| Threat | Mitigation |
|---|---|
| Operator steals locked tokens | Jupiter Lock program holds tokens; we have no admin keys |
| Fake lock UI drains wallet | Only Jupiter Lock instructions for $ANSEM; user reviews in wallet |
| Wrong token locked | UI hardcodes $ANSEM mint; on-chain escrow stores mint; flex verification checks mint |
| Early unlock | Jupiter Lock enforces cliff; program checks Clock sysvar |
| Phishing site | Official domain; verify program ID on Solscan |
| π link hijacking | Wallet must sign API requests; cannot unlink/link another wallet without signature |
| Fake flex verification | Tweet oEmbed + on-chain tx must be signed by wallet, touch Jupiter Lock + $ANSEM mint |
- Seed phrase / private key
- Unlimited token approvals (single transfer per lock)
- See or touch your private keys β signing happens only in your wallet
- Hold tokens on our servers β escrows live on Solana mainnet
- Move your funds without a wallet signature you approve
- Official
@solana/wallet-adapter+ Wallet Standard - Every lock = signed mainnet transaction you review in Phantom/Solflare/etc.
- Every lock verifiable on Solscan
- Open-source frontend on GitHub
Mutating endpoints (POST/DELETE on /api/x-links, POST on /api/flex-verify) require an Ed25519 wallet signature over:
ansem.locker:{action}:{wallet}:{timestamp}
Signatures expire after 5 minutes. This prevents third parties from linking, unlinking, or verifying flex on behalf of your wallet.
- Public π post URL (x.com / twitter.com only)
- Post must mention ansem.locker, $ANSEM, and lock-related keywords
- Post must include
https://solscan.io/tx/β¦for your lock - On-chain tx verified: your wallet signed, Jupiter Lock program, $ANSEM mint present, tx succeeded
Locks use Jupiter Lock (LocpQgucEQHbqNABEYvBvwoxCPsSbG91A1QaQhQQqjn), open-source on-chain escrow infrastructure.
Private GitHub security advisory or DM @jontype.