Security

What the code can and can't do

Program ID

Ap6U2RPXFdQTdYNfKsiX8nu7tgh3rXF1ReMe1bn2DZXx

Network

Solana mainnet

Custody

None. You keep the token you hold; the program is a delegate on the payout-token account only, and never on the token you hold.

Fee

2% of the yield, capped at 2% in the code itself, never of the token you hold

Protected floor

Per wallet and per market, set at delegation to the payout tokens already held; changes only with the user's signature

Slippage guard

1% below the reference Raydium pool's price, checked on-chain after the swap; the pool's recorded price history must cover the market's window (15 minutes at launch) and be fresh, or the compound is refused outright

Swap venue

Jupiter, program address pinned in code; the route is checked before the program signs

Upgrade authority

Retained by the deployer wallet. The program can still be replaced with a different one. Removing the authority is permanent and public, and has not happened

Verified build

Not yet. No reproducible build is registered for this program, so explorers list it as unverified. The deployed bytecode is on chain for anyone to dump and hash.

Audits

Adversarial AI reviews by two independent models, several rounds each, summarised on the audits page. No third-party firm audit yet.

Inspect the program on Solscan, check the delegate on your own account, or read the audit summary. Live pair costs and status are on the pairs page.

The guarantees

• Your ZCAT is never touched

  The program is approved on your ZEC account only. It is never approved on ZCAT, so it cannot move it.

• Your ZEC becomes the fee and your ZCAT

  2% goes to the fee vault and the rest is swapped through Jupiter with your own ZCAT account as the destination, enforced on-chain. The program checks the route's amount, slippage and fee fields before it signs, and your balance after. There is no instruction that sends anything anywhere else.

• The floor moves only with your signature

  Your protected floor lives on your enrollment and changes through one instruction that only you can sign. It never drops on its own: not for the Slawth, not for the team, not because a payout landed.

• 2% of yield, never of principal

  The fee is 2% of the ZEC being compounded, capped at 2% in the code itself. It is never taken from your ZCAT, and it lands in a fee vault that only the team can withdraw from and nothing else can touch.

• The upgrade key is still held

  Everything else on this list is enforced by code that is already on chain. This one is not: we still hold the key that can replace that code, so it is the one thing you are trusting us with. It is kept while the first real compounds are watched. Burning it is permanent and public, and this site will say so the day it happens.

• Revoke in one click

  The approval is standard SPL delegation. Revoke it from Phantom, Solflare, or any wallet, without asking anyone.

• Same rules for every stonk

  Each token pair is a market on the same program: same code, same 2%, same floor, same one-click revoke. Nothing about a new pair is custom, so nothing about it is a surprise.

• Verified build: not yet

  The program ID is published and the deployed bytecode is on chain for anyone to dump and hash. No reproducible build is registered yet, so explorers list the program as unverified. This site will say so when one is.

The risks

• Payouts depend on your coin being traded. No volume, no payouts, nothing to compound.
• Every swap pays your coin's transfer tax, up to 3%, and the pool's trading fee, the same as any buyer on any DEX.
• Some pairs pay out a token whose issuer keeps real control of it: it can pause transfers, freeze an account, or move the token out of any wallet that holds it. Where that is true, compounding can stop without notice, and that is the issuer's power over their token, not ours.
• We hold the key that can replace the program, and replacing it needs no notice. Until that key is gone you are trusting us not to use it.
• Smart contracts can have bugs. This one is small, tested against snapshots of the real pools, and reviewed repeatedly by two independent AI models; it has not been audited by a third-party firm.

How to verify it yourself

1. Open your ZEC token account on Solscan. The delegate field shows the Vawlt's authority address and the allowance. Revoke it there any time.
2. Open the program on Solscan and confirm the upgrade authority matches what this page says.
3. Read the compound instruction in the source: the ZCAT destination is your associated token account, the Jupiter program address is a constant, and the floor on your enrollment is read, never written.