Splashpay manual

Splashpay is a payments app on Elysium: send and request USDC by phone, email or handle, split money with Drops, and check every number on /stats against the chain.

Splashpay has three parts: the app on your phone, which holds your key and signs your payments; a small server that maps phone numbers, emails and handles to accounts; and the Elysium network, where the money actually lives and moves. The server never holds a registered user's money.

Network

Elysium, chain ID 99901, settles to HyperEVM

Money

USDC (dollars) and HYPE

Network fees

Paid in HYPE by the Splashpay paymaster

Token

$SPLASH, 1,000,000,000 fixed, fair launch on Montra

App

app.splashpay.app, installable on iPhone and Android

Sign in with a one-time code sent to your email, or with your handle. Phone sign-in arrives in Phase 2 with daily limits, because text messages cost money and get abused.

• The signing key is held for you as threshold key shares by an embedded-wallet key service: neither that service nor Splashpay can sign alone.
• Your smart account address is computed from your key and the account factory. It is the same on every EVM chain.
• The account deploys on your first send, and that cost is covered.
• Recovery: sign in again on any device with the same identifier. Same key, same account.

Type a phone number, an email or a @handle and an amount. If the person has Splashpay, the USDC moves account to account in about a second. If not, it waits in escrow and you get a claim link.

• Your phone signs the operation; the bundler submits it to EntryPoint v0.7.
• The paymaster (ERC-7677) pays the network fee, so you never hold HYPE.
• Each account has a daily allowance of covered sends: 20, 100, 500 or unlimited by tier. Above it the network fee is taken from the amount at cost and shown before you send.
• One transaction hash appears in both activity feeds and on /stats.

Money sent to a number or email with no account waits in an escrow contract, never in a server wallet. The recipient opens the link, signs in with a one-time code, and the money moves to their new account.

Escrowed

Leo pays nora@example.com $15. No account yet, so SplashEscrow holds it and Leo gets a claim link.

Claimed

Nora opens the link, gets a one-time code, and the claim pays her new account. Leo sees "claimed".

Cancelled

Leo can cancel any unclaimed payment, at any time. The money returns to him.

Returned

Nobody claims within 30 days: the payment returns to Leo by itself.

• Funds sit in the SplashEscrow contract, never in a server wallet.
• A claim needs a fresh one-time code sent to the paid identifier.
• The identity service signs one message: this entry, this account. The contract pays only that account, only once.
• Every escrow entry is public on-chain. The identifier is not: a salted hash stays off-chain.

Set an amount, a number of people and a split. Splashpay locks the money in SplashDrops, fixes every share before anyone can claim, and gives you one link. The first people to tap it claim the shares, one each.

• Creator sets amount · people · split (equal or surprise) · expiry · who may claim.
• The money moves into SplashDrops and the list of shares is committed on-chain as one hash.
• One link goes into the group chat.
• Each person opens it, signs in with a one-time code or a handle, and claims the next share.
• Filled: the creator sees who claimed. Expired: whatever is left goes back to the creator.

Fairness of a surprise split:

• Shares are drawn and shuffled when the Drop is created, before anyone can claim.
• The shuffled list is committed as one hash. Nobody, including Splashpay, can change a share after that.
• Each claim opens the next share and proves it against the committed list.
• Claimers never pay anything to take part. A Drop is a gift with a reveal at the end.

Limits: 1 to 2,000 people · $0.01 minimum share · launch cap $5,000 per Drop.

• Person request: ask someone by email, phone or handle. They get a request card in the app and by email; one tap pays it.
• Open link: "$5 each for the trip fund". Anyone with the link pays by signing in, and you see the list of payers and the total.
• A request to someone new works like a claim link in reverse: they sign in, add USDC if needed, and pay.
• Every paid request carries the transaction link on both sides.

$SPLASH launches on Montra's 2% fee tier. About 1.3% of every trade reaches the token's fee recipient: the Splash Pool contract, set at launch, not a team wallet. A keeper claims it every hour, and every claim is split the same way, in public.

40% · Team & development

salaries, audits, infrastructure

25% · Cashback for senders

buys $SPLASH for the weekly cashback

15% · Transfer fund

refills the paymaster that covers network fees

10% · Buyback & burn

buys $SPLASH and sends it to the burn address

10% · Reserve

bug bounty, partners, liquidity support

• Every split is a transaction you can open from /meter.
• The split changes only through a 7-day timelock, announced on /meter.
• Transfer fund overflow: anything above 60 days of measured network fees moves to cashback.
• Cashback never exceeds its weekly budget. When the budget is short, rates scale down.

Example, not a forecast: at $400,000 of daily $SPLASH volume, the creator share is $5,200. The transfer fund's 15% ($780) covers about 148,000 transfers at roughly half a cent each.

Sending, requesting and claiming are free for everyone. Holding $SPLASH in your account, or in up to three linked wallets, sets a tier that raises your limits at the next hourly snapshot. No staking, no lock.

Drizzle · everyone

20 covered sends a day · Drops 20 people · 3 live · cashback 1x · Send, request, claim: always free

Shower · 100K $SPLASH

100 covered sends a day · Drops 100 people · 10 live · cashback 1.25x · Surprise split first (Phase 2)

Downpour · 1M $SPLASH

500 covered sends a day · Drops 500 people · 25 live · cashback 1.5x · Custom Drop card · 4+ letter pay tag

Monsoon · 5M $SPLASH

Unlimited covered sends a day · Drops 2,000 people · cashback 2x · Featured on the Drop wall · votes on Meter split changes

• Never needed to send, request or claim money.
• Never pays anyone for owning it: tiers raise limits on things you do.
• Never minted again: cashback is bought on the market.
• Never a vote over anyone's funds: votes cover the Meter split only.

Ticker

$SPLASH

Total supply

1,000,000,000, fixed, no mint

Chain

Elysium (chain ID 99901), network fees in HYPE

Launch

100% in the Montra pool (Uniswap v4, paired with HYPE)

Fee tier

2% · creator share ≈1.3% to the Splash Pool

Team allocation

None

Presale / VC

None

Team purchases

In the open pool like everyone, disclosed with wallet addresses

Launch window

Montra's early-buy fee on, so bots pay to rush the first minutes

Contract

Shown in Pinned at launch

• 10% of everything the Splash Pool receives buys $SPLASH and burns it.
• Half of pay tag auction proceeds buy $SPLASH and burn it (Phase 3).
• Each burn is shown on /meter with its transaction.
• No emissions: cashback is bought, never minted.

SplashEscrow

Holds payments to identifiers with no account. One signed claim, once. Cancel any time. Returns after 30 days.

SplashDrops

One Drop = amount, slots, split mode, committed shares hash, expiry, rules. One claim per identity hash.

SplashPool

The $SPLASH fee recipient. Splits every claim 40/25/15/10/10 behind a 7-day timelock, one event per split.

CashbackDistributor

One Merkle root per weekly epoch; senders claim from the app.

PayTags

Tag → account registry (Phase 2); short-tag auctions (Phase 3).

Standard pieces: ERC-4337 smart accounts on EntryPoint v0.7, a verifying paymaster (ERC-7677), USDC bridged from HyperEVM, and Montra's Uniswap v4 pool for $SPLASH.

• Identifiers are stored as keyed hashes. The plain value exists only during the one-time code step.
• Contact lookup sends hashes, never address books.
• Amounts and accounts are public on-chain. Identifiers are never on-chain.
• Payment notes are encrypted to the sender and the recipient.

• Launch caps: $1,000 per escrow payment and $5,000 per Drop, raised in steps after reviews.
• Contracts reviewed and source-verified before mainnet; a bug bounty from the reserve.
• The identity signer key lives in a hardware security module; every signature is logged publicly.
• A pause guardian can stop new escrows and new Drops only. Claims, cancels and returns can never be paused.

Phase 1 · Weeks 0-2

App live: sign-in, send, request, claim links, equal-split Drops · USDC and HYPE, with a bridge guide from HyperEVM · /stats and /meter reading the chain; docs with fees, limits, risks · $SPLASH fair launch on Montra, the Splash Pool as fee recipient · First cashback epoch at the end of week 2; bug bounty from day one

Phase 2 · Weeks 3-8

Phone sign-in with daily limits; contact lookup by hash · Surprise split and Drop rules (account age, invite only) · Pay tags of 6+ characters and splashpay.app/@tag links · Weekly boards, Splash Score and badges; caps raised after review

Phase 3 · Months 3-6

Swap-and-send with any Elysium token · Merchant links and the Payouts API; Project Drops · Card top-up through a licensed partner; short pay tag auctions

Phase 4 · Months 6-12

Cash-out to local currency through licensed partners · Private payments: amounts and parties shielded · Proof-based claims (email proofs) to remove the trusted signer · A pay-by-handle SDK for other Elysium apps

Splashpay is experimental software on a new network. It is not a bank, holds no deposits and offers no deposit insurance. Payments are made in USDC, which is issued by a third party; HYPE pays network fees. Amounts and accounts are visible on the public chain. Claim links, Drops and escrow are smart contracts that can contain bugs; launch caps limit what is at risk. Nothing here is financial, investment, legal or tax advice. $SPLASH is a utility token that raises limits and unlocks features in the app; it confers no ownership, profit share or claim on any entity or asset. Cashback is a reward for sending, not a return on owning the token, and burns are a protocol mechanism, not a payment to anyone. You are responsible for following the laws that apply to you; sanctioned addresses are refused. Digital assets are volatile. Never risk funds you cannot afford to lose.

A community project. Not affiliated with, endorsed by or sponsored by Kinetiq, Elysium, Hyperliquid, Montra or the issuer of USDC.