Transparency

Security & Transparency

Don't trust our claims — verify them. Every statement on this page links to something you can check yourself, on-chain.

1Open Source

Our exchange engine is forked from Uniswap — publicly audited, battle-tested code securing billions in value for years. Our custom layer — the bonding curve, fee split, and referral system — is fully open-source for public review:

github.com/MegaPumpETH/megapump-contracts ↗

2Verified Contracts

Every contract below is verified on the MegaETH explorer — the deployed bytecode matches the public source code. Click any address to read it yourself.

Token creation, bonding curve, fees & atomic graduation — logic in the implementation below
The actual contract code the proxy delegates to — this is what you audit
Read-only: price estimates and token info for the site (no funds, no admin)
Pair creation (permissioned — launchpad only)
Post-graduation swaps & liquidity
Protocol Multisig (2-of-3 Safe)0x2CBd81baCFFa7166A82023575f53CbC567B4e970 ↗
Limited admin — see powers below

3What We Cannot Do

The most important section on this page. These are not promises — they are absences of code, verifiable in the contracts above:

We cannot touch your funds. No function in any contract can access user balances or move tokens out of your wallet.
We cannot mint tokens. Supply is fixed at creation. There is no mint function — for us or anyone else.
We cannot remove liquidity after graduation. The LP position is burned in the graduation transaction itself. Locked forever is not a policy — it's a burn address.
We cannot add hidden fees or exceed the caps. Every fee is taken by the contract, and the rates are parameters it bounds: platform fee at most 5%, creator fee at most 2%, referral fee below the platform fee, graduation fee at most 0.1 ETH. Changing a rate is an on-chain transaction, public before it applies to the next trade; the Fees page shows the rates currently set.
We cannot block your exit. The sell and creator-fee-claim functions have no pause switch — by construction, not by policy.

4What the Multisig Can Do

The protocol is owned by a 2-of-3 Safe multisig with deliberately limited powers. Its full authority:

Pause new token creation and new buys in an emergency. Selling and creator fee claims can never be paused — your exit is never blocked.
Withdraw the accrued platform fee (never user funds, never creator or referrer fees).
Set the fee rates, within the caps above (platform fee, creator fee, referral fee, graduation fee).
Set the graduation amount (between 5 and 100 ETH for tokens launched in ETH), enable or disable a launch currency (USDm, MEGA) and set its graduation amount and fee. A token keeps the amount that was set when it was created.
Set the creation cooldown between two launches by the same creator, and the signer whose signature validates referrals.
Point future graduations to another DEX router or wrapped-ETH contract. Pools already created are untouched: their liquidity is burned.
Upgrade the implementation contract (UUPS) — this requires 2-of-3 signatures and is the standard mechanism for protocol improvements. Any upgrade is visible on-chain before and after execution.
Hand ownership to another address, in two steps (the new owner has to accept).

That's the entire list, as the contract source shows it. Anything not listed here, it cannot do.

5Built-in Protections

Anti-snipe: for the first 5 blocks after a token is created (about five seconds on MegaETH), no single transaction can buy more than 10% of the bonding-curve supply.
1-click trading stays in your wallet: a MOSS trading session is a permission you grant in your own wallet, capped at the limit and the duration you choose, revocable at any time. MegaPump never holds a key to your funds.
Guaranteed exit on the curve: while a token is on its bonding curve, the contract itself is the counterparty — you can always sell at the current curve price, even during an emergency pause. No lock-up, no exceptions.
Squat-proof graduation: only the launchpad can create pairs on the MEGAPUMP DEX — nobody can pre-create or manipulate a token's pool before it graduates.
Atomic graduation: the migration to MEGAPUMP DEX happens in a single transaction — funds are never held in an intermediate state.

6If Something Breaks

We communicate publicly on @megapumpeth within 2 hours of a confirmed incident.
We say what we know, what we don't, and what we're doing — no silence, no spin.
The pause function exists precisely for this: stopping the bleeding comes before anything else — while your ability to sell stays untouched.
Trading tokens is risky and smart-contract risk always exists, on any protocol. This page exists so you can assess that risk yourself instead of taking our word for it. Only trade what you can afford to lose.