Security model

The controls below reduce execution risk; they do not make memecoin trading or delegated wallet access risk-free.

Wallet and worker boundaries

Atomic application limits

Supported worker claims reserve max-per-trade and daily spend limits in Postgres before a signature is requested.

Revocable delegation

Privy delegated access can be revoked from Wallet. Keep it off unless unattended execution is needed.

Provider-secured keys

Wallet keys remain with Privy or your connected wallet provider; Degenaration does not store private keys.

Delegation is powerful

The current delegation grant is not a cryptographic trade-only policy. Application checks are a separate server-side control.

Every auto-buy is screened

Liquidity floor (skips illiquid tokens)
Mint authority revoked (no infinite printing)
Freeze authority revoked (can't freeze your tokens)
Independent risk-score screen before supported Discord entries
Maximum price-impact and slippage guardrails
One database winner for each limit or subscriber execution

Audit roadmap

NOT AUDITED An independent third-party review has not been completed. Manual swaps use Solana Mainnet with real funds. Bots do not place trades on their own yet.

Rate-limited APIs · input validation · no private keys stored · RLS-protected database.