Release Candles (token symbol CNDL) on Sepolia as a univ4_hook launch.

Token: Candles (CNDL), total supply 1,000,000,000 CNDL with 18 decimals, minted once to the deployer (a separate zero-argument ERC-20, no mint, owner or admin).

Hook: OHLCCandleHook, a Uniswap v4 hook on the token's native-ETH pool that records 5-minute candles. afterInitialize stores lastTick[poolId] = the initial tick. afterSwap reads the post-swap tick with StateLibrary.getSlot0 and updates candle[poolId][bucket], bucket = block.timestamp / 300: on a bucket's first swap open = lastTick (the price before that swap, since only swaps move the price); high and low track the max and min of open and every post-swap tick; close = the post-swap tick; volumeEth += |delta.amount0()|, volumeToken += |delta.amount1()|, swaps += 1; then lastTick = the post-swap tick and Candle(poolId, bucket, open, high, low, close, volumeEth, volumeToken, swaps) is emitted.

Prices are ticks (price = 1.0001^tick, in token per ETH), packed so a swap inside an existing bucket rewrites at most two storage slots; afterSwap stays under the 100,000-gas afterSwap ceiling in uniswap-v4-security, and a bucket's first swap (fresh slots) is measured separately. Buckets without swaps have no candle; readers draw them flat at the previous close. getCandles(poolId, fromBucket, count) returns up to 288 buckets (24 h); a larger count is clamped to 288.

No deltas, no fee, no funds, no admin.

README: anyone can paint these candles with swaps; they are a display record, not an oracle, and nothing may price off them.

Deploy shape, matching the live Sepolia hook launches 170 and 186 (168 passed the mainnet PoolManager and is not a model): OHLCCandleHook's only constructor argument is the Sepolia PoolManager 0xE03A1074c86CFeDd5C142C4F04F1a1536e203543; every rate, window and threshold here is a source constant; there is no owner, admin, setter, pause, upgrade or sweep, and no $owner or $token argument.

Permissions are exactly afterInitialize, afterSwap (low address bits 0x1040), all others false; the constructor calls Hooks.validateHookPermissions and the CREATE2 salt is mined for those bits.

The factory initializes the pool (currency0 native ETH, currency1 CNDL, fee 3000, tickSpacing 60) and seeds one-sided CNDL liquidity, so nothing in the hook may revert that initialize or that liquidity add (launch 138 was parked when a beforeInitialize gate reverted the factory), and the first buy lands in a pool that holds no ETH. All state is keyed by PoolId; a pool on this hook whose currency0 is not native ETH gets zero deltas and no other effect.

Every callback requires msg.sender == PoolManager.

Tests (Foundry, a real v4-core PoolManager deployed in the test, hook at a mined address): a launch rehearsal that initializes at the manifest price, seeds one-sided CNDL liquidity like the factory and makes the first buy into the ETH-less pool; exact-in and exact-out in both directions; dust amounts; a pool whose currency0 is not ETH; direct callback calls from a non-PoolManager address revert; fuzzed sizes; and specifically: the first swap's open equals the pre-swap tick; several swaps in one bucket; a swap at exactly a multiple of 300 seconds opens a new bucket; liquidity adds do not disturb candles; negative and extreme ticks; getCandles bounds (a count above 288 is clamped to 288); afterSwap gas.

An independent adversarial review (read-only) must attack: whether open can be wrong (any way the price moves without a swap), int24 packing and sign handling, bucket math, gas per swap, and view bounds. It reports each finding with the exact call sequence that triggers it.

Website: one static page (dist/index.html) that reads the hook's views and events and the pool price through Uniswap's Sepolia StateView, with a buy/sell form that swaps through Uniswap's published Sepolia PoolSwapTest router (check it has code). It shows a candlestick chart of the last 24 hours from getCandles (gaps drawn flat) with a volume bar per candle.