Found a flaw? Tell us first.

Report it privately, and to us first: not in public, and not to anyone else until it's fixed.

What to include

• The contract and function, with its address if it's deployed.
• What an attacker could do, and who would lose what.
• Steps to reproduce it. A Foundry test on a fork is ideal.
• How to reach you, and where to send a reward.

What to expect

We reply within 48 hours, keep you posted while we fix it, and tell you when it's done.

The launchpad's contracts on Robinhood Chain mainnet, exactly as frozen for release. Each file's SHA-256 lets you check that you're reading the same source.

• Launchpad

  src/TonkpadRobinhood.sol

  Contracts

  TonkpadRobinhood · TonkToken · TonkTokenFactory

  Address

  0xbcaf0ecf36d15622a13d04b5ac58d312818bb4f0

  Source SHA-256

  648269c32cbf8de79c3391067c37c1575d7ed61283b705d766608ff055c1591d

• Graduation migrator

  src/TonkpadUniV4Migrator.sol

  Contracts

  TonkpadUniV4Migrator

  Address

  0x7d233d86fa9d3a36042c2a537276e995c70adc0f

  Source SHA-256

  0b2aacd09d931de57801507654e24538f2fb34c67803e6b19eff0662fc0bb1ac

• Pool guard

  src/TonkPoolInitializationGuard.sol

  Contracts

  TonkPoolInitializationGuard

  Address

  Read it from the migrator: initializationGuard()

  Source SHA-256

  954c1567df49c8fdc18b853944b8bf6f27b279559caa5fcdc4af8d0a43bc0f0f

Out of scope

• The website's own hosting.
• Third-party services, such as Uniswap, wallets and bridges. Report those to their own teams.
• Social engineering, phishing included, of our team or our users.

• Never test against mainnet funds that aren't yours. Use a fork, the testnet or your own wallets.
• No denial of service, and nothing that slows the site or the chain down for others.
• Give us time to fix it before any disclosure. We'll agree the date with you.

A valid report earns a reward by its severity.

• CriticalUp to Up to $5,000

  Theft or permanent freezing of funds, or taking control of the contracts.

• HighUp to Up to $1,000

  Theft of fees or rewards, or funds frozen for a time.

• MediumUp to Up to $250

  A contract breaks one of its own rules, with no funds lost.

• LowUp to Up to $50

  A contract doesn't do what it says, with no funds at risk.

There was no outside audit. The launchpad contracts were reviewed internally, not by an outside auditor, and using them carries smart-contract risk. Only put in what you can afford to lose.

Before release, the contracts went through:

• An internal review and two re-reviews of its fixes, plus an independent review, all by AI models.
• Static analysis with Slither and Aderyn, with every finding triaged.
• Invariant fuzzing with Foundry and Medusa, with no violation found.
• Proofs of the curve and fee maths: symbolic with Halmos, and by hand where the solver timed out.
• A test for each known launchpad attack, such as a rigged pool price or a sandwiched graduation.
• A full rehearsal against a copy of mainnet: launch, trade, graduate and pause.
• Campaigns on testnet with real wallets.