepers.
For you
The site may not load, a wallet may show wrong numbers, or a DEX bug could hit every position on it.
Our side
Each vault is locked to one DEX contract that can't be swapped later. The rest depends on services we don't run.
7
Prices fall
Market
What it is
The tokens in your position can drop. Providing liquidity doesn't shield you from that.
For you
Your position's dollar value goes down, sometimes fast and far.
Our side
No vault setting helps here.
8
Impermanent loss
Market
What it is
As price moves, a range position ends up holding more of the token that fell. The gap versus just holding is impermanent loss.
For you
The Impermanent Loss number on your card grows. It becomes real if you withdraw at that price.
Our side
Managed, not removed. Snuggles never swap, so nothing is sold at the extreme. The gap stays open and can shrink if price comes back. Cover Value shows whether fees keep up.
9
Worse than holding
Market
What it is
Any range strategy can lose to doing nothing. A strong one-way trend is the hardest case.
For you
Even after fees, you may end with less than if the two tokens had stayed in your wallet.
Our side
This comes with any range strategy. The design helps most when price wanders back. Earnings Rate looks backward and doesn't predict anything.
10
Small, thin tokens
Market
What it is
The Pool Scanner lists many small tokens.
For you
These can crash to near zero in hours, be abandoned by their creators, or be too thin to sell at a fair price.
Our side
The vault only accepts pools the owner registered. A token in the scanner is not a recommendation.
11
Stablecoin loses its peg
Market
What it is
A token meant to hold $1 can slip below it, briefly or for good. Stablecoin pairs such as USDG/DELL depend on that peg.
For you
The "stable" side of your position is worth less than you think. An issuer can also block a wallet.
Our side
If an issuer blocks your wallet, you can withdraw to a different address.
12
Rules change
Other
What it is
Laws on crypto, stablecoins and tokenized stocks are still being written, and they differ by country.
For you
Access could be limited where you live, a token could be delisted, and taxes are yours to handle.
Our side
That's up to lawmakers, not code. Check what applies where you live.
13
Your wallet, your keys
Other
What it is
Only the wallet that opened a position can withdraw it. Positions can't be moved to another wallet.
For you
Lose your keys or sign a bad transaction, and no one can reset or undo it.
Our side
Viewing QuantumPools with a connected wallet shouldn't need you to sign anything. Treat any request to sign a message or transaction just to connect as a warning sign, and stop.
04 · The pause switch
What a pause can and can't stop
A pause is the owner's emergency brake. It halts new money and automation. It does not touch the exits.
Pause: read straight from which vault functions carry the pause check. Only your own wallet can use the green side.05 · Quiet keepers
If the automation goes quiet
What happens when the bots stop? Same price, same position, two outcomes. Switch the tabs.
Keepers running: made-up path, earning about 57% of the time shown. Simplified: in the vault, the clock starts once the 30-minute average price leaves the range.
Keepers down: same path, about 19% of the time earning. Nothing is lost to the outage itself; the cost is fees you didn't earn.
Snuggling it yourselfThe owner of a position can trigger a snuggle directly, skipping the delay, as long as the position is out of range and the vault isn't paused. You pay that gas. Automatic snuggles cost you no gas.
06 · Our 15% fee promise
Our fee stays at 15%
The performance fee is 15% today, and we commit to keeping it there — we will never raise it. On top of that promise, the vault is built so that any change to a rate has to wait 48 hours in public before it could take effect, so you would always see one coming. But the short version is simpler: 15%, and it stays.
15% means 15%: the performance fee read from the vault is 15%, and we commit to keep it there. The 48-hour public timelock is a safeguard if anything ever changed — but our promise is that it won't.
Two things are always true of the fee: it only applies to the trading fees your position earned, never to your principal, and you can withdraw at any time. Details are in Performance & Fees.
07 · The fine print, in plain words
This page informs. It doesn't advise.
These docs explain how QuantumPools works. They don't tell you what to do with your money, and none of it is financial advice.
Only risk money you could lose completely without it touching rent, bills or sleep.
Numbers are history or estimates. Earnings Rate, Impermanent Loss and Cover Value come from public data and can be wrong or stale. None is a promise.
Taxes and local rules are yours. We can't tell you what applies where you live.
Your acknowledgement
Using QuantumPools means you accept that:
It's experimental software — independently audited (Hashlock, Sept 2026, all findings resolved), though no audit removes every risk.
You can lose some or all of your deposit.
Nobody promised you a return.
Our promise: the performance fee stays at 15%. We commit to never raising it — and any change at all would have to wait 48 hours in public first, so you'd always see it coming.
Your choices, keys and taxes are yours.
You're allowed to use it where you live.
Quick answers
Can the QuantumPools team take my deposit?
No function lets the owner timelock, the Safe that controls it, or a keeper withdraw your position. Only your wallet can. There is also no general token-rescue function. A bug could still break those rules, which is exactly what risk 1 is about.
What if the website goes down?
Your position lives in the vault contract on-chain — on the chain where you opened it — not on our servers, so you can withdraw it directly at any time. Without our site, that just means sending the transaction another way, which takes more know-how.
QuantumPools