STIMULUSSecurity
Explicit permissions and verifiable outcomes.
Current status
The UI is a pre-launch demonstration. Contract prototypes are unaudited and must not receive real funds. An independent audit and operational review are required before production.
Controls
Use explicit roles, multisig-compatible administration, timelocks, safe token transfers, reentrancy protection, emergency pause, deadlines and slippage checks. Frontend visibility is never authorization.
Threat model
Review vote double counting, rounding and wallet splitting, thin-liquidity manipulation, buyback front-running, malicious tokens, wash trading, fee bypass, treasury drainage, incorrect reward roots and creator-fee theft.
Wallet safety
The application never requests a private key or recovery phrase. Demo operations never sign transactions. A connected wallet is not automatically an eligible STIM holder.