Trustless Principles

The launchpad's promise is that, after launch, nobody can change the deal — not the creator, not the platform, not the keepers. This page lists exactly what is hardcoded and what is forbidden.

Hardcoded (cannot change after launch)

  • Fee split
  • Allowed output token (PYUSD only for the flywheel)
  • Allowed swap route output
  • Allowed Kamino vault / market
  • Allowed liquidity pool
  • Reward distributor
  • Staking token mint
  • Creator wallet / module

Forbidden (no code path exists to do these)

  • Arbitrary transfers
  • Arbitrary swaps
  • Admin withdrawals
  • Changing recipient wallets
  • Changing split percentages
  • Sending PYUSD to a team wallet
  • Unlocking liquidity

The trustless guarantees, in plain terms

  1. Splits are fixed. The FeeRouter split is asserted at compile time to sum to 10,000 bps and has no setter. It is the same on day 1 and day 1,000.
  2. The only swap output is PYUSD. Fees can be swapped into the reserve asset and nothing else; there's no path to route value to an arbitrary token or wallet.
  3. Keepers are permissionless. Anyone can run them; they earn bounded bounties and can never drain funds. The protocol doesn't depend on the team being online. See Keeper Bounties.
  4. Users never deposit the reserve asset. You stake the TOKEN; the PYUSD reserve is protocol-owned and funded only by fees.
  5. Only realized yield is distributed. Principal stays in Kamino by default.

Config-as-source-of-truth

Every split, badge tier, package, and keeper bounty the dashboards show lives in one protocol.ts file that mirrors the on-chain constants, so the UI can't drift from the contracts. The programs are the source of truth; the UI is a faithful read of them.

These principles are the difference between "a team that promises good tokenomics" and "tokenomics that are physically incapable of betraying you." The whole launchpad is built around the second one.

← PreviousLaunch PackagesNext →Programs