The mall

Ink Mall is a food court of pixel restaurants on Ink. Every shop is a franchise run by an NFT community: its collection is the staff, its coin buys the ingredients, and every shop pays its players in the same $HAPPY. The rules are the same in every shop; only the staff, the coin and the food differ. One weekly board and one vault rank every player across the whole mall.

A shop’s own words are used on its own pages — a Krak Head bakes pies in a bakery — but these docs say staff, meals and kitchens, and mean every shop.

Quick start

1. Hold one of the shop’s NFTs. A Nobody for Nobodies Franchise, a Krak Head for the Krak Mask Bakery. Its rarity decides how fast it works — never how much it earns.
2. Connect and sign in on the shop’s Play page. Signing in is a free message signature; it sends no transaction and touches no tokens. A sign-in is per site, so the mall’s own pages ask for one too.
3. Open your kitchen. In a partner’s shop, holding the NFT is the whole ticket. At Nobodies it is free with 3 or more Nobodies; otherwise a one-time licence of $3 of $UID, paid from your wallet and burned.
4. Lock your staff for a term — 24 hours, 1 week, 1 month. You send each NFT into the shop’s time lock, where nobody can move or sell it until the term ends. After that, only your wallet can renew it or take it back.
5. Buy ingredients with the shop’s coin, from your wallet. You approve exactly the amount, then buy. The coin is swapped into $HAPPY in the same transaction and held for you. No $UID yet? Buy it with ETH on the Buy tokens page; a partner’s coin is bought on its own Play page.
6. Start a session. Put your locked staff on the counter. When it finishes, close the till — or turn on auto-refuel and let sessions chain.
7. Claim. A session’s $HAPPY unlocks 24 hours after the newest crew member was locked. Claim it, and separately claim the wMCDx dividends it earned while waiting.

Game rules

Staff and sessions

Every shop has three stations, in a fixed 2:1:1 recipe — 4 units to a meal. Each unit costs a fixed amount of the shop’s coin, so every meal costs the same in that shop at every tier.

A session lasts 60 minutes divided by the total speed of its crew. Rarity only changes the clock: two crews of any rarity that spend the same coin earn the same weight. Every collection’s own trait names map onto these five tiers.

• A staff NFT works one counter at a time, in one kitchen.
• A session cannot be stopped. Its ingredients are used across the whole session.
• Every crew member must be locked by you; the game reads the shop’s time lock on-chain when a session starts.
• A session must finish before every crew member’s lock ends. A session that would run past a lock does not start, so no NFT can be taken out and sold while it is still cooking.

Locking terms. Staff must be locked before they can work. Longer terms earn more vault weight. A term cannot be ended early — not by you, the game or the developer. A crew earns the lowest multiplier among its members.

• Locking: on the shop’s Play page, pick your staff and a term. Your wallet asks you to confirm once for each NFT. No approval is ever needed.
• When a term ends: renew it for a new term in one transaction (the NFTs never leave the lock), or unlock them back to your wallet.
• Only lock through the Play page. An NFT sent to a lock by a plain transfer, without naming a term, is not recorded — and the contract has no function that could return it.

Tiers and kitchens

Your tier sets how many ingredients a session holds, and so how many meals it serves. Meals earned are a gate only play can pass; the price is paid in $HAPPY from your wallet, and it is the same ladder in every shop.

Bought once, for the whole mall. A tier or a kitchen you buy in any shop is yours in every shop you open. The gate is checked where you buy: meals earned in that shop, and its own staff held.

Extra kitchens run sessions side by side. Each needs its own crew, so a kitchen also requires holding enough of the shop’s NFTs.

Seats are per shop: a kitchen seats 3 Nobodies, a bakery seats one Krak Head.

Pantry and auto-refuel

• Ingredients are bought ahead into a pantry that holds up to 10 sessions at your tier — 20 at the Premium tier. Anything bought beyond that is held for you and moves in as the pantry empties.
• A shop takes at most 10,000 units in one purchase. A bigger order — a Premium pantry filled from empty is 12,000 — is sent as two purchases in a row, with one approval for the whole order.
• With auto-refuel on, a finished session closes itself and the next one starts at the moment the last one ended — even while you are away — as long as the pantry holds a full load and every crew member’s lock outlasts the next session.

The economy

Earning $HAPPY

1. You buy ingredients with the shop’s coin. The shop swaps all of it into $HAPPY in the same transaction, through real pools — never a price the game made up.
2. The $HAPPY goes straight into the shop’s claim contract and is credited to you: exactly what arrived, never an estimate.
3. Each session carries its share of that $HAPPY. When it finishes, it is added to what you have earned.
4. It unlocks 24 hours after the most recently locked crew member was locked (or renewed). Rotating a freshly locked NFT into an old crew restarts the wait for that session.
5. You claim from your wallet. A claim pays whatever has unlocked and has not been paid; asking twice pays nothing extra.

Dividends while you wait. $HAPPY earns wMCDx dividends, including the $HAPPY waiting for you in a claim contract. Each shop’s claim contract collects its own, shared among that shop’s players by how much of their $HAPPY waited and for how long — counting the lower balance across each period, so $HAPPY bought moments before a split starts earning from the next one. Claim them with the separate “Claim dividends” button.

Trading fees

Every trade of $UID or $HAPPY on Sentry pays a trading fee (2% once the launch fee has decayed), split by Sentry:

The buyback spends its WETH on $HAPPY at most 0.005 ETH at a time and at most once every 1 hour: 70% of what it buys is burned and 30% funds the weekly vault. None goes to the developer. A partner’s coin trades on its own venue with its own fees; the mall takes nothing from those trades.

Paying for upgrades and the licence

Tiers and kitchens cost a fixed number of $HAPPY, paid from your wallet to the shop’s own payments contract. What that payment becomes is fixed in each shop’s contract:

• The Nobodies licence (holders of fewer than 3 Nobodies) is $3 of $UID, 100% burned. Partner shops have no licence.
• The game gives you a signed quote valid for 10 minutes. You pay exactly that amount; the contract refuses anything else, any other wallet, and any expired quote. The upgrade is credited once the payment is a few blocks deep — in every shop at once.

How prices are set

• $UID and $HAPPY prices are read directly from their Sentry pools; a partner coin’s from its Uniswap V2 pair’s reserves; ETH/USD from Chainlink’s feed on Ink.
• The game records prices every 5 minutes and keeps a 24-hour history. Nothing dollar-priced is priced until it has 12 recordings (an hour), so a short spike cannot set a price — that is also why a newly opened shop cannot quote ingredients for its first hour.
• Upgrades are priced in $HAPPY, and get cheaper as $HAPPY grows. A rung’s cost falls with the square root of the market cap, so the dollar price rises far more slowly than the token does — a 167× run costs about 13× more, not 167×. The price holds still inside a market-cap band and moves only when the 24-hour median crosses an edge, so it never changes mid-session.
• The licence is priced at the lower of the live and median $UID price, so pumping $UID never makes it cheaper.
• Purchases set their minimums from both the live and the 24-hour median price, so a sudden move cannot be used against them.
• The buyback sets its minimum from the lower of the live price and a 2-hour median: it will not buy at a new, higher price until that price has held for about an hour.

The board and the vault

One board, one vault, every shop. Every finished session in every shop counts on the same weekly board, and the same vault pays the winners. A wallet’s weight is added across every shop it played; the board shows a letter per shop beside it.

• Weight — from week 2 on, the $HAPPY your finished sessions delivered into a claim contract, × your crew’s locking multiplier. That is the one unit every shop shares, so a pie and a burger compare without any price oracle. (Week 1 ranked the coin spent at Nobodies, the only shop then open.) There is no time factor.
• Every week the top 50 players by weight share the vault. With n winners, rank r receives n + 1 − r shares: first place gets 50 times what fiftieth gets. Tied players share their ranks.
• The vault pays only what it holds and does not already owe. Rounding dust and weeks with no players roll into the next week. It is fed by the buyback (30% of what it buys) and by every partner shop’s upgrade split.
• A one-time launch bonus is released in 4 equal weekly parts.
• Week 1 started Fri, 18 Sep 2026 00:00:00 GMT. Weeks close automatically; claim your prize from any shop’s Play page.

Krak Meal Toys

• 333 toys, minted free by players: every 1,000 meals served — in any shop — earns one mint spot, and no wallet can ever mint more than 4. What is in a pack is drawn after the week’s toys are all minted, from a block hash named before it existed. See the Toys page for the commitment and the proof.
• Toys earn. Every partner shop sends a slice of its upgrade payments to one mall-wide toys pool, split among toy holders every ten minutes by toys held and for how long. Claim it from the Toys page.

The contracts

None of the mall’s contracts is upgradeable — there is no proxy that could swap their code. The owner (the developer wallet) has only the powers listed. Each shop deploys the same five contracts for itself; the tokens, the vault, the buyback and the toys are the mall’s.

The mall’s

$HAPPY 0xCF118c627cdd1e1A7A676c3fdaCF950Cd48025F9
Vault 0x65343230f8535d5147e4aabe10ad74e23308f49f
Buyback 0x26dab573cd546e80db4be2bf4c1331f8c5037d14
Krak Meal Toys 0x9170b19eb42a8de81b0b62dc37152032ba45407a
Toys pool 0x2ea6eb9c748e3af25f1fda1c6d352c2d0b92c361
WETH → $HAPPY swapper 0xf162e02ca72443addf6ca860923d5df80b2f3a14

• Vault: holds the weekly prize pot and pays prizes on the server’s signature, 100,000,000 $HAPPY a day at most. The wMCDx dividends its own $HAPPY earns go to the developer wallet. Owner can: pause; replace the signing key; announce retirement, after which claims cannot be paused for 7 days and then the balance can be swept.
• Buyback: receives the creator share of every $UID and $HAPPY trade, in WETH. The keeper wallet trades at most 0.005 ETH per hour into $HAPPY with a minimum output; the contract burns 70% and sends 30% to the vault. Owner can: replace the keeper; start a 7-day public migration. Both tokens’ one-time Sentry fee switch has been used to point fees here, so only Sentry could move the fee stream again.
• Krak Meal Toys: the collection; mints only with the server’s signature for spots earned by play, never more than 4 per wallet. Toys pool: a claim contract that pays toy holders their share on the server’s signature.
• Swap adapters (this one and each shop’s): fill completely or revert. Hold nothing. No owner.

Every shop’s

• Time lock: holds the shop’s NFTs sent in by their holders, each with a term. Accepts only that one collection, fixed forever. Only the wallet that locked an NFT can ever take it back, and only once its term has ended — no function lets anyone else move one, the developer included. A running term cannot be shortened or extended; an ended one can be renewed in place. Owner can: pause new locks and renewals (unlocking is never paused); change terms for future locks only, never above 31 days or 2×; open a one-way emergency exit that lets every holder take their NFTs out at once. Cannot: move, keep or trap an NFT, or close the emergency exit again.
• Ingredient shop: takes exactly units × the shop’s unit price in its coin and swaps all of it into $HAPPY for the claim contract. Credits you with the $HAPPY that actually arrived, and refuses if it is below your minimum. Holds nothing between transactions; the price, swap route and destination are fixed in code. Owner can: pause new purchases. Cannot: change prices, redirect funds, or withdraw anything.
• Claim contract: holds the $HAPPY bought with the shop’s ingredients until players claim it. Pays only with the game server’s signature, for a running total — nothing is ever paid twice. Collects the wMCDx dividends its $HAPPY earns and pays each player their share on a separate claim. Daily limits (100,000,000 $HAPPY and 5 wMCDx a day at Nobodies) cap what a leaked signing key could pay out. Owner can: pause claims; replace the signing key; announce retirement, after which claims cannot be paused for 7 days and then the remaining balance can be swept.
• Upgrade payments: pay a signed quote once, from the wallet it names, before it expires, for exactly its amount, and the contract splits it as the table above says — burned to 0x…dEaD, to the vault, to the shop’s owner, to the toys pool. Holds nothing. Owner can: pause, replace the signing key. Cannot: change the split.

Swaps on the Buy tokens page (not our contracts)

Uniswap Universal Router: 0x112908dac86e20e7241b0927479ea3bf935d1fa0
Sentry xStock exit router: 0xAa2fd890Df0AAe46009B2850A822c601E84bC65a

• Buying $UID or $HAPPY with ETH is one transaction to Uniswap’s own router: it wraps your ETH, swaps it in the token’s Sentry pool and sends you the tokens. The game prices it the moment before your wallet asks, and the swap cancels itself unless you receive at least 98% of that price. No approval is needed.
• Buying a partner’s coin with ETH, on its Play page, is one transaction to the Uniswap V2 router its pair trades on, with the same 98% floor.
• Selling wMCDx for ETH goes through Sentry’s exit router, which keeps 1% of the ETH. You approve exactly the amount you sell, and the sale also cancels itself below 98% of its price.
• The game adds no fee to any of these, and none of the routers is run by this project.

Public addresses

The mall’s own, all on Ink (chain id 57073). Each shop’s contracts are listed with the shop, above. Click any address to open it in the explorer.

The mall’s contracts were deployed Tue, 15 Sep 2026 02:23:45 GMT; the toys Fri, 18 Sep 2026 00:05:52 GMT. Each shop’s date is with its contracts.

Quotrons builder codes

$UID and $HAPPY are registered with Quotrons and attested on-chain, so the volume the mall routes through their rails is attributed to it rather than being anonymous.

Attested from the developer wallet to the builder registry, where anyone can check it. Every $UID and $HAPPY trade already sends 30% of its fee to the Quotrons terminal pot and growth sink, through Sentry’s hook — see trading fees.

What you trust

• The game server runs every shop: it credits purchases, times sessions, and signs claims and quotes. If it were wrong or compromised, it could approve claims up to the daily limits until the owner pauses the contracts and replaces its key.
• The developer wallet owns the contracts — the mall’s and every shop’s. It can pause them, replace the server keys, and retire the claim contracts after a 7-day public notice. It cannot change prices or splits, redirect purchases, or take funds from a shop or payment contract.
• A partner community owns its NFT collection and its coin, and is paid its share of the upgrades bought in its shop. It runs none of the mall’s contracts.
• Sentry runs the $UID and $HAPPY pools and fee split. Its factory is upgradeable and its owner can reassign where trading fees go. A partner coin’s pool is whoever made it.
• Uniswap and Sentry’s exit router carry the swaps you make on the Buy tokens page and a partner’s Play page. The game only prepares the transaction and sets its minimum.
• Chainlink and Ink provide the ETH/USD price and the network. If the price feed goes quiet for 3 hours, dollar-priced actions pause.
• Each shop’s time lock holds your locked NFTs. Its code lets only you take them back. It cannot be upgraded, and the developer cannot move them.
• A collection’s owner sets its transfer rules (the developer for Nobodies, the partner for its own collection, through OpenSea’s transfer security registry). Today holders can move their own NFTs, which is how locking and unlocking work. Changing that would stop locked NFTs from leaving until it was changed back.

Risks

FAQ

Do I need more than one NFT?

No. One is enough to play the whole game in one kitchen. More kitchens need more of that shop’s NFTs; at Nobodies, holding 3 also makes the licence free.

I bought a tier at Nobodies. Do I have it in the bakery?

Yes. Tiers and kitchens are bought once for the whole mall and are yours in every shop you open.

Why do I have to sign in again on inkmall.xyz?

A sign-in is a cookie on the site that made it. Each shop’s site and the mall’s ask once; it is the same free signature.

Can I stop a session early?

No. Its ingredients are used across the whole session.

Why is my $HAPPY locked?

A session’s $HAPPY unlocks 24 hours after the newest crew member was locked. The countdown is shown on the Play page.

Why can’t I buy or upgrade right now?

Dollar-priced actions wait until the game has an hour of price history for that coin, and pause if the price feed goes stale.

Does the developer take a cut of my ingredients?

No. 100% of your coin is swapped into $HAPPY for you. The developer receives its share of Nobodies’ upgrade payments and the vault’s own wMCDx dividends; a partner receives its share of upgrades bought in its shop.

How do I turn my wMCDx dividends into ETH?

Claim them in the Claims panel, then use “Sell wMCDx for ETH” on the Buy tokens page. It goes through Sentry’s exit router, which keeps 1% of the ETH.

Can I sell an NFT while it is locked?

No. It sits in the shop’s time lock until its term ends. Then unlock it back to your wallet, and it is yours to keep, list or sell.

Does locking give anyone control of my NFTs?

No. You send each one in yourself and never sign an approval. Only your wallet can take it back, and nobody else — the developer included — can move it.