Summary

Enables two new Wormhole NTT routes into Hydration:

• HYPE: HyperEVM ↔ Hydration (asset id 1001355, "Hyperliquid")
• SPY: Robinhood Chain ↔ Hydration (asset id 1001356, "SPY", Robinhood Stock Token for the SPDR S&P 500 ETF)

The contracts on all three chains are already deployed, peered, rate-limited, source-verified and handed over to their final owners. This referendum turns the routes on.

What it executes

Dispatches the call whitelisted by the Technical Committee (hash 0xc9a652b0251f9199b033e483e84c1b5503677ba114f95468d80a8a6bf5f9ab33): one utility.batch_all with 6 calls.

Asset	Call	Effect
HYPE 1001355	EVMAccounts.set_ntt_minter(1001355, 0x76FA328577Ee8A0E1872eD182c1bcd0A2dB47750)	lets the Hydration NTT manager mint/burn HYPE
	CircuitBreaker.set_asset_category(1001355, External)	puts HYPE under the global withdraw limit, like all other NTT assets
	AssetRegistry.update(1001355, name: "Hyperliquid", xcm_rate_limit: 1,200 HYPE)	daily mint fuse; drops the "(Wormhole)" suffix
SPY 1001356	EVMAccounts.set_ntt_minter(1001356, 0x4382cC762FdbB90d756FF5F2f099a76281f1A2aF)	lets the Hydration NTT manager mint/burn SPY
	CircuitBreaker.set_asset_category(1001356, External)	puts SPY under the global withdraw limit
	AssetRegistry.update(1001356, name: "SPY", xcm_rate_limit: 130 SPY)	daily mint fuse; drops the "(Wormhole)" suffix

Routes

Token	Hub (locks)	Hydration (mints/burns)	NTT daily limit (hub, each way)
HYPE	HyperEVM, WHYPE 0x5555555555555555555555555555555555555555 (unwraps to native HYPE on the way back)	manager 0x76FA…7750, transceiver 0xe74f…c160	1,200 HYPE (≈ $100k+)
SPY	Robinhood Chain, SPY 0x117cc2133c37B721F49dE2A7a74833232B3B4C0C	manager 0x4382…A2aF, transceiver 0x9fAF…97aA	130 SPY (≈ $100k)

Hub contracts:

• HyperEVM: manager 0xdcDd08BFB7b3B9381149A852Ba5F69Bd5d87676f, transceiver 0xe3eD8E1217AB419123D54E2F0850BC736b595D68
• Robinhood: manager 0x963835C20884dE59E6988030eB49D4D0eA24a26d, transceiver 0x283B14B5Dd352e32154Df014EA96834F395E04b6

Safety

• Source-verified (exact match): Sourcify for HyperEVM (999) and Robinhood (4663); Hydration explorer for the Hydration legs.
• Ownership:
  • Hub legs: Safe 0xD557AeAf1e0cB3D226BfF3B7a10C2cdA9dA081E7 (4-of-7), the same Safe as on Ethereum and Base.
  • Hydration legs: emergency admin 0xAA7e0000000000000000000000000000000AA7E1.
• Three layers of limits: NTT rate limits on the hubs, the runtime mint fuse (xcm_rate_limit), and the global withdraw circuit breaker.
• Emergency off-switch: EVMAccounts.clear_ntt_minter(id) stops minting and burning on Hydration without touching any contract. The pausers can also pause each NTT manager.
• Dry-run: the full call was dry-run against live state as WhitelistedCaller and succeeded, emitting all six expected events.

SPY-specific notes

• SPY on Robinhood Chain is the issuer's upgradeable and pausable token. If the issuer pauses it, or adds transfer restrictions by upgrade, locked SPY could not be released until that's lifted.
• SPY handles corporate actions with a scaled-UI multiplier (currently 1.0), not by rebasing. NTT moves raw amounts, so Hydration pricing should use raw units.

Verify

• Preimage hash: 0x4117eaf312d35ea22f01ab0bf5ea71f628adb467ee845c082df83cdba864071a (149 bytes, whitelist.dispatch_whitelisted_call_with_preimage)
• Inner call (decode it, and check its blake2_256 equals the whitelisted hash above):

0x0d0218410b8b470f00010033018b470f00012c48797065726c69717569640000010000c0a4206a580d4100000000000000000000005d078b470f0076fa328577ee8a0e1872ed182c1bcd0a2db47750410b8c470f00010033018c470f00010c5350590000010000c8003bc71c0c0700000000000000000000005d078c470f004382cc762fdbb90d756ff5f2f099a76281f1a2af