Security

How to check you are in the right place, and how to report a bug.

Verify the program ID first

3DrWfrUczfEUKkkDMnCkSRjPsVcgoUHLdHQnBWFCHPuH

Everything else (this site, our posts, our handle) can be impersonated. That ID cannot. If a site shows you a different one, it is not us, whatever the URL says.

Reporting something

The program carries a security.txt contact compiled into its binary. Read it off the program on chain rather than trusting this page. Otherwise mail security@trenches.cooking. We run a public bounty: critical findings pay 10% of the funds at risk, minimum 5 SOL, maximum 100 SOL, from the treasury. Please do not test against mainnet with anybody else's money.

See also the fees page and what no key can do to a coin.