Security model

Guaranteed by the contracts

• The market never holds your token or your money between transactions.
• Cancellation cannot be paused.
• A launch fee cannot be redirected: it is transferred creator-to-dead, and never held.
• A reveal cannot be aimed, re-rolled once resolvable, or silently resolved from a zero hash.
• A provenance hash and a fee token can each be written exactly once.

Not guaranteed

• That a collection is what it says it is. Anybody can deploy anything on a public chain.
• That a hosted image will still be there. That is your host's promise, not ours.
• That an offer is funded. Nothing is escrowed; the interface shows you which bids are backed.
• An audit. These contracts are tested (125 tests, including a fork of mainnet against the real Pons launcher) and they have not been through a third-party audit. Anyone who tells you tests are the same thing is selling something.

Phishing collections

Some of the most-held NFT contracts on this chain are airdropped lures: titles shouting an alert, artwork carrying a URL that wants your seed phrase. The explorer does not flag them: it reports them as ordinary tokens with a clean reputation, so ranking honestly by holders puts them on the front page.

We score them on several signals at once (a lure word, a URL in the artwork, a symbol identical to the title, emoji, leading punctuation) and require more than one before acting. Flagged contracts stay in the catalogue and in search, never appear on the front page, and carry a warning on their own page. No interface can protect you from signing a transaction on another site.