Audits

What the program can do, and what we still can

Most things in crypto ask you to send your tokens somewhere and trust what happens next. This does not. You keep everything in your own wallet, you approve one narrow permission, and you take it back whenever you like. That is not a promise about our behaviour, it is the limit of what the program can do. Every compound it makes is a public transaction, on an account you control, that you can look up yourself. One thing qualifies all of it and is at the bottom of this page: we still hold the key that can replace the program, so everything below describes the code that is deployed today rather than a code that can never change.

• The token you hold never leaves your wallet

  There is no deposit, no custody vault and no pool, and nothing is ever transferred to us for safekeeping. A fee vault does exist and the fee lands in it; it holds fees, never anyone's stake. The payout tokens being compounded do move, inside one transaction that either finishes or undoes itself: the fee to a fee vault, the rest through a transit account into the swap, and the result back to you.

• The permission has exactly one use

  You approve the program's authority address to spend your payout token. It has one use: the 2% fee to the fee vault, and everything else spent buying the token you hold, delivered to your own wallet. It cannot go anywhere else, and the program refuses the transaction if it tries.

• You set the line it cannot cross

  Whatever you hold when you join becomes a protected floor. Only a transaction you sign moves it. Not us, not the Slawth, not a payout.

• Revoke any time

  One transaction from your own wallet ends it, with no notice period, no withdrawal fee and no waiting. There is nothing to withdraw, because nothing was ever deposited.

• The fee is capped in the code

  2%, and the program itself refuses to exceed it. That is not policy. It is code, and it was written that way before anyone used it.

It was attacked before it shipped

Two AI reviewers were given the full source and an adversarial brief, and asked to find a way to take someone's money. They worked independently. Both told us not to deploy the first version, so we did not. Every finding they raised was fixed and put back in front of them until it was ticked, round after round, and nothing has gone on chain without a reviewer looking at it first. We believe the program is secure, and those reviews are how we earned that belief. Every upgrade goes through the same loop before it ships.

Review live pair costs and status