Security & trust
Give uses program-controlled vaults and pump.fun's own frozen fee configuration. These reduce reliance on ordinary wallet custody. They do not remove every trust dependency, and this page lists the ones that remain.
The program is on Solana mainnet. There is no independent audit report. Tests and mainnet transactions are evidence, not an audit.
What the chain enforces
- The frozen split rejects any change to recipients or percentages.
- A cause vault pays its bound address and refuses every other one. A directory cause can only be bound by the account holder, through X sign-in.
- Changing a bound address needs the currently-bound wallet's signature plus a 48-hour delay.
- The burn path must buy the coin its vault belongs to and burn the result in the same transaction.
"Frozen split" and "immutable program" are different sentences. A frozen split does not mean the program's upgrade authority has been removed.
Remaining authorities
| Component | What control remains |
|---|---|
| Program upgrade authority | Can replace the program code. Everything above depends on this authority staying secure. |
| Program administrator | Can pause claims, settlements and burns. |
| Registry reviewers | Decide which causes are listed and at which address. Approvals and payout changes need a signature threshold; a suspension needs one. |
| Attester | Signs the one-time binding of a cause vault to a wallet — for a directory cause, only after X has confirmed which account signed in. |
| X (sign-in) | Says which account signed in. Trusted for identity and nothing else; no access is kept. |
| Keeper | Pays gas to push distributions and payouts. Cannot redirect them. |
| pump.fun | Enforces its own market and fee rules. |
What Give will never do
- Take a fee of its own. There is none.
- Set a creator fee above 1%, where pump.fun would permit 3%.
- Display a charity's logo, or describe one as a partner.
- Describe a coin purchase as a donation. It is not one, and never will be.
Service and network failures
An unavailable site, RPC provider, or keeper delays operations. Pausing the program can prevent otherwise-valid payouts. Neither changes a frozen split.
Reporting an issue
Contact @letsgive_live on X to request a private reporting channel. Do not include private keys, and do not publish an active exploit before coordinated review.