Security

Check any Sprivio token on Solana

Paste a token's mint address. Your browser reads the mint account, its Metaplex metadata and its Meteora pool config directly from Solana, and says in plain words what anyone — including us — can and cannot do with it.

What Sprivio uses on Solana

• Meteora Dynamic Bonding Curve — the program every Sprivio token trades on until it graduates: dbcij3LWUppWqq96dh6gJWwBifmcGfLSB5D4DuSMaqN. Written and run by Meteora, not by us; we cannot change it.
• Meteora DAMM v2 — the pool a token moves into when its curve fills: cpamdpZCGKUy5JxQXB4dcpGPiikHawvSWAd6mEn1sGG.
• Metaplex Token Metadata — holds each token's name, symbol and logo link, created immutable so nobody can edit it afterwards.
• The Sprivio wallet — J5PcSAJ1gzsAiJuvKt89jba9m2Dg1cXsBQoGM8ampu7A — receives Sprivio's 40% of trading fees, the 2% graduation fee and half of each graduated pool's locked liquidity. It has no power over anyone's tokens.
• Token metadata files — each token's name, logo and links are served from sprivio.com/m/…, addressed by the hash of their own content, so the file behind a token can never be swapped for another.

There is no Sprivio-written program on Solana. Everything that holds or moves money is Meteora's code; our part is the parameters written into each token's config account at launch — which is exactly what the checker above reads back.

How to read this page

Three kinds of contract get confused with each other constantly, so they are kept apart here and never merged into one list:

• The $SPRIVIO token — the platform's own ERC-20.
• Sprivio platform contracts — the factory, the deployer, the treasury, the distributor. These are ours, and their source is verified.
• Third-party contracts — the Pons launchpad and the curve $SPRIVIO trades on. We did not write them. Where we cannot verify something, this page says so instead of leaving a blank that reads like approval.

A token launched by someone else through Sprivio is not endorsed by Sprivio. Anyone can deploy through the factory. Check the token you are buying, not just this page.

What the bytecode search does and does not prove

What it proves. A function can only be called if its 4-byte selector is in the contract's dispatch table. If the selector is absent from the deployed bytecode, that function cannot be called by anyone, including us. That is a property of the EVM, not a promise.

What it does not prove. It checks the selectors listed, not every conceivable one. A contract could name a dangerous function something we did not look for. That is exactly why source verification matters as well: for the contracts marked verified you can read the whole source, not just the selectors we chose to search.

The method was tested both ways before shipping: ten functions known to exist were all found, and two invented function names were correctly not found. A search that always returns "clean" would be worse than no search at all.

Where the earlier Robinhood $SPRIVIO trades — stated precisely

The earlier Robinhood Chain $SPRIVIO has not graduated. It is still on the Pons bonding curve, which you can confirm by calling graduated() on the curve contract above. There is therefore no Uniswap v4 pool for it yet, and no locked LP position, because neither has been created.

Charting sites show a "pair" for it. That pair is the curve, surfaced by their indexer. When a Sprivio-launched token graduates, its liquidity moves into a Uniswap v4 position held by the curve contract, and the curve has no code path that withdraws it. Until graduation there is nothing to lock and nothing to unlock.

We would rather write this out than let a green "LP locked ✅" badge imply a pool that does not exist.

Fees, in numbers you can check

The trading fee on a Sprivio curve is 1%, 2% or 3% — the creator picks one of those three at launch and it is fixed into that token forever. The factory accepts no other value. Launching itself is free. The creator keeps 95% of the trading fee for the first 100 launches on each chain and 80% after that; the remainder is the platform's only recurring income. On Robinhood Chain it is paid to the buyback treasury above — a contract with no withdrawal function, so its only exit is buying $SPRIVIO and burning it. On Base, BNB Chain and Arc it is still paid to an ordinary wallet we control, not to a treasury contract; wiring those three to a treasury needs a new factory on each, because the recipient is immutable. We would rather say that plainly than let you assume otherwise. There is no transfer tax — the token has no fee-on-transfer code, which the bytecode search above reflects. Cross-chain buys cost 0.3%.

These are compile-time constants, readable as FEE_BPS_LOW(), FEE_BPS_MID(), FEE_BPS_HIGH(), launchFee(), EARLY_CREATOR_FEE_SHARE_BPS() and CREATOR_FEE_SHARE_BPS() on the factory, and as feeBps() on any individual curve — that last one tells you what that token actually charges. They cannot be changed after deployment; there is no setter.

The full economics are in the paper ↗ · Live burn ledger ↗

Still open

• No third-party audit. Our contracts are unaudited. Source verification is not an audit and we do not present it as one.
• The token and the curve are third-party contracts — written by Pons, not by us. Their source is now verified on Sourcify: Pons published the full source when they verified their own factory, and we submitted those same sources against these two addresses. The code you can read is theirs; the verification is something anyone could have done.
• Liquidity is thin. Check the live number on the paper before trading anything.

Read the full risk disclosure before you use anything here.