What nobody
else can see.
Quiver is the real-time trustworthiness engine for tokenized stocks on Robinhood Chain. It reads on-chain oracle and corporate-action state continuously and answers one question: can this price be trusted right now?
"See what the market can't."
Fail-closed by design.
If any guard fails, the verdict is "do not trust" with a machine-readable reason. No price is shown.
No financial advice. Public on-chain data, read correctly.
A -20% drop
might be a split,
not a crisis.
Tokenized stocks on Robinhood Chain use an on-chain uiMultiplier to represent stock splits and dividends. That multiplier advances automatically by timestamp with no transaction, no event. Event-only indexers go stale the instant a reprice is scheduled.
Meanwhile, oracle feeds can go quiet. The oraclePaused() flag is advisory: it returns false even while stale. Lending markets keep quoting. Liquidations happen against prices that cannot be trusted.
Add L2 sequencer risk. A frozen Arbitrum Nitro sequencer makes prices appear non-stale. Without a sequencer liveness check, the price looks valid. It is not.
What the contract
doesn't tell you.
Every trap is silent. No error, no revert, no alert. Each one produces a plausible-but-wrong answer that passes a naive health check. These are not edge cases: they are structural ambiguities in the oracle and corporate-action contracts.
The silent multiplier advance
uiMultiplier()Advances automatically by block.timestamp with no transaction and no event. Event-only indexers go stale without knowing it the instant a reprice is scheduled.
Quiver polls on a cadence tighter than each feed heartbeat. If block time passes the scheduled reprice and no event has fired, it re-reads directly from the contract, so it never trusts a stale multiplier.
The ambiguous pending state
newUIMultiplier()"Pending" is indistinguishable from "applied" once the timestamp passes. Reading the pending value after effectiveAt returns the already-applied multiplier.
Quiver derives pending strictly as effectiveAt greater than now. If effectiveAt is at or before now, the multiplier has applied. It re-reads the current multiplier and compares.
The missing genesis event
First-index seedThe genesis multiplier event may never fire. Builders who rely solely on events start with no baseline and never know it, producing a zero multiplier silently.
On first index, Quiver seeds state from a direct on-chain contract read, not from an event log. No events required for initialization, so the baseline is correct from block zero.
The advisory pause lie
oraclePaused()Returns false even while the oracle feed is stale. Systems that check this flag alone believe the oracle is healthy when it is not. Lending markets keep quoting.
Quiver checks oraclePaused() but never trusts it alone. Staleness is verified independently via the roundId and updatedAt timestamp. The full guard chain runs regardless.
The L2 sequencer blip
Sequencer + grace periodA frozen Arbitrum Nitro sequencer makes prices appear non-stale. Lending markets keep quoting against frozen prices. Liquidations happen against prices that cannot be trusted.
Quiver chains: sequencer up, then grace period clear, then not-stale against feed heartbeat, then price greater than zero. All four must pass or the verdict is: do not trust.
{ "trusted": false, "reason": "..." } with no price shown, no inference made, no half-open state. The engine never returns a price it cannot vouch for.The trust monitor,
in your interface.
Every token gets a real-time health verdict. Prices are shown only when trusted. States are machine-readable. The calendar surfaces all upcoming corporate actions before they reprice.
See what the
market can't.
The Watcher surfaces verdicts that no price feed, no DEX, and no news service can produce. This is public data, read correctly.
A lending protocol could liquidate you unfairly right now.
On-chain uiMultiplier advanced at {EFFECTIVE_TIME}. Oracle price not yet updated. Delta: approx {PCT}%. Positions using this price as collateral may be under-collateralized.
Verdict stream (illustrative)
"A drop of {PCT} might be a split, not a crash."
Without Quiver, retail traders panic-sell what is actually a corporate event. The Watcher knows the difference before the candle closes.
Every participant
in the tokenized stock stack.
A -20% price change might be a scheduled stock split, not a market crash. Quiver tells you which one it is, so you react to the real number instead of the raw one.
Unfair liquidations destroy user trust. Quiver gives your liquidation engine a machine-readable signal to pause when the price cannot be trusted.
Price feeds without corporate-action context are incomplete. Quiver surfaces the reason behind every price change on Robinhood Chain.
Do not re-implement the 5 traps yourself. Quiver's API is the single source of truth your dApp can call instead of reasoning about oracle state on-chain.
Proven twice.
One truth.
Infrastructure-grade trust requires infrastructure-grade verification. Quiver's guard chain is proven in two independent runtimes and served from a single source of truth.
Every guard is proven in both Solidity/Foundry and TypeScript/Vitest with shared test vectors. The same edge cases that break on-chain also break off-chain, and Quiver handles both.
RPC, engine, store, API, clients. No client computes a verdict. No split logic between layers. Every consumer gets the same answer from the same guard chain.
The guard logic lives in packages/core: framework-free, side-effect-free, deterministic. Consumable by both the API server and any future integration without re-implementation.
Consume trust,
don't compute it.
One API call replaces the entire guard chain. Your dApp, protocol, or desk receives a machine-readable verdict: trusted price or fail-closed reason. No client ever computes a verdict.
/v1/tokens/:address/statusFull trust verdict for a single token
/v1/calendarForward schedule of all pending reprices
/streamReal-time state changes for subscribed tokens
{
"address": "0xAbC...{TOKEN_ADDRESS}",
"ticker": "{TICKER}.rh",
"trusted": true,
"status": "HEALTHY",
"price": "{PRICE_USD}",
"uiMultiplier": "{MULTIPLIER}",
"oraclePaused": false,
"sequencerLive": true,
"updatedAt": "{ISO_TIMESTAMP}",
"reason": null
}Common questions.
Still have questions? Ask in the community or read the docs.
See what the
market can't.
Quiver is the trust layer Robinhood Chain needs. Start with the free tier: 5 feeds, no API key, SIWE auth. Upgrade to $QUIVER premium when you need more.