Risk FAQ
Limits, plainly.
Read this before you send anything. If an answer here and a sentence elsewhere ever disagree, this page and the privacy model win.
Is Nulvo anonymous?
No. Every payment shows the payer address, the recipient address, the token, the amount and the time on Elysium, like any transfer. Nulvo keeps the memo and the reference off chain and lets you prove one payment without exposing the others. That is all it claims.
Does it hide amounts?
No. Amounts are public. Hiding them needs a shielded pool or similar research, which is planned and not built.
Does Nulvo hold my money?
No. The book contract forwards each payment to the recipient in the same transaction and never keeps a balance. It has no owner, no admin, no fee, no pause and no upgrade path, so nobody can move funds through it except a payer paying a request.
Is the contract safe?
Nobody can promise that. The book is new code with its own tests (including hostile tokens: fee-taking, false-returning, re-entering, blocklisting) and a written self-review. It has not had an independent security review yet. The build order puts that review before handling user funds at any real size. Use small amounts.
Is the book deployed?
Not yet. Until it is, links are practice links: they can be made and previewed but not paid. The first deployment is meant for small test payments.
Who can read my memo?
Anyone who holds the link or the receipt. The memo sits in the part of the URL after #, which browsers never send to a server, but chat apps, email and screenshots keep it. Share a link with the payer only.
What does the site's server see?
The site serves the page and relays chain reads. The relay sees which address or id your browser reads and from which network; it keeps a rate-limit counter per network for ten minutes and nothing else. The host keeps ordinary request logs (IP, path, time); the path never contains link details.
What if I pay with USDC?
USDC needs an allowance first, so there are two transactions: allow exactly the amount, then pay. USDC can block addresses; if the recipient is blocked, the payment fails and nothing moves. The book refuses tokens that take a fee on transfer.
Can a link be paid twice?
No. A link's id is the hash of all its terms; the book records it once paid and refuses a second payment. An on-chain request moves from open to paid once.
Can I cancel?
An open request can be cancelled by its recipient. A link can be revoked by its recipient before it is paid; revoking publishes the link's terms (not its memo) on chain.
What does a receipt prove?
That the book recorded a payment for this request or link, and that its memo and reference are the ones committed to at the time. The payer, recipient, amount and time come from the chain, not from the receipt file.
Do I need $NULVO?
No. $NULVO is not needed to make, pay or verify anything. Possible future uses (service credits, business payment features, API access) are planned and unproven. Buyback or burn is not a utility and is not offered.
Where does Elysium come in?
Elysium is an Arbitrum Orbit chain (id 99901) that settles to HyperEVM and uses HYPE for gas. Like other such chains, one sequencer orders transactions and sees them before they are final. The canonical bridge links HyperEVM and Elysium; withdrawals back take about 5.5 days.