Stop RevNet v5 fund routing, interim 100% beneficiary split + v6 upgrade path

<html><head></head><body><h1>Stop RevNet v5 fund routing — interim 100% beneficiary split + v6 upgrade path</h1>
<h2>Background</h2>
<p>The Markee RevNet on Juicebox v5 has a known vulnerability. This issue covers the full migration: stop routing funds to the v5 terminal immediately, route 100% to each Markee's configured beneficiary address in the interim, and restructure contracts + frontend so switching to v6 requires only admin config calls — no code changes, no redeployment.</p>
<p>This is also an opportunity to standardize all contracts on the v1.0 architecture (direct RPC, no subgraph dependency) and fully deprecate the subgraph once migrations are complete.</p>
<hr>
<h2>Current architecture</h2>
<p>All three active strategy contracts (<code>TopDawgStrategy</code>, <code>TopDawgPartnerStrategy</code>, <code>FixedPriceStrategy</code>) route funds to the v5 RevNet terminal (<code>0x2dB6d704058E552DeFE415753465df8dF0361846</code>) via <code>IJBMultiTerminal.pay()</code>.</p>

Contract | Current behavior | Indexing
-- | -- | --
TopDawgPartnerStrategy | 62% to partner beneficiary, 38% to RevNet. beneficiaryAddress and percentToBeneficiary are mutable. | Subgraph
TopDawgStrategy | 100% to RevNet. No beneficiary split. revNetTerminal / revNetProjectId are immutable. | Subgraph
FixedPriceStrategy | 100% to RevNet. No beneficiary address. revNetTerminal / revNetProjectId are immutable. | Subgraph
v1.0 Leaderboard.sol | 62/38 split, immutable RevNet config. percentToBeneficiary is mutable (admin access confirmed). | Direct RPC


<hr>
<h2>Goals</h2>
<ol>
<li><strong>Immediate:</strong> Stop all ETH flowing to <code>0x2dB6d704058E552DeFE415753465df8dF0361846</code> from every Markee contract</li>
<li><strong>Interim:</strong> Route 100% of funds to the <code>beneficiaryAddress</code> configured on each Markee</li>
<li><strong>Standardize:</strong> All redeployed contracts use v1.0 architecture — direct RPC, no subgraph dependency</li>
<li><strong>Preserve history:</strong> New deployments seed historical state (total funds, message count, last owner/message) from legacy contracts via a one-time <code>initializeHistory()</code> admin function</li>
<li><strong>Forward-compatible:</strong> The v6 upgrade is a targeted admin config update — no code changes, no redeployment</li>
</ol>
<hr>
<h2>Immediate stopgap (no redeployment required)</h2>
<h3>Legacy strategy contracts (<code>TopDawgPartnerStrategy</code> instances)</h3>
<p><code>TopDawgPartnerStrategy</code> already has an <code>if (revNetAmount &gt; 0)</code> guard that skips the RevNet call when the amount is zero, and a mutable <code>percentToBeneficiary</code> with an admin setter.</p>
<p><strong>Action:</strong> Call <code>setPercentToBeneficiary(10000)</code> on each deployed <code>TopDawgPartnerStrategy</code> instance today. Routes 100% to the existing partner beneficiary address; RevNet call is skipped cleanly.</p>
<h3>v1.0 contracts (<code>Leaderboard.sol</code> instances)</h3>
<p>Admin access confirmed and <code>percentToBeneficiary</code> is mutable on v1.0.</p>
<p><strong>Action:</strong> Call the equivalent percent setter on each deployed v1.0 <code>Leaderboard</code> instance to route 100% to the configured beneficiary. No redeployment needed. These contracts stay in place and are not replaced as part of this migration.</p>
<p><code>TopDawgStrategy</code> and <code>FixedPriceStrategy</code> have immutable RevNet config — they require new deployments (see below).</p>
<hr>
<h2>Contract changes</h2>
<h3>Shared: history preservation via <code>initializeHistory()</code></h3>
<p>All new contract deployments must include a one-time admin function to seed historical state from the legacy contract being replaced:</p>
<pre><code class="language-solidity">function initializeHistory(
    uint256 _totalFundsRaised,
    uint256 _totalMessagesBought,
    address _lastMessageOwner,
    string calldata _lastMessage
) external onlyAdmin {
    require(!historyInitialized, "Already initialized");
    totalFundsRaised = _totalFundsRaised;
    totalMessagesBought = _totalMessagesBought;
    lastMessageOwner = _lastMessageOwner;
    lastMessage = _lastMessage;
    historyInitialized = true;
}
</code></pre>
<ul>
<li>Call immediately after deployment, before going live</li>
<li>Values are read from the legacy contract (or subgraph) at migration time</li>
<li><code>historyInitialized</code> flag makes this a one-time operation — cannot be overwritten</li>
<li>This same pattern carries forward to v6: <code>initializeHistory()</code> seeds the v6 contract from the v1.0 deployment's final state</li>
</ul>
<h3><code>TopDawgStrategy.sol</code> — new deployment required</h3>
<p><strong>Current:</strong> routes 100% to RevNet, no beneficiary split, <code>revNetTerminal</code>/<code>revNetProjectId</code> are immutable. Indexed via subgraph.</p>
<p><strong>Changes:</strong></p>
<ul>
<li>Rewrite as v1.0-style contract (direct RPC, no subgraph)</li>
<li>Change <code>revNetTerminal</code> and <code>revNetProjectId</code> from <code>immutable</code> to mutable storage variables</li>
<li>Add admin setters: <code>setRevNetTerminal(address)</code> and <code>setRevNetProjectId(uint256)</code></li>
<li>Add <code>address public beneficiaryAddress</code> (set to Markee Cooperative multisig <code>0xAf4401E765dFf079aB6021BBb8d46E53E27613DB</code> at deployment) + <code>setBeneficiaryAddress(address)</code> setter</li>
<li>Add <code>uint256 public percentToBeneficiary</code> (basis points) + <code>setPercentToBeneficiary(uint256)</code> setter</li>
<li>Add <code>bool public revNetEnabled</code> (default <code>false</code>) + <code>setRevNetEnabled(bool)</code> setter</li>
<li>Add <code>initializeHistory()</code> (see above)</li>
<li>Update <code>_splitAndDistributeFunds()</code>:
<ul>
<li>When <code>revNetEnabled == false</code>: send 100% to <code>beneficiaryAddress</code>, skip RevNet call</li>
<li>When <code>revNetEnabled == true</code>: apply <code>percentToBeneficiary</code> split, call RevNet with remainder (same <code>if (revNetAmount &gt; 0)</code> guard as partner strategy)</li>
</ul>
</li>
<li>Deploy new instances; seed history; migrate all existing Markees via <code>changePricingStrategy()</code> on <code>Markee.sol</code></li>
</ul>
<h3><code>TopDawgPartnerStrategy.sol</code> — new deployment required for v6 readiness</h3>
<p><strong>Stopgap available now:</strong> Call <code>setPercentToBeneficiary(10000)</code> on each deployed instance.</p>
<p><strong>For proper fix (needed for v6 switchover):</strong></p>
<ul>
<li>Rewrite as v1.0-style contract (direct RPC, no subgraph)</li>
<li>Change <code>revNetTerminal</code> and <code>revNetProjectId</code> from <code>immutable</code> to mutable storage variables</li>
<li>Add admin setters: <code>setRevNetTerminal(address)</code> and <code>setRevNetProjectId(uint256)</code></li>
<li>Add <code>bool public revNetEnabled</code> (default <code>false</code>) + <code>setRevNetEnabled(bool)</code> setter</li>
<li>Add <code>initializeHistory()</code> (see above)</li>
<li>Update <code>_splitAndDistributeFunds()</code> to explicitly skip RevNet call when <code>revNetEnabled == false</code></li>
<li>Deploy new instances; seed history; migrate</li>
</ul>
<h3><code>FixedPriceStrategy.sol</code> — new deployment required</h3>
<p><strong>Current:</strong> routes 100% to RevNet, no beneficiary address. Indexed via subgraph.</p>
<p><strong>Changes:</strong></p>
<ul>
<li>Rewrite as v1.0-style contract (direct RPC, no subgraph)</li>
<li>Same mutable <code>revNetTerminal</code> / <code>revNetProjectId</code> + setters</li>
<li>Add <code>address public beneficiaryAddress</code> + setter</li>
<li>Add <code>bool public revNetEnabled</code> (default <code>false</code>) + setter</li>
<li>Add <code>initializeHistory()</code> (see above)</li>
<li>Update <code>changeMessage()</code> payment logic: when <code>revNetEnabled == false</code>, send full <code>msg.value</code> to <code>beneficiaryAddress</code>; when <code>revNetEnabled == true</code>, call RevNet with full amount (or apply split ratio if added later)</li>
<li>Deploy new instances; seed history; update <code>CONTRACTS</code> config in frontend</li>
</ul>
<h3>v1.0 contracts (<code>Markee.sol</code>, <code>Leaderboard.sol</code>, <code>LeaderboardFactory.sol</code>)</h3>
<p>Admin access confirmed. <code>percentToBeneficiary</code> is mutable — using Option B stopgap, no redeployment needed.</p>
<p><strong>Action:</strong> Call the percent setter on each deployed <code>Leaderboard</code> instance to route 100% to the configured beneficiary. These contracts stay in place and are not replaced as part of this migration.</p>
<hr>
<h2>Migration sequence per contract</h2>
<p>For each legacy strategy contract being redeployed:</p>
<ol>
<li>Read current state from legacy contract: <code>totalFundsRaised</code>, <code>totalMessagesBought</code>, <code>lastMessageOwner</code>, <code>lastMessage</code></li>
<li>Deploy new contract</li>
<li>Call <code>initializeHistory()</code> with values from step 1</li>
<li>Call <code>setPercentToBeneficiary(10000)</code> (interim — 100% to beneficiary)</li>
<li>Call <code>setBeneficiaryAddress(...)</code> to configure the correct address</li>
<li>Confirm <code>revNetEnabled</code> is <code>false</code> (should be default)</li>
<li>Migrate Markee instances to the new strategy via <code>changePricingStrategy()</code></li>
<li>Update <code>CONTRACTS</code> config in frontend</li>
<li>Verify no funds reach <code>0x2dB6d704058E552DeFE415753465df8dF0361846</code></li>
</ol>
<hr>
<h2>Frontend changes</h2>
<h3><code>frontend/lib/contracts/addresses.ts</code></h3>
<ul>
<li>Remove the <code>REVNET_CONFIG</code> block (project IDs 119/63/62/56 per chain, <code>JB_TERMINAL</code> address)</li>
<li>Add a <code>REVNET_V6_CONFIG</code> block (commented out / empty) as a placeholder — v6 cutover becomes a one-line fill-in</li>
<li>Update strategy contract addresses in <code>CONTRACTS</code> once new contracts are deployed</li>
</ul>
<h3><code>frontend/components/modals/BuyMessageModal.tsx</code></h3>
<ul>
<li>Remove the <code>PHASES</code> array (token emission rate schedule, lines 79–99) and <code>calculateMarkeeTokens()</code> function</li>
<li>Remove "You'll receive X MARKEE tokens" display from the modal UI</li>
<li>Update revenue split display: <code>"62% [beneficiary] / 38% Markee Cooperative"</code> → <code>"100% [beneficiary]"</code></li>
<li>Remove <code>useReadContract</code> call for <code>beneficiaryAddress</code> if no longer needed for token calc</li>
</ul>
<h3><code>frontend/components/modals/TopDawgModal.tsx</code></h3>
<ul>
<li>Remove <code>calculateMarkeeTokens()</code> and all token emission phase logic (lines 92–104)</li>
<li>Remove "MARKEE tokens" display from bid confirmation UI</li>
<li>Update split display copy to reflect 100% to beneficiary</li>
</ul>
<h3><code>frontend/lib/contracts/usePartnerMarkees.ts</code></h3>
<ul>
<li>Update <code>fundingSplit</code> strings: <code>"62% to [Partner] / 38% to Markee Cooperative"</code> → <code>"100% to [Partner]"</code></li>
<li>Remove or set <code>percentToBeneficiary</code> to <code>10000</code> in partner config objects</li>
</ul>
<h3><code>frontend/app/how-it-works/page.tsx</code></h3>
<ul>
<li>Remove or replace "View token terms on Revnets" link (line 391, <code>revnet.app/v5:base:119/terms</code>)</li>
<li>Remove or replace "See project on Revnets" link (line 403)</li>
<li>Update the RevNet FAQ section (lines 398–406): explain that MARKEE token issuance is temporarily paused while RevNet v5 is replaced with v6; link to announcement once available</li>
<li>Remove any copy describing the 62/38 split as permanent or immutable</li>
</ul>
<h3><code>frontend/app/owners/page.tsx</code></h3>
<ul>
<li>Remove RevNet v5 links (lines 81 and 129, both pointing to <code>revnet.app/v5:base:119</code>)</li>
<li>Replace with a placeholder note: "v6 RevNet coming soon"</li>
</ul>
<h3><code>frontend/components/wallet/TokenBalance.tsx</code></h3>
<ul>
<li>Keep this component — users still hold pre-pause tokens</li>
<li>Remove or update the broken ops link (line 64, <code>app.revnet.eth.sucks/v5:base:119/ops</code>)</li>
<li>Replace link with static text or a "v6 coming soon" note</li>
</ul>
<h3><code>frontend/app/api/openinternet/leaderboards/route.ts</code></h3>
<ul>
<li>Update <code>percentToBeneficiary</code> values in server-side leaderboard config to <code>10000</code> where applicable</li>
<li>Remove any RevNet-specific config fields</li>
</ul>
<hr>
<h2>Subgraph deprecation</h2>
<p>All redeployed contracts use v1.0 architecture and are indexed via direct RPC — no subgraph dependency. Once all legacy strategy contract instances are migrated:</p>
<ol>
<li>Confirm no active Markees still point to subgraph-indexed contracts</li>
<li>Remove subgraph queries from frontend (Apollo Client calls, <code>useQuery</code> hooks referencing subgraph data)</li>
<li>Archive the subgraph — do not redeploy or update</li>
<li>Remove subgraph-related env vars and config from the frontend once confirmed clean</li>
</ol>
<p>The subgraph does not need schema updates as part of this migration — it will simply stop receiving new events once legacy contracts are migrated off.</p>
<hr>
<h2>V6 upgrade path</h2>
<p>Once v6 RevNet is deployed, the full cutover is admin calls only — no code changes, no redeployment:</p>
<ol>
<li>Call <code>setRevNetTerminal(v6TerminalAddress)</code> on each strategy contract</li>
<li>Call <code>setRevNetProjectId(v6ProjectId)</code> on each strategy contract</li>
<li>Call <code>setPercentToBeneficiary(splitRatio)</code> to restore the desired split (e.g. <code>6200</code> for 62/38)</li>
<li>Call <code>setRevNetEnabled(true)</code> on each strategy contract</li>
<li>Populate <code>REVNET_V6_CONFIG</code> in <code>addresses.ts</code> with new project IDs</li>
<li>Re-add MARKEE token issuance display in modal components</li>
<li>For any v1.0 <code>Leaderboard</code> contracts still active at v6 time: read their current state, deploy v6-ready replacement, call <code>initializeHistory()</code> with current values, migrate</li>
</ol>
<hr>
<h2>Out of scope</h2>
<ul>
<li>Actual v6 RevNet deployment or configuration</li>
<li>Changes to the MARKEE token address or supply schedule</li>
<li>Changes to the ecosystem / Superfluid / GitHub integration APIs</li>
</ul>
<hr>
<h2>Acceptance criteria</h2>
<ul>
<li>[ ] No ETH flows to <code>0x2dB6d704058E552DeFE415753465df8dF0361846</code> (v5 terminal) from any Markee contract</li>
<li>[ ] 100% of funds reach the configured <code>beneficiaryAddress</code> for each Markee</li>
<li>[ ] Non-partner Markees route to Markee Cooperative multisig <code>0xAf4401E765dFf079aB6021BBb8d46E53E27613DB</code></li>
<li>[ ] All frontend UI correctly shows 100% to beneficiary (no "38% Markee Cooperative" split display)</li>
<li>[ ] No broken RevNet v5 links in the UI</li>
<li>[ ] MARKEE token issuance UI is cleanly removed or replaced with an interim message</li>
<li>[ ] <code>TokenBalance.tsx</code> kept; broken ops link removed or replaced</li>
<li>[ ] New contracts have mutable <code>revNetTerminal</code> / <code>revNetProjectId</code> + <code>revNetEnabled</code> flag</li>
<li>[ ] New contracts include <code>initializeHistory()</code>; history is seeded before going live</li>
<li>[ ] <code>historyInitialized</code> flag prevents re-seeding</li>
<li>[ ] All redeployed contracts use v1.0 architecture (direct RPC, no subgraph)</li>
<li>[ ] Subgraph decommissioned once all legacy instances are migrated</li>
<li>[ ] V6 upgrade is achievable via admin calls only — no code changes, no redeployment</li>
</ul></body></html>

Navigation Menu

Uh oh!

Uh oh!

Stop RevNet v5 fund routing, interim 100% beneficiary split + v6 upgrade path #4

Stop RevNet v5 fund routing — interim 100% beneficiary split + v6 upgrade path

Background

Current architecture

Goals

Immediate stopgap (no redeployment required)

Legacy strategy contracts (`TopDawgPartnerStrategy` instances)

v1.0 contracts (`Leaderboard.sol` instances)

Contract changes

Shared: history preservation via `initializeHistory()`

`TopDawgStrategy.sol` — new deployment required

`TopDawgPartnerStrategy.sol` — new deployment required for v6 readiness

`FixedPriceStrategy.sol` — new deployment required

v1.0 contracts (`Markee.sol`, `Leaderboard.sol`, `LeaderboardFactory.sol`)

Migration sequence per contract

Frontend changes

`frontend/lib/contracts/addresses.ts`

`frontend/components/modals/BuyMessageModal.tsx`

`frontend/components/modals/TopDawgModal.tsx`

`frontend/lib/contracts/usePartnerMarkees.ts`

`frontend/app/how-it-works/page.tsx`

`frontend/app/owners/page.tsx`

`frontend/components/wallet/TokenBalance.tsx`

`frontend/app/api/openinternet/leaderboards/route.ts`

Subgraph deprecation

V6 upgrade path

Out of scope

Acceptance criteria

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Contract	Current behavior	Indexing
TopDawgPartnerStrategy	62% to partner beneficiary, 38% to RevNet. beneficiaryAddress and percentToBeneficiary are mutable.	Subgraph
TopDawgStrategy	100% to RevNet. No beneficiary split. revNetTerminal / revNetProjectId are immutable.	Subgraph
FixedPriceStrategy	100% to RevNet. No beneficiary address. revNetTerminal / revNetProjectId are immutable.	Subgraph
v1.0 Leaderboard.sol	62/38 split, immutable RevNet config. percentToBeneficiary is mutable (admin access confirmed).	Direct RPC

Uh oh!

Uh oh!

Stop RevNet v5 fund routing, interim 100% beneficiary split + v6 upgrade path #4

Description

Stop RevNet v5 fund routing — interim 100% beneficiary split + v6 upgrade path

Background

Current architecture

Goals

Immediate stopgap (no redeployment required)

Legacy strategy contracts (TopDawgPartnerStrategy instances)

v1.0 contracts (Leaderboard.sol instances)

Contract changes

Shared: history preservation via initializeHistory()

TopDawgStrategy.sol — new deployment required

TopDawgPartnerStrategy.sol — new deployment required for v6 readiness

FixedPriceStrategy.sol — new deployment required

v1.0 contracts (Markee.sol, Leaderboard.sol, LeaderboardFactory.sol)

Migration sequence per contract

Frontend changes

frontend/lib/contracts/addresses.ts

frontend/components/modals/BuyMessageModal.tsx

frontend/components/modals/TopDawgModal.tsx

frontend/lib/contracts/usePartnerMarkees.ts

frontend/app/how-it-works/page.tsx

frontend/app/owners/page.tsx

frontend/components/wallet/TokenBalance.tsx

frontend/app/api/openinternet/leaderboards/route.ts

Subgraph deprecation

V6 upgrade path

Out of scope

Acceptance criteria

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions

Legacy strategy contracts (`TopDawgPartnerStrategy` instances)

v1.0 contracts (`Leaderboard.sol` instances)

Shared: history preservation via `initializeHistory()`

`TopDawgStrategy.sol` — new deployment required

`TopDawgPartnerStrategy.sol` — new deployment required for v6 readiness

`FixedPriceStrategy.sol` — new deployment required

v1.0 contracts (`Markee.sol`, `Leaderboard.sol`, `LeaderboardFactory.sol`)

`frontend/lib/contracts/addresses.ts`

`frontend/components/modals/BuyMessageModal.tsx`

`frontend/components/modals/TopDawgModal.tsx`

`frontend/lib/contracts/usePartnerMarkees.ts`

`frontend/app/how-it-works/page.tsx`

`frontend/app/owners/page.tsx`

`frontend/components/wallet/TokenBalance.tsx`

`frontend/app/api/openinternet/leaderboards/route.ts`