Contact: https://x.com/megaphonesol
Expires: 2027-11-05T00:00:00.000Z
Preferred-Languages: en
Canonical: https://solmegaphone.xyz/.well-known/security.txt

# ============================================================================
#  MEGAPHONE  ·  solmegaphone.xyz
#  A token launchpad on Meteora's Dynamic Bonding Curve, on Solana.
#  One billboard. Every round, the token with the most $MEGA burned for it
#  takes the air.
# ============================================================================
#
# HOW IT WORKS
#   * MEGAPHONE deploys no on-chain program of its own. Everything on chain is
#     Meteora's code and the standard SPL Token and Memo programs.
#   * Every token is a standard Meteora DBC pool. It trades on any terminal
#     (Axiom, GMGN, DEX Screener, Jupiter) from its first block: a launch,
#     not a presale. When the curve fills it migrates to Meteora DAMM v2 and
#     its liquidity is locked for good.
#   * Name and ticker are immutable. Mint and freeze authority: none.
#   * A burn is an SPL BurnChecked of $MEGA carrying the memo
#     megaphone:<token mint>[ <shout>]. Burned $MEGA is gone for good. The
#     server reads burns from the chain and keeps the rounds; it never holds
#     anyone's tokens or SOL.
#   * The page re-checks every transaction the server builds, one instruction
#     at a time, before your wallet sees it.
#   * No wallet that holds the project's money lives on the server.
#
# ADDRESSES
#   Meteora DBC program:  dbcij3LWUppWqq96dh6gJWwBifmcGfLSB5D4DuSMaqN
#   Team (dev) wallet:    HqH1AyYUxo1FC1a1xpMfDaVVUnCseVBWRL2oGhaaRyRS
#                         the only wallet that can launch $MEGA
#   Mints issued here end in "meg". Check the address.
#
# IN SCOPE
#   * Anything on solmegaphone.xyz that could make a wallet sign something
#     other than what the page shows.
#   * Ways to win a round the rules don't give you, or to make a burn count
#     for a token it wasn't made for.
#   * Ways to read or use what the server holds (mint keys, the migration
#     wallet, RPC keys).
#
# OUT OF SCOPE
#   * Meteora's own programs (please report those to Meteora).
#   * Pools created on our config outside this site.
#   * Denial of service by sheer volume, social engineering, spam.
#
# PLEASE
#   * Test on devnet or a local validator, never against other people's funds.
#   * Send a short write-up and steps to reproduce by DM to @megaphonesol.
#   * Give us a reasonable time to fix before you go public.
#
# Thank you for keeping the air clean.