Security and trust
CAST is built so you don't have to trust anyone with a token's rules or its liquidity. Here is exactly what can and can't change, and how to check it.
Who can change what
| Can anyone… | Answer |
|---|---|
| Change a token's fees, limits or schedule? | No. There is no function for it, and no owner. |
| Remove or move the liquidity? | No. The Fee Hook refuses every removal, forever. |
| Add liquidity to a CAST pool? | No. The only liquidity a CAST pool ever has is the position the Fee Hook adds itself when the token graduates. |
| Take what a bonding curve has raised? | No. It only leaves when people sell back to the curve, and at graduation all of it goes into the locked pool position. |
| Change a token's bonding curve or graduation target? | No. Both are fixed when the token launches. |
| Mint more tokens? | No. The supply is fixed at 1 billion. |
| Pause trading or block a wallet? | No. CAST has no pause and no blocklist. A paired asset can have its own: USDG's issuer can pause it or freeze a wallet. |
| Take holders' rewards or the creator's fees? | No. Payouts only ever go to the holder or the token's creator. |
| Spend the creator's locked tokens early? | No. Only the creator, and only after the lock ends. |
| Change a token's paired asset or close its pool? | No. The pair is fixed in the token, and its pool trades forever. |
| Change where CAST's own 20% is paid? | Yes, the Fee Recipient's controller, meant to be a CAST multisig (a Safe). |
| List or close pairs for new launches? | Yes, the same controller. It only affects new launches. |
What CAST controls
The Fee Recipient contract decides where CAST's 20% share is paid. Its controller, meant to be a CAST multisig (a Safe), can point that payment at a new address, and can hand control to someone else in two steps (propose, then accept).
The same controller manages the pair list in the Pairs contract. It can list an asset for new launches, change the bonding curve new launches use (its virtual reserve and graduation target), or close an asset to new launches. Tokens that already exist are not affected: their curves don't change, they keep trading, and once they graduate their liquidity stays locked.
Neither can touch any token's rules, paired asset, curve, liquidity, holders' rewards or the creator's share.
Audit status
Verify a token yourself
Confirm it's a CAST token
CallisCastToken(token)on the Launcher. Look-alike tokens with copied names return false.Check there's no owner
Callowner()on the token. It returns the zero address for every CAST token.Read the rules
CallgetRuleSet()on the token and compare it with the token page. They come from the same place, so they always match.Recompute the grade
CallgradeOf(token)on the Rulebook.
Addresses are on Network and contracts, and code for each call is in Reading token state.
Pools outside CAST
Anyone can create a second pool for a CAST token on Uniswap or elsewhere. Trades there don't pay the sealed fees, because fees are only charged in the CAST pool. Max wallet and Hold Streak still apply, because the token itself enforces them: tokens bought there arrive with a Hold Streak of zero, like any tokens a wallet receives. Since every token for sale starts on the CAST bonding curve, any other pool needs tokens bought through CAST first.