Skip to main content

Security Model

The current source intentionally excludes several high-control token and upgrade mechanisms.

Explicitly absent​

  • proxy contracts;
  • UUPS and beacon upgrades;
  • delegatecall implementation replacement paths;
  • post-construction token minting;
  • token blacklist, tax or pause controls;
  • creator withdrawal of the initial graduation LP.

Core invariants​

  1. Token total supply never increases after construction.
  2. Active sale reserve should equal cumulative curve cost at sold.
  3. A sale graduates at most once.
  4. Graduation requires the full curve supply to be sold.
  5. Graduation liquidity opens at the final curve price, subject to integer rounding.
  6. Initial LP shares are held by the permanent lock contract.
  7. Creator vesting cannot exceed its construction-time allocation.
  8. Failed-launch redemptions cannot exceed the tracked sale reserve.
  9. Pool reserves are synchronized to actual balances after state-changing pool operations.
  10. Swap output cannot exceed output reserves.
Not an audit

The repository describes this system as an engineering baseline. Public mainnet use requires the project's stated security bar, including deeper analysis, stress testing and an independent audit.