your tokens, your rules.

• Tokens in a drop can only go to people who claim it, or back to the wallet that created it.
• Each person can claim a drop once. The contract checks this per wallet and per login account, so switching wallets does not help.
• Every claim needs a fresh approval that names the receiving wallet and expires within an hour. The tokens always go to that wallet, whoever sends the transaction, and approvals only work on this chain and this contract.
• The rules of a drop are fixed when it is created: the amounts, the fee and the key that approves claims. Changing settings later only affects new drops.
• A new approval key only takes effect 48 hours after it is announced on-chain, and the app checks the key against a list kept in its code before every new drop, so nobody can quietly swap it.
• If the approval key ever leaked, BagDrop switches to a sealed backup key within minutes. Drops under the leaked key stop accepting claims and can be refunded in full.
• After a drop expires, anyone can trigger the refund, and the tokens can only go back to the creator.
• The platform fee is capped at 1% in the code and is rounded down.
• No admin function can move tokens that belong to drops. We test this by giving the admin key every power it has and checking that it still cannot take a single token.

When you create a random drop, your app picks the amounts with a cryptographic random generator. They are fixed on-chain from then on and published, so anyone can check that they add up to what you funded minus the fee.

When you claim, BagDrop picks a random unclaimed amount and sends it to you in the same step, so nobody can pick the biggest piece, wait for it, or retry for a better one. The contracts never use block data for randomness.

BagDrop sends eligible claims to the chain itself and pays the network fee: you logged in with X, the gift is USDG, ETH or an official stock token, your share is worth at least $0.10 at the Chainlink price, the fee is no more than a quarter of it, and the daily limits (20 per X account, 40 per network, 500 per drop creator, $50 in total) are not used up. Otherwise you pay the fee yourself, which is about 1¢ on Robinhood Chain. Either way the contract only pays the wallet named in your approval, so the service that sends the claim cannot keep or redirect your gift.

Each person can claim a drop once, checked by the contract per login account and per wallet. New drops require an X account to claim, because throwaway emails and wallets are cheap to make. Creators can also allow email, Google and wallet logins, skip X accounts younger than 30 days, or limit a drop to their followers.

If something goes wrong, BagDrop can pause new drops, claims and tips. Refunds keep working while paused, so creators can always get their unclaimed tokens back.

• Official: the token’s contract address is on Robinhood’s published list of stock token contracts (docs.robinhood.com/chain/contracts).
• Unverified: the token copies a stock ticker or name but is not on that list. It cannot be used in a drop.
• Verified bag: the author proved they own the wallet and it held at least $10 of the tagged token when they posted. See Proof-of-bag.
• Sold after posting: within 7 days of the post, the position fell below half of what it was at posting time.
• Sample: preview data while BagDrop is not live yet. Not real activity.

Tokens that take a fee on every transfer are rejected by the contract, so every drop stays fully backed. Robinhood stock tokens handle splits and dividends with a display multiplier and never change balances, so drops of stock tokens stay exact.

Stock tokens are controlled by their issuer, which can pause them, block addresses or burn tokens. BagDrop checks that a claimer is not blocked before sending a gift. A refund to a blocked address stays in the contract until the issuer unblocks it, and cannot be redirected to another address. See the risk disclosure.

• BagDrop will never ask for your seed phrase or private key.
• If you log in with X, Google or email, your wallet is non-custodial: its key is secured by Reown’s key-management provider, BagDrop never sees it, and you can export it from the wallet menu.
• Our only X account is @BagDropSocial.
• Check the site address before you sign anything.

BagDrop runs on Robinhood Chain mainnet. Both contracts are verified on Sourcify with an exact match, so the code you can read is the code that runs.

• Gift drops: 0x7c5d…2f95 (source)
• Tips: 0x301A…1B98 (source)
• Admin: a 2-of-3 Safe multisig, 0xc254…47E9. No single key can change anything.

Found a security issue? Contact [SECURITY CONTACT].