Limits
What it does,
and what it does not
Every rule below is enforced by the contract, or is a plain limit of it. Read these before you approve anything.
Your tokens stay yours
Orqen never holds your tokens. They stay in your wallet; each allowed spend moves them straight from you to the recipient in the same transaction. The contract has no owner, no admin, no fee, no pause and no upgrade.
One token per mandate
ERC-20 tokens only (for example USDG). Native ETH is not supported. Fee-on-transfer and rebasing tokens are refused. A token that moves a different amount than asked makes the spend fail.
Rolling 24 hours
The 24-hour cap is a rolling window counted in whole hours: a spend leaves the window 23 to 24 hours after it happened. A spend you approve yourself is not counted against the agent's 24-hour cap: the cap limits what the agent can move without you.
Revoke stops what comes next
Revoking stops the next spend. It does not undo a transfer that already happened. Revoke one mandate, or all of yours in one transaction. A revoked mandate cannot come back; write a new one.
The allowance is the ceiling
Your token allowance to the contract is separate from the caps. A stolen agent key can spend up to its caps until you revoke it; the allowance is the most anything can move. Keep the allowance close to what you are willing to lose, and set it back to zero when you are done.
A key can be stolen
Whoever holds the agent key can spend up to its caps, to its listed recipients, until you revoke it. Give each agent its own key, keep its caps small and its recipient list short.
A new contract
OrqenMandates is new: live on Robinhood Chain since 12 Nov 2026, with its source verified on Blockscout. It moves user funds under rules, so it needs an independent security review before real volumes; start with small amounts. Tokens on this chain can blocklist or pause addresses; then a spend is refused and logged, and nothing is stuck because the contract never holds tokens.
Everything is public
Mandates, recipients, amounts and refusals are public on Robinhood Chain. Orqen adds no privacy and claims none.
Agents pay gas
The agent key needs a little ETH for gas. A refused spend still costs the agent its gas, because the refusal is recorded.
Not built yet
Automation services, an API quota and multi-agent plans are planned, not built. Orqen does not run your agent or decide for it.