Docs

How Scrip uses Pyth.

No verified Pyth price, no conversion. The program reads Pyth's price account in the same transaction as the swap, and refuses anything it cannot verify — so the worst fill any save can get is set by a price nobody at Scrip controls.

The rule, in the program

finish_sweep reads a Pyth PriceUpdateV2 account and reverts the whole sweep — the delegate transfer and the swap with it — unless all four hold:

• the feed is one of the two this rule carries;
• the update is fully verified — a full quorum of Wormhole guardian signatures checked by Pyth’s receiver, not a partial check;
• it was published under 600 seconds before the sweep;
• its confidence band is under 1% of the price.

Then it computes the minimum the owner must receive from that price — the slice, less the owner’s tolerance, divided by the price plus its band — and checks the owner’s own token account gained at least that. The code is anchor/programs/scrip/src/lib.rs (finish_sweep), pyth.rs (the account, parsed by offset) and rule.rs (min_out_raw).

Two feeds on every rule

A tokenized stock has two honest prices. Crypto.SPYX/USD prices the token itself, wherever it trades. Equity.US.SPY/USD prices one share of the underlying, published on weekdays — before the opening bell too. A rule carries both feed ids and the program accepts either. When it settles against the share price, it converts through the mint’s live scaled-UI multiplier, because the token’s raw units are not shares once dividends have been reinvested.

What it has done, on mainnet

Every figure is read from receipts, each of which anyone can open; each receipt shows its own price, band, age and fill.

Right now

Read from the price accounts on Solana mainnet at 6 Nov 2026, 00:50 UTC.

When there is no price

At a weekend no fresh price for the S&P 500 can be verified, and the program will not guess one. An arrival waits in the owner’s wallet — still theirs, still spendable — and their savings page says it is waiting. When a price returns, the rule settles it. Nobody at Scrip can supply a price instead: an operator-supplied price is exactly what this design exists to rule out.