# ............................................................................ # # . F O L D # /|\ security.txt · RFC 9116 # / | \ # / | \ one sheet of paper per token, # /___|___\ 24 folds, no program of its own. # /\ | /\ # / \ | / \ Read it top to bottom like a # / \ | / \ folding diagram: every crease # /______\|/______\ below is a promise you can check # on chain. # # ............................................................................ Contact: https://x.com/foldsolstudio Expires: 2027-11-10T00:00:00.000Z Preferred-Languages: en Canonical: https://solfold.xyz/.well-known/security.txt Policy: https://solfold.xyz/.well-known/security.txt # ---------------------------------------------------------------------------- # CREASE 00 · THE SHEET IN ONE BREATH # ---------------------------------------------------------------------------- # # Every FOLD token is a sheet. A buy that crosses a mark on the curve folds # it, a sell that falls back opens the fold and leaves a scar, and when the # curve fills the sheet stands up as a figure: crane, fox, frog, dragon, # or something nobody has a name for. # # Underneath the paper there is nothing exotic. Every token is a standard # Meteora Dynamic Bonding Curve (DBC) pool. FOLD wrote no smart contract, # so there is no FOLD program to upgrade, pause, drain or exploit. # # FOLD is a launchpad, not a presale. Nobody sends SOL to FOLD and waits: # the pool exists on chain from the token's first block and trades there. # # ---------------------------------------------------------------------------- # CREASE 01 · WHAT IS ON THE TABLE # ---------------------------------------------------------------------------- # # cluster ................ mainnet # Meteora DBC ............ dbcij3LWUppWqq96dh6gJWwBifmcGfLSB5D4DuSMaqN # Meteora DAMM v2 ........ cpamdpZCGKUy5JxQXB4dcpGPiikHawvSWAd6mEn1sGG # FOLD DBC config ........ u2cqFAzJX2XsXvnbLtogJwwAoFyiBcgBmfg4gNyj4f8 # DAMM v2 config ......... Hv8Lmzmnju6m7kcokVKvwqz7QPmdX9XfKjJsXz8RXcjp # house wallet ........... 3Va2HaAUz1B7YWtey1XPnj2y6prGT3T35GHMTGPe3DTt # studio (dev) wallet .... 5uefFaDfF1iVPNrwWUujvogEK4srBegtBVJdWMNYSQxG # every mint ends in ..... "fo1d" # # A token that does not end in "fo1d", or whose pool is not on the # FOLD config above, is not a FOLD sheet, whatever its picture says. # # ---------------------------------------------------------------------------- # CREASE 02 · THE PAPER IS FIXED # ---------------------------------------------------------------------------- # # These terms live in the DBC config. A DBC config cannot be edited after # it is created, not by FOLD and not by anyone else. # # supply ............. 1,000,000,000 tokens, 6 decimals, minted once # mint authority ..... none (fixed supply, no one can mint more) # freeze authority ... none (no one can freeze a holder) # metadata ........... immutable after launch # curve .............. starts at 46.1 SOL market cap, # fills at 39 SOL raised # swap fee ........... 4% on every buy and sell, after the window: # anti-snipe ......... a new pool starts at 20% and steps down every # second to 4% at second 40; the creator's buy # inside the launch pays 4% # fee split .......... 30% to the token's creator, the rest to the # platform; no transfer tax, no hidden fee # migration .......... a Meteora DAMM v2 pool, 100% of LP locked forever # unsold tokens ...... left in the curve at migration are burned # # ---------------------------------------------------------------------------- # CREASE 03 · THE FIRST CUT (LAUNCHES) # ---------------------------------------------------------------------------- # # - A launch is ONE transaction and ONE signature in your wallet. It # creates the mint, the metadata, the pool and, if you choose, your own # first buy, all at once. # - Nobody can buy before the creator. The pool does not exist until that # transaction lands, and the creator's buy is inside it. There is no gap # between "pool created" and "creator bought" for a bot to stand in. # - The creator's buy inside the launch pays the floor fee. Everyone # after it pays the anti-snipe fee of the moment. # - The server pre-signs only with the fresh vanity mint key. That key can # do one thing, create that one mint, and it is retired after use. # - Every launch is simulated before it reaches your wallet, and the # server accepts back only the exact message it prepared. # - The very first sheet can only be cut by the studio wallet listed in # CREASE 01. Launching opens to everyone the moment it is on chain. # # ---------------------------------------------------------------------------- # CREASE 04 · WHERE IT TRADES # ---------------------------------------------------------------------------- # # This site is one window onto the pool, not the pool itself. Because # every sheet is a plain Meteora DBC pool, it is visible from its first # block to anything that reads Meteora: Axiom, GMGN, Jupiter, Photon, # DEX Screener, Birdeye and the rest. A buy on any of them folds the sheet # exactly as a buy here does; the folds are read from the chain, not from # this website. After migration the token trades on its DAMM v2 pool. # # ---------------------------------------------------------------------------- # CREASE 05 · WHO HOLDS WHAT # ---------------------------------------------------------------------------- # # - FOLD never holds your keys or your funds. Your wallet signs every # launch, trade and fee claim itself; the site only builds transactions, # and the wallet code checks every one (fee payer, programs) before it is # shown to you. A guess is a signed message, never a transaction. # - The house wallet can claim platform fees, pay awards, pay migration # rent and burn leftover tokens. It has no power over pools, over your # tokens, over creator fees or over locked liquidity. # - The house key lives only on the server and is readable only by the # service account. The studio key never touches a server. # # ---------------------------------------------------------------------------- # CREASE 06 · HOW A FOLD IS CHOSEN # ---------------------------------------------------------------------------- # # - The curve is cut into 24 marks. A buy that crosses a mark makes # that fold. A sell that drops the curve 1% below a mark opens it # again and leaves a scar on the paper. # - Which fold is made comes from SHA-256 over the sheet's sealed seed, the # step, the attempt and the signature of the crossing trade. # - The seed's hash is public from the sheet's birth. The seed itself is # revealed when the figure is finished, so anyone can replay every fold. # - The figure is read from the finished silhouette by fixed rules. # # ---------------------------------------------------------------------------- # CREASE 07 · AWARDS # ---------------------------------------------------------------------------- # # - When a figure is finished, that sheet's platform fees are claimed: # 30% go to the wallet that made the most folds in it, 10% to # the wallet that made the last fold. # - Every award is written to a journal before it is sent and checked on # chain before any retry, so it is never paid twice. # - Guesses are free and earn points, not money. # # ---------------------------------------------------------------------------- # CREASE 08 · THE WEBSITE # ---------------------------------------------------------------------------- # # - Strict Content-Security-Policy: scripts from this origin only, no # inline scripts, no third-party scripts, no frames. # - No cookies, no accounts, no analytics, no tracking pixels. # - Wallets connect through the Wallet Standard. The site will never ask # for a seed phrase or a private key, not even "to verify". # - Uploaded pictures are decoded and re-encoded as plain PNG. # - Every write endpoint is rate limited. # # ---------------------------------------------------------------------------- # CREASE 09 · HOW TO SPOT A FORGERY # ---------------------------------------------------------------------------- # # - The only FOLD site is https://solfold.xyz. Read the address bar before you sign. # - FOLD will never DM you first, never run a "support" chat, never ask # you to "validate", "sync" or "migrate" a wallet, and never airdrop a # token you have to "claim" by signing. # - A real sheet ends in "fo1d" and sits on the config in CREASE 01. # - Memecoins are risky. A figure is art and an award is a reward; neither # is a promise of profit. # # ---------------------------------------------------------------------------- # CREASE 10 · IF THE STUDIO GOES QUIET # ---------------------------------------------------------------------------- # # The paper outlives the studio. If this website ever goes offline, every # pool keeps trading on chain, migration still happens when a curve fills, # locked liquidity stays locked, and creators can claim their fees from # the DBC program with any Meteora tool. Nothing you hold depends on this # server staying up. # # ---------------------------------------------------------------------------- # CREASE 11 · FOUND A TEAR? # ---------------------------------------------------------------------------- # # Tell us privately through a Contact at the top of this file. Please # include what you saw, how to reproduce it and, where it matters, # transaction signatures or mint addresses. # # In scope ...... this website and its API, how transactions are built, # fold, figure and award logic, the house wallet's # operations # Out of scope .. Meteora's own programs (report those to Meteora), # wallets, third-party terminals, social engineering, # volumetric denial of service # # Good-faith research that stays away from other people's funds and data, # does not degrade the service and gives us reasonable time to fix before # disclosure is welcome here. We will not pursue it, and we will credit you # if you want to be credited. # # __ # ___( o> thank you for reading # \ <_. ) the whole diagram. # `---' # # ............................................................................