Your signature. Exact authority.
Managed launch wallets
Launch wallets are custodial: NULLPAD can decrypt their keys on the server. Keys use authenticated AES-256-GCM encryption bound to the launch ID. The encryption key is held in Vercel sensitive environment configuration; keys never enter browser storage or API responses. This is not an HSM or independently audited custody service.
Transaction controls
PumpPortal transaction instructions are validated before signing. The system checks creator, mint, metadata, buy destination, spending bounds, and allowed programs, then simulates the transaction. An ownership-wallet signature authorizes the exact stored transaction. Concurrent requests use optimistic locking and retries reuse identical transaction bytes.
Recovery & limits
Developer buys are capped at 10 SOL per launch. Recovery is restricted to the account ownership wallet and requires a separate signed authorization. Never replace WALLET_ENCRYPTION_KEY without migrating every encrypted wallet; doing so loses access to existing funds.
Verification boundary
Creation finality is checked through a configured Solana RPC. Market outcomes, token safety, historical reputation, and creator-fee routing are not automatically verified. A successful creation does not establish a safe investment.