Est. 2024 — refund intake, cohort 41

You were overcharged. Collecting it is a procedure.

Gas has cleared above the fair rate for years and the gap is measurable to the transaction. We hold the model and we can release the difference — but a refund cannot be asserted, it has to be evidenced. A verified audit report, submitted here, is the whole of the requirement.

Submit a report → evaluation in ~90 seconds
no account · no signup

The requirement

No report, no refund.

01

Obtain the audit report

Issued by a Verified Crypto Auditor (V.C.A), Wallet4Guard is an accredited audit provider. Container is signed; about ninety seconds.

02

Submit the file here

.bat or .bin only. Parsed on your device. The file is never uploaded to a server.

03

An agent takes the appeal

Assigned from the intake queue on evaluation. They file with the fee layer; you sign once.

Obtain a report from Wallet4Guard
01 Intakereport evaluation

Submit the report.

The container is read in this tab. Its digest fixes the evaluation — the same file always returns the same figure, so you can submit twice and compare.

Evaluation deskqueue 41 · open
Drop the report file
parsed locally · never uploaded
max 8 MB
.bat.bin

Anything else is rejected at the door. A CSV of transactions is not a report, and a screenshot certainly is not — neither carries a signature to check.

02 Evidencecontainer spec v2.1

What a report has to contain.

The format is published so it can be argued with. A container that fails any of the five is refused before the model runs.

a

Issuer signature

Ed25519 over the payload, verified against the published provider key. Unsigned containers are rejected.

b

Address set

The evaluated address or addresses, with derivation path. A report covering a different address than the one you appeal cannot be used.

c

Per-transaction gas record

Block reference, gas used, effective price. This is the input to the delta — not a summary, not an average.

d

Issuance stamp and expiry

Reports expire 30 days after issue. An expired container is re-issued, not argued with.

e

Integrity digest

SHA-256 over the container. Any edit changes the digest, and a changed digest changes the figure.

03 Modelffi-baseline v3.2

How the figure is arrived at.

Deterministic and reproducible. If a number is disputed, the working is already in front of you and the digest proves it has not moved.

01

Baseline fit

A fair-rate curve per block condition, fitted across 40.2M addresses. Each transaction is priced against its own conditions, never a monthly mean.

02

Per-transaction gap

Paid price minus fair price, floored at zero. Overcharges do not net against undercharges on the same wallet.

03

Aggregation and cap

Summed across the record, then capped at 0.4% of gas paid so a single anomalous block cannot inflate the claim.

04

Release

The fee layer honours originating signatures only. The delta returns to the address, and to nothing else. Median settlement 31 hours.

04 Limitsstated plainly

What this is not.

Most distrust in this category is earned. Here is the boundary, drawn before you have to ask where it is.

×
Not an airdrop

No token, no points, no snapshot. A rebate on fees already paid is the entire proposition.

×
Not custody

Nothing moves until an appeal is signed, and it moves to the originating address. We never hold a balance.

×
Not an approval

No approve(), no allowance, no spend permission. A message signature, and only when you choose to appeal.

×
Not a guarantee

A submitted report can still return zero. Anyone quoting a figure before reading your file is guessing.

×
Not permanent

Reports expire in 30 days and the delta is recomputed on a rolling 24-month horizon. An unclaimed balance decays rather than sits.

05 Objectionsanswered in full

Everything a careful person asks.

No. It is read with the local File API in this tab. There is no upload endpoint, so open devtools and watch the network panel stay quiet. Close the tab and the file is gone from memory.

The container carries a signature block and a fixed-width gas record; both want binary framing. A .bat is the signed wrapper, a .bin is the raw payload — they are two halves of one artefact and either will parse.

No. Reading requires nothing from you at all. A signature is needed only to release a rebate, and only if you choose to appeal.

No. There is no contract to approve. The appeal is a signed message; it grants no spending power and cannot be replayed against your balance.

The fee layer will not pay an unsigned claim — otherwise an appeal is indistinguishable from a third party asserting someone else's delta. The same property means nobody can front-run yours.

Files the appeal against the fee layer with your digest attached, chases the confirmation, and tells you when it clears. They never hold keys and never ask for them.

1.8% of the rebate, retained from the rebate and from nothing else. Evaluation is free, and a zero delta costs you nothing.

Eleven people: independent researchers, ex-exchange infrastructure engineers, MEV analysts. No VC, no token, no foundation. Accounts published quarterly, accountable to a published model version rather than a marketing schedule.

Close the loop

The delta is already yours. Evidence it and take it.

One file, one evaluation, one agent. Nothing is installed and nothing is stored.

Submit a report →