A simple handoff, precisely defined.
The transfer stays funded until the fixed recipient claims or the sender refunds after expiry.
Lifecycle
A record begins FUNDED. Only its recorded recipient may claim while block.timestamp is less than claimUntil. At or after claimUntil, only its sender may refund. CLAIMED and REFUNDED are final states. A transfer can reach a final state only once.
Amounts and fees
The gross HYPE amount is reserved in the contract. A successful claim pays gross minus floor(gross × feeBps ÷10,000). The fee accrues to the immutable fee recipient. A refund returns the complete gross amount. Network gas is separate. The fee calculation operates on18decimal native units.
Wallet and payout authority
A link confers no authority. The named recipient authorizes a claim and may select a valid payout wallet. The recorded sender authorizes an expired refund and may select its payout wallet. Zero addresses and the Latch contract itself are rejected.
Administration
The contract is non-upgradeable. It has no owner sweep, arbitrary external-call function or ability to rewrite an existing transfer. The fee recipient and rate are immutable. Only accrued fees can be withdrawn by the fee recipient; active transfer liabilities cannot be withdrawn by that role.
Public metadata
Funding, sender, recipient, amount, deadline, claims and refunds are public onchain. The URL is a locator. This product does not provide anonymous transfers, unlinkability, mixing or zero-knowledge proofs. Avoid sharing unrelated sensitive information with the link.
Network and gas
Latch uses Elysium by Kinetiq with native HYPE. The app displays its actual configured network and chain ID. Recipients need gas to claim, and senders need gas to fund or refund. Latch does not bridge funds, access HyperCore or depend on an AMM or price oracle.
Failure and recovery
A failed payout reverts the whole claim or refund, preserving the funded record. The authorized wallet may retry with a valid destination. A lost sender or recipient key is not recoverable by a Latch administrator. Once claimed, a recipient is not compelled by this contract to return the money.
Security and limitations
The contract has not received an independent security audit. Bugs, compromised wallets, network interruptions and incorrect addresses can cause loss or delayed access. Read-only deployment checks and test receipts describe tested scenarios; they are not proof that all defects are absent. Always review the actual network, recipient, deadline, fee and payout before signing.