Security & Transparency
Don't trust our claims — verify them. Every statement on this page links to something you can check yourself, on-chain.
1. Open Source
Our exchange engine is forked from Uniswap — publicly audited, battle-tested code securing billions in value for years. Our custom layer — the bonding curve, fee split, and referral system — is fully open-source for public review:
2. Verified Contracts
Every contract below is verified on the MegaETH explorer — the deployed bytecode matches the public source code. Click any address to read it yourself.
3. What We Cannot Do
The most important section on this page. These are not promises — they are absences of code, verifiable in the contracts above:
• We cannot touch your funds. No function in any contract can access user balances or move tokens out of your wallet.
• We cannot mint tokens. Supply is fixed at creation. There is no mint function — for us or anyone else.
• We cannot remove liquidity after graduation. The LP position is burned in the graduation transaction itself. Locked forever is not a policy — it's a burn address.
• We cannot change fees retroactively or add hidden ones. All fees are hard-coded and enforced on-chain.
• We cannot block your exit. The sell and creator-fee-claim functions have no pause switch — by construction, not by policy.
4. What the Multisig Can Do
The protocol is owned by a 2-of-3 Safe multisig with deliberately limited powers. Its full authority:
• Pause new token creation and new buys in an emergency. Selling and creator fee claims can never be paused — your exit is never blocked.
• Withdraw the accrued platform fee (the 1% — never user funds).
• Configure the graduation threshold.
• Upgrade the implementation contract (UUPS) — this requires 2-of-3 signatures and is the standard mechanism for protocol improvements. Any upgrade is visible on-chain before and after execution.
That's the entire list. Anything not listed here, it cannot do.
5. Built-in Protections
• Anti-snipe: for the first 5 blocks after a token is created, no single transaction can buy more than 10% of the bonding-curve supply.
• Guaranteed exit on the curve: while a token is on its bonding curve, the contract itself is the counterparty — you can always sell at the current curve price, even during an emergency pause. No lock-up, no exceptions.
• Squat-proof graduation: only the launchpad can create pairs on the MEGAPUMP DEX — nobody can pre-create or manipulate a token's pool before it graduates.
• Atomic graduation: the migration to MEGAPUMP DEX happens in a single transaction — funds are never held in an intermediate state.
6. If Something Breaks
• We communicate publicly on @megapumpeth within 2 hours of a confirmed incident.
• We say what we know, what we don't, and what we're doing — no silence, no spin.
• The pause function exists precisely for this: stopping the bleeding comes before anything else — while your ability to sell stays untouched.
Trading tokens is risky and smart-contract risk always exists, on any protocol. This page exists so you can assess that risk yourself instead of taking our word for it. Only trade what you can afford to lose.