xHISS mechanics

developer

The xHISS share token field by field: convertToShares/convertToAssets, previewStake, the 24-hour reward drip, cooldown escrow, and what the Safe can and cannot do.

xHISS (“Staked HISS”) is the share token of the XHissVault contract: a single-asset staking vault over $HISS (0x47162135cc8fb253f939Bd70e3D2B83075eaeBa3, 18 decimals, Robinhood Chain 4663). Shares reprice through fee-funded injections — there is no reward token, no emissions schedule, and no per-user claim function. Not a performance claim.

Share math

convertToShares(hiss) / convertToAssets(xShares) — the two directions of the current rate. The rate starts at 1:1 and can only move through injections (up, as drip vests) — staking and redeeming are rate-neutral.
previewStake(hiss) / previewRedeem(xShares) — exact preview of what a stake mints or a redeem returns at the current state.
hissPerXHiss() — the display rate (18 decimals).
totalHissStaked() excludes unvested drip; unvestedRewards() reports the not-yet-vested remainder of the latest injection.

Reward injections

injectRewards(hissAmount) is callable only by Safe-approved injectors (setInjector). Each injection vests linearly over 24 hours (RewardsInjected carries the drip end). Injections revert when there are no stakers, so value can never be injected into an empty vault. The funding source policy — verified HISS trading fees split 50/30/10/10 — is enforced by the fail-closed off-chain pipeline, not by the contract; see reward split.

Cooldown escrow and exits

startCooldown(xShares) — moves shares into vault escrow and (re)starts the 72-hour timer (cooldownOf returns shares, readyAt, windowEndsAt). Adding more shares restarts the timer for the whole escrow.
redeem(xShares, receiver) — inside the 2-day window after readyAt, burns cooled shares for HISS at the then-current rate.
restartCooldown() — after a missed window; cancelCooldown() — returns escrowed shares to the balance at any time.
Escrowed shares keep repricing with the vault — cooldown affects when you can exit, not what a share is worth.

What the Safe can and cannot do

Can: approve/revoke injectors, pause/unpause staking and injections, rescue non-HISS tokens sent by mistake, transfer ownership (two-step).
Cannot: pause exits (cooldown/redeem are not pausable), rescue the staked HISS itself (CannotRescueStakeAsset, and rescue refuses address(this)), mint xHISS, or change the cooldown/window/drip constants — they are immutable.

The admin is the verified 2-of-3 HISS Treasury Safe — addresses and owner keys are on /app/stake. Source of truth for behavior: contracts/src/XHissVault.sol.

$HISS is independent research software in pre-execution readiness checks — not investment advice, and not affiliated with Robinhood, Bankr, or Chainlink.