The app takes 0.85% of every swap made inside it — that is its revenue. Where this money goes is announced nowhere, but the blockchain shows it in full. We followed it from a single swap to the end of the chain. The fee is kept in whatever currency was traded, sold for USDC, and from there it splits in two: three quarters goes to Rainbow's account with Coinbase, a quarter leaves the network over a bridge.
The links run from top to bottom, what each one talks to sits on the right, and the exchange's wallets fan out below. The amounts on the arrows cover the whole lifetime of each address and update daily. Any box opens in the explorer.
The contract names are the ones the explorer returns, not ones we inferred. Depositor and SmartVault are an off-the-shelf Mimic Finance stack for collecting and processing fees: Rainbow did not write this part, it plugged it in. Ownership is established by the contract's deployer, as explained below.
This is the main thing this piece establishes, and it is not a guess. The fifth link belongs not to Rainbow but to Coinbase, proven by three independent signs.
The fee collector and the intermediate address were deployed by one and the same wallet, 0x14c108d0…. The deposit address was deployed by a different one, 0x628d8ac0…. The implementations these proxies point at also come from different authors. These are two systems, not one.
It has 35,687 transactions against 850 for the creator of the first two. That is not a company deploying itself a couple of service contracts; it is a machine stamping out addresses by the tens of thousands — which is how an exchange hands deposit addresses to its clients.
A zero balance and one hundred per cent of the outflow into Coinbase's wallet fleet. That is a deposit being swept, not an owner disposing of money.
All three links are EIP-1167 minimal proxies of 45 bytes: tiny contracts that do nothing but forward the call. Identical construction with different creators is exactly why ownership cannot be judged by eye.
SmartVault pays out 74.9% of its USDC to the Coinbase deposit and 24.4% to CircleRelayer, the automatic relayer of Circle CCTP in Wormhole's integration. That second direction means the money leaves for another network, and from the Base chain its onward path is no longer visible. Whatever did reach the deposit spreads across nine exchange wallets — there it really is a hundred per cent.
Thousands of distinct tokens have passed through SmartVault, and for each one what came in almost exactly equals what went out — it sells them. The source of the money shows it: 86.4% of the USDC arrives from swap aggregators, 1inch and ParaSwap. There are no dollars at the entrance; they appear only after the sale.
The address that buys RNBW back off the market separately sends USDC into the same deposit — in round sums of 5, 12 and 25 thousand. So the exchange account has two sources: the app's fees and direct top-ups.
Cashback returns to the staker in RNBW and is credited from a reserve inside the staking contract, with no token transfer at all. The dollar flow and the accruals are two unconnected things; they never meet.
Beyond it the exchange disposes of the money, and its wallets are common pools with thousands of counterparties and tens of thousands of transfers. What leaves them can no longer be attributed to this fee. We went three links deeper and landed in LI.FI and CoW Protocol — public infrastructure through which the whole market flows.
An arrival at the exchange account means only that. No salaries, no token buyback, no withdrawal to a bank is visible from the chain, and nothing can be claimed about what these funds are for.
In its first version links 03 and 04 were marked “unlabelled”, although names do exist — one call to the explorer was all it took. The same version claimed “the whole flow goes to Coinbase”: the share was computed from the recipient's side, so the second direction simply never came into view. It has to be computed from the sender's side — only there is everything it paid out visible.
Recomputed daily from the USDC transfer log. Served as /api/feepath.json. The intermediate address has more than ten thousand transfers, so its history is read in block windows — without that the totals would be understated by almost a third. The shares of each direction are computed from what SmartVault paid out, not from what the recipient took in.