Field // Verification
Security
Every contract the field runs on, what this app will and will not ask your wallet to sign, and the hard limits on what the operators can do. Nothing on this page asks to be trusted — every claim links to verified source you can read yourself.
$OIL is a plain fixed-supply ERC-20: no owner, no mint function, no transfer tax, no blocklist, no proxy. The NFT contract is OpenSea's own SeaDrop code. Holder funds sit in per-rig vaults that no admin key can reach. All protocol source is verified on Blockscout, and the test suite — 389 tests across 18 suites — runs before every deployment.
Contract inventory
Each address links to its verified source on Blockscout, the chain's canonical explorer.
$OIL token
OilToken
Fixed supply, no owner, no mint, no tax. OpenZeppelin ERC20 + ERC20Burnable.
Oil Rigs NFT
EIP-1167 proxy
Standard 45-byte minimal proxy to OpenSea's SeaDrop implementation below.
NFT implementation
ERC721SeaDropCloneable
OpenSea's own audited SeaDrop contract, cloned through their factory.
ActivationManager
ActivationManager
Takes activation fees in $OIL, burns a share, assigns weight.
ReserveDistributor
ReserveDistributor
Splits deposits across active rigs by weight. Pays vaults only.
ReserveDripper
ReserveDripper
Releases $OIL to the distributor at an owner-set daily rate. Cannot pay a wallet.
RarityRegistry
RarityRegistry
The multiplier table, frozen on chain. Nobody can edit it, including us.
RarityReserve
RarityReserve
The bonus pool. Same accounting as the main reserve, weighted by rarity.
Rarity dripper
ReserveDripper
Second dripper instance, feeding the bonus pool on its own budget.
USO (external)
BeaconProxy
Tokenized United States Oil Fund shares, bridged by Robinhood. Not ours.
What this app asks wallets to sign
The complete interaction surface
Four kinds of transaction, all against the contracts above: an $OIL approve followed by activate on the ActivationManager; harvest on the two reserves; execute on your own rig's vault to withdraw to your wallet; and standard Uniswap v3 router swaps on the swap page.
The app never requests setApprovalForAll on the rigs, never requests permits, and never asks for an off-chain signature. If a site claiming to be us asks for any of those, it is not us.
The vaults refuse what a drainer would need
Each rig's vault is an immutable ERC-6551 account that obeys only the wallet currently holding the rig. It refuses to grant token allowances in any known shape, refuses to sign anything, and refuses to hold a rig — the three doors wallet-drainer contracts use. A vault's balance is exactly what its holder can see, with no invisible claims against it.
What the operators cannot do
The rarity multiplier table is frozen on chain and cannot be edited by anyone. The distributor's refining cut is capped at 10% by an immutable constant and recycles into the rewards pool — it cannot be routed to a wallet. Tier price cuts are timelocked. The drippers release at an adjustable daily rate but can only ever pay the distributor contracts. No admin key can touch a vault, mint $OIL, or tax a transfer.
Testing
The protocol carries a Foundry suite of 389 tests across 18 suites — activation pricing, distribution accounting to the wei, the vault's refusal properties, and failure tolerance under broken tokens. The full suite passes before anything is deployed.
Known impersonation
A phishing clone of this project exists at thesaudis.chainreview.pro. It is not ours, it is already on MetaMask's blocklist, and nothing we run will ever ask you to connect there. The only official domains are thesaudis.cash and app.thesaudis.cash.