ancilar (ancilar)

A token launched straight from a cast came close to being drained in its first hour. The flaw was not exotic. The owner key could mint unlimited supply, and that same key was sitting in the launch bot's hot wallet. One compromise away from infinite inflation.

• 1 reply
• 0 recasts
• 0 reactions

Our team flagged it on the first review pass. Three changes: - removed the mint function, which the project did not need - moved the owner key to a multisig - added a hard supply cap in code so no single error can inflate supply

• 1 reply
• 0 recasts
• 0 reactions

Two hours of work, and the relaunch went out clean the next day. Speed at launch is fine. Shipping privileged functions a team does not fully understand is where the risk lives. If you are unsure what your owner key can actually do, that is the first thing worth reviewing. We are happy to take a look.

• 0 replies
• 0 recasts
• 0 reactions