Documentation

Fee-Free CHMPSTR Transfers

Transfer $CHMPSTR between wallets without the 10% transaction fee. Official service by the Chimpers team.

💸
0% Fee
Skip the 10% tax
✍️
Single Signature
Powered by Permit2
🔒
Secure Design
Contract-based
🚫
DEX Blocked
Anti-abuse protection
🎯 Purpose

Why This Service?

$CHMPSTR has a 10% transfer fee built into the token contract. While this mechanism serves the tokenomics, it creates friction for legitimate use cases:

🔐
Cold Storage
Moving to hardware wallets
🏠
Wallet Migration
Transferring to new wallets
🎁
P2P Transfers
Sending to friends/family

✅ This service allows fee-free transfers for legitimate wallet-to-wallet movements.

⚙️ Mechanism

How It Works

FROM
Your Wallet
→
VIA
Relay Contract
✓ Distributor
→
TO
Recipient
1
Relay Contract is a Registered Distributor
The CHMPSTR token contract exempts distributors from transfer fees.
2
Distributor Involved = 0% Fee
If either the sender or receiver is a distributor, the fee is bypassed.
3
User → Relay → Recipient
This routing enables fee-free transfers to any wallet.
🏗️ Architecture

Why a Smart Contract Instead of an EOA?

We could have registered a team wallet as a distributor. Here's why we chose a contract instead:

❌ EOA (Regular Wallet)
  • •Has private key — single point of failure
  • •No built-in rules — can send anywhere
  • •If compromised — attacker can dump on DEX fee-free
✅ Smart Contract
  • •No private key — cannot be "stolen"
  • •Enforced rules — DEX addresses blocked on-chain
  • •Deterministic — only does what code allows

💡 A smart contract is essentially a "wallet without a private key".
It can only execute predefined logic — nothing more, nothing less.

⚡ Technology

Permit2: One Signature, One Transaction

❌ Traditional Flow
1approve() txGas 💸
2transfer() txGas 💸
2 signatures + 2 gas fees
✅ Permit2 Flow
1Off-chain signatureFree ✓
2relay() txGas 💸
1 signature + 1 gas fee
💰
Save Gas
No separate approve tx
🔐
More Secure
No unlimited approvals
🎯
Exact Amount
Signature specifies amount
💡 Permit2 is Uniswap's token approval standard, widely adopted across DeFi.
🛡️ Security

Anti-Abuse Measures

The primary concern: preventing users from using this service to sell on DEXes without the 10% fee. Here's how we address it:

🔐Server Signature Required

Every relay request requires a server-signed approval. Direct contract calls without server signature will revert.

🚫DEX Blacklist (On-Chain)

20 DEX addresses blocked at contract level: Uniswap, SushiSwap, 1inch, Balancer, Curve, and more.

📝EOA Only (No Contracts)

Transfers to contract addresses are blocked. Only personal wallets (EOA) are supported. This prevents DEX pairs and other smart contracts from receiving fee-free transfers.

⏱️Rate Limiting

5 requests per wallet per minute. 10 requests per IP per minute. Prevents bulk abuse.

🤖Bot Protection

Cloudflare Turnstile integration blocks automated requests.

🔒 Bottom line: Using this service to sell on DEXes fee-free is not possible.

✅ Safety

What Am I Signing?

The signature is a Permit2 PermitWitnessTransferFrom with the following constraints:

Signature Scope
"I permit exactly X CHMPSTR to be sent to 0xRecipient"
• Valid for 10 minutes
• Single use (nonce-based)
• Chain-specific (no cross-chain replay)
✓ Fixed Amount
Only the exact amount specified
✓ Fixed Recipient
Cannot redirect to another address
✓ Time-Limited
Expires after 10 minutes
✓ Single Use
Nonce prevents replay
✓ Chain-Bound
chainId included in signature
✓ No Unlimited Approval
Not a blanket permission
📱 Usage

How to Use

1
Connect Wallet
Click "Connect Wallet" and approve the connection
2
Enter Details
Input recipient address and amount
3
Click Transfer
Your wallet will prompt for a signature
4
Sign & Done
One signature triggers the transfer (gas fee applies)
🧪 Testing

Currently on Testnet

The service is live on Sepolia testnet. Test tokens have no real value — feel free to experiment.

Getting Started
1Add Sepolia Network — Click the button in the app
2Get Test ETH — From Google Cloud faucet (linked in app)
3Get Test Tokens — Mint 10,000 test CHMPSTR
4Show in Wallet — Add token to MetaMask
5Test Transfer — Send to another wallet

💡 Test tokens are free and unlimited. Mint as many as you need.

🗺️ Roadmap

What's Next

🧪
Testnet
← Current
✅
Team Testing
Bug fixes
🚀
Mainnet
Production launch
🔍 Audit

Security Review

The contract and server code underwent thorough security review before deployment.

Audit Scope
  • •CHMPSTRRelayV3 Smart Contract
  • •Server Signature Service
  • •Permit2 Integration
  • •DEX Filtering Logic
Audit Methods
  • •Slither — static analysis
  • •Foundry Fuzz — 100,000 randomized test runs
  • •Manual Review — line-by-line code inspection
  • •Result — 0 Critical, 0 High issues
Verified Security Features
✓ Dual Signature Verification✓ Replay Protection✓ Token Validation✓ DEX Filtering✓ Reentrancy Guard✓ Overflow Protection

Ready to Test?

Report any issues you find!

Launch App →
⚠️ Disclaimer

This service is provided "as is" without warranty of any kind. While the smart contract and server code have been thoroughly reviewed and tested, the Chimpers team accepts no liability for any loss of funds, misuse, or damages resulting from the use of this tool. Users interact with the smart contract at their own risk. Always verify transaction details before signing. The security audit was performed using automated tools (Slither, Foundry Fuzz) and manual code review — no independent third-party audit firm was engaged.