Security
Your wallet signs. EVOLVE does not ask for a seed phrase and has no instruction that accepts one.
A locked evolution stores a SHA-256 of the canonical configuration. The program recomputes that hash at lock and on verify. The default mode has no creator instruction that rewrites stages.
Governed mode is opt-in creator governance. Proposals wait 24 hours, bind the exact mint, then replace stage parameters and the stored hash. Address lists are not replaced by that proposal. Community ballots select precommitted product branches; they cannot rewrite locked transfer rules.
The oracle key can attest a metric. It cannot withdraw token accounts through these instructions. An attestation older than 15 minutes, a reused nonce, or the wrong metric is rejected. Eligibility uses complete finalized transaction history at a named checkpoint, attested by a separate oracle signer. It is not a guarantee of instant holdings or unique human identity. USD market-cap milestones remain unavailable without a verified price feed.
Sponsored benefits have a fixed pre-funded escrow, exact reward asset, proportional retained-token allocation, expiry and one claim per wallet. Graduation benefits verify the bound DBC pool and migrated DAMM market. These product accounts continue after hook removal and grant no mint, hook or LP withdrawal authority.
The program upgrade authority can change hook behavior for every mint using this program. Locking a token does not revoke that authority. Permanent-mode mint and hook authorities are revoked. Graduating mode gives hook removal authority to Meteora DBC, which removes enforcement when the curve completes.
Metadata updates go through the evolution PDA and must match the current stage's committed URI hash. A stage advance and metadata sync are separate transactions. A URI hash commits the address of the metadata; it does not freeze the content served at an HTTPS address.
Audit status: not yet independently audited. There is no audit badge anywhere in this interface.
Program id: Bs5AxSCHjnRmg4sAVLUnTErqpRb1FEWFBAK2vWfxkBRK. It matches the original protected program keypair. The permanent market uses a separate hook-compatible venue. Program keys are never shipped to the website.