SKUdesk
SKUdesk/Orders
Robinhood Chain Testnet · Run + live chain reads
Next: Agent trade

Orders

One product. Payment locked on chain until a named verifier confirms delivery.

Saved snapshot from block 128258066. Checking the chain for newer orders…Contract 0x8b4BBa…Eb59 ↗ (opens the block explorer in a new tab) · verifier 0x6129C8…5501 ↗ (opens the block explorer in a new tab) · token mUSDG

Order #1

RELEASEDPaid out to the seller
Quantity and cap1 unit, up to 13.34 mUSDG each
Round price11.20 mUSDG per unit
  1. Order fundedONCHAIN

    The buyer locked 13.34 mUSDG for 1 unit, with a cap of 13.34 mUSDG per unit.

    The ship-to is stored only as a hash computed off chain. The salt and address reach the seller off chain, which is not trustless.

    0x36f96d…87f6 ↗ (opens the block explorer in a new tab) · block 128257293 · 2026-10-03 16:52 UTC

  2. Matched to a cleared sell fillONCHAIN

    Round 102, order #7, price 11.20 mUSDG per unit for 1 unit. The seller has until 2026-10-03 17:09 UTC to accept.

    The fill is evidence of an offer at or below this price. It is not an allocation of goods.

    0x6c3d69…745b ↗ (opens the block explorer in a new tab) · block 128257723 · 2026-10-03 16:54 UTC

  3. Seller accepted and locked a bondONCHAIN

    Bond 2.24 mUSDG. The seller must ship by 2026-10-03 17:24 UTC.

    0x93e04e…e6c2 ↗ (opens the block explorer in a new tab) · block 128257775 · 2026-10-03 16:54 UTC

  4. Seller reported a shipmentAGENT ATTESTED

    Shipment hash 0x73390e634b…261a51. The verifier has until 2026-10-03 17:24 UTC.

    The shipment hash is reported by the seller agent. The contract does not check it against any carrier or goods.

    0x9793f8…2cb6 ↗ (opens the block explorer in a new tab) · block 128257786 · 2026-10-03 16:54 UTC

  5. Verifier attested deliveryONCHAIN

    Receipt hash 0x9229ada7d7…655073. The buyer can dispute until 2026-10-03 17:04 UTC.

    Signed by the named verifier 0x6129C8…5501 ↗ (opens the block explorer in a new tab). This is a statement by one address, not a carrier record.

    The verifier is one address chosen at deployment; it decides whether goods arrived.

    0x2c9e84…0310 ↗ (opens the block explorer in a new tab) · block 128257802 · 2026-10-03 16:54 UTC

  6. Payment released by the buyerONCHAIN

    The seller received 11.20 mUSDG; the buyer got 2.14 mUSDG back (cap minus price); the seller’s 2.24 mUSDG bond was returned. The buyer released the payment.

    Released by 0xE2858f…8C4d ↗ (opens the block explorer in a new tab) (reason code BUYER).

    0xfeecf0…01ed ↗ (opens the block explorer in a new tab) · block 128257819 · 2026-10-03 16:54 UTC

Order #2

REFUNDEDRefunded to the buyer
Quantity and cap1 unit, up to 13.34 mUSDG each
Round price11.20 mUSDG per unit
  1. Order fundedONCHAIN

    The buyer locked 13.34 mUSDG for 1 unit, with a cap of 13.34 mUSDG per unit.

    The ship-to is stored only as a hash computed off chain. The salt and address reach the seller off chain, which is not trustless.

    0x5f5603…ed63 ↗ (opens the block explorer in a new tab) · block 128257307 · 2026-10-03 16:52 UTC

  2. Matched to a cleared sell fillONCHAIN

    Round 102, order #6, price 11.20 mUSDG per unit for 1 unit. The seller has until 2026-10-03 17:09 UTC to accept.

    The fill is evidence of an offer at or below this price. It is not an allocation of goods.

    0x08c456…ff36 ↗ (opens the block explorer in a new tab) · block 128257736 · 2026-10-03 16:54 UTC

  3. Refunded: offer withdrawn before acceptanceONCHAIN

    13.34 mUSDG returned to the buyer. The buyer withdrew the offer before the seller accepted, or the seller let it lapse. The seller’s bond was never touched.

    0xf1cc77…9c7f ↗ (opens the block explorer in a new tab) · block 128257757 · 2026-10-03 16:54 UTC

How these orders were produced

The proof used script-controlled wallets and operator-issued test units. No physical goods moved: the delivery was attested by the verifier.

One operator address plays three roles: it is the escrow verifier, the BlindBook owner that issued the sellers’ test units, and the owner of the mUSDG token that was minted to the wallets. 0x6129C8…5501 ↗ (opens the block explorer in a new tab)

mUSDG is a testnet stand-in token with no value. The ship-to of every order is only a hash of a random salt and a fixed text; no address was entered.

The price evidence. In BlindBook round 102, seller A asked 10.78 mUSDG and seller B asked 10.89 mUSDG per unit, and a bidder offered 11.78 mUSDG for 4 units. The round cleared at one price, 11.20 mUSDG, for 10 units, and that price is what each order records. There were 8 sealed orders in the round, 5 of them from the market’s bot traders. Cleared by another address (the keeper), which is allowed: 0xcf517a…8bab ↗ (opens the block explorer in a new tab)

Order #1: delivered and released

  • Checked filled >= consumed + qty for sellerA before matchOrder: filled 2 >= consumed 0 + qty 1 (ask 1078c)
  • Checked the price is the BlindBook round price: price 1120c, seller 0x94BC4993eCb5615BF3549AB8Fe963DAc23301c42
  • Checked bond locked equals bondNeeded: 2.24 mUSDG
  • Checked Released event: payment = price x qty x CENT: 11.20 mUSDG
  • Checked Released event: buyer refund = cap payment minus payment: 2.14 mUSDG
  • Checked bond is back in bondFree: 2.668 mUSDG (bond 2.24 mUSDG returned)
  • Checked seller token balance rose by payment: +11.20 mUSDG
  • Checked buyer token balance rose by the refund of the difference: +2.14 mUSDG
  • Checked order 1 is RELEASED: RELEASED

Order #2: refunded by the buyer before acceptance

  • Checked filled >= consumed + qty for sellerB before matchOrder: filled 2 >= consumed 0 + qty 1 (ask 1089c)
  • Checked order 2 is REFUNDED: REFUNDED
  • Checked buyer got the full funded amount back: +13.34 mUSDG
  • Checked the fill reservation was released: consumed 1 -> 0

Whole run

  • Checked round price is within the buyer cap: 1120c <= 1334c
  • Checked order 1 was funded before the round began: epoch start 1791046413 >= createdAt 1791046375
  • Checked order 2 was funded before the round began: epoch start 1791046413 >= createdAt 1791046377
  • Checked the escrow holds exactly the sellers’ free bonds (nothing stranded): escrow 5.336 mUSDG, bondFree A+B 5.336 mUSDG

Not run: unshipped timeout (the ship window is longer than 20 minutes; run with --wait-timeout to wait for it).

Every setup and round transaction (27)

What is not trustless

The verifier. The verifier is one address chosen at deployment; it decides whether goods arrived. If it goes silent after a shipment, the buyer is refunded and the seller gets only its bond back. If it goes silent after a dispute, the seller is paid.

The verifier’s reach. A verifier acting through another address, as a buyer or a seller, can direct any outcome, including a seller’s bond, to itself: the verifier is a trusted party.

The shipment. The shipment hash is reported by the seller agent. The contract does not check it against any carrier or goods.

The ship-to. The ship-to is stored only as a hash computed off chain. The salt and address reach the seller off chain, which is not trustless.

What matching proves, and what it does not. A cleared BlindBook sell fill is used only as evidence that this seller offered at or below price P in a round that began at or after the buyer funded. It is not an allocation of goods: those units were already sold to the BlindBook buyer and are not redeemable. The units are operator-issued, so the operator controls who can become a seller, and a seller may also be a bidder in that round, so P is not an independent market price. The buyer chooses the round; the buyer’s own cap (maxPriceCents) is the real price guard. The consumed counter only stops one fill from backing two escrow orders; consumed is counted within this escrow contract only. The seller’s acceptance, the bond and the named verifier are the only guards on delivery.

Timeouts, in this deployment: the seller has 15 min to accept, 30 min to ship after accepting, the verifier has 30 min to attest after a shipment and 15 min to rule on a dispute, and the buyer can dispute for 10 min after a delivery attestation. The seller bond is 20% of the price.