Security

What Etchify can do, what it cannot do, and how each step is checked.

Non-custodial by design

• Your wallet signs everything you do. Etchify never asks for or stores a private key.
• Coins cannot be changed after launch: no mint, no owner, no freeze, no tax, immutable metadata. No contract, the launchpad included, can move your tokens without your approval.
• Where a coin's creator fee goes (the creator, up to 10 wallets, or its holders) is fixed on chain at launch. A "To me" coin's fees can only be claimed by the creator wallet; the others can only be paid to their wallets or to holder rewards.
• A locked dev buy is held by the launchpad until its date and can only be released to the creator. A burned one is sent to 0x…dEaD in the launch transaction.
• Etchify's own share of every trade can only be paid to Etchify's fee wallet, which is a wallet Etchify's servers do not hold.

Launch integrity

• Launches need a quote signed by Etchify (EIP-712) that binds the creator, name, ticker, metadata, curve, address salt, Bitcoin cost, fee route and dev-buy lock, and expires after 10 minutes. Nobody can launch on different terms or skip paying for the Bitcoin side.
• Before etching, Etchify checks on chain that the coin exists with the quoted creator, curve, metadata and supply, and that the launch paid the quoted Bitcoin cost. Any difference stops the launch for review.
• Every Bitcoin transaction is signed and stored before it is broadcast, so a crash or retry rebroadcasts the same transaction and never builds a second one.

Pool integrity

• Each coin's liquidity is minted, at launch, as Uniswap v4 positions owned by 0x…dEaD. Nobody can ever remove it, including Etchify.
• Etchify pools use a hook with no owner and no settings. Only the launchpad can create a pool with it (so nobody can open a coin's pool early at a bad price), liquidity can only be added in the launch transaction, and each pool's fee is fixed at launch and capped in the code.
• Selling always works, through any router: the hook only takes its fee, in the pool's currency. The coin contract has no tax, no blacklist and no transfer limits.

The bridge

• The vault can only lock and release; it cannot create tokens.
• Roles are separated in the contract: the attester sends and releases (capped daily), the guardian can only pause, the admin cannot move tokens.
• Each Bitcoin deposit can release tokens once, enforced on chain.
• Before every payout, Etchify checks that the Runes in custody equal supply − vault balance + pending requests. If not, payouts stop for a manual check.

Verify it on chain

Custody and 1:1 backing for every Rune, checked live: Verify custody.

Report a problem

Found a bug or a security issue? Contact Etchify with the coin address or transaction and what happened. Etchify will never ask for your seed phrase or private key.