Pool Party
Pool Party: Cash+ for business treasuries and hookrisk for Uniswap v4 hook security.
Demo
About
Pool Party connects investment strategy managers with investors through rules enforced by smart contracts. For this continuity submission, we added two products to the platform: Cash+ and hookrisk. Cash+ is a business treasury investment strategy that combines two sources of return: lending interest on Aave and margins from stablecoin conversions. Eligible capital earns interest while waiting for conversion opportunities. When a conversion takes place, the strategy releases the required liquidity and retains the margin for investors, subject to price, volume and exposure limits. Businesses deposit USDC, track performance and request withdrawals from a dedicated page. Hookrisk helps managers evaluate Uniswap v4 hooks before opening a position. Hooks are smart contracts that can change a pool’s fees and transaction behavior. They can also introduce undeclared charges, prevent withdrawals or expose callbacks to unauthorized callers. Integrated into Pool Party’s Tools menu, hookrisk provides findings with references to the affected source files and lines. It also identifies dimensions it could not measure, without treating missing information as an absence of risk. Managers gain evidence for selecting hooks, and investors receive an assessment they can independently inspect.
How it's made
We extended Pool Party’s existing frontend using Next.js, React, TypeScript and viem, preserving the platform’s visual design. For Cash+, Solidity contracts account for deposits, investor shares and withdrawals. Adapters supply eligible assets to Aave, while 1inch Aqua and SwapVM execute stablecoin conversions. A custom pricing extension applies the conversion margin and checks the strategy’s limits using Chainlink price feeds. The integration withdraws assets from Aave within the same transaction that settles a conversion. Capital can therefore earn interest until it is needed for settlement. If any step fails, the entire conversion reverts. An automated operator manages lending allocations, liquidity buffers and orders. For hookrisk, we combined Python detectors built on Slither, a TypeScript scoring engine and Solidity tests using Foundry. The tests use Uniswap’s actual v4-core to compare two otherwise equivalent pools: one with a hook and one without. This differential testing can detect behavior such as charges exceeding the declared fee and trapped liquidity. The project also provides an optional integration with BlockSec HookScan. We translated the Uniswap Foundation’s Hooks Security Framework into executable criteria. Reports distinguish measured results, developer declarations and unmeasured dimensions. Hook permissions are generated directly from v4-core, avoiding a manually maintained copy that could become outdated. We validated Cash+ through Foundry tests and a complete browser journey using Playwright: deposit, conversion, Aave withdrawal and investor redemption on an Arbitrum fork using the protocols’ official contracts.