Security

What is immutable, what the platform can do, and known limits.

Immutable by construction

Supply: 3B minted at launch into the pools. The only mint path afterwards is the bridge, which mints exactly what was burned elsewhere.
Liquidity: the position on every chain is locked permanently; there is no withdraw function.
Routes: peers, verifiers and gas options are written by the factory during the launch transaction and sealed. The per-token owner contract can only raise the enforced gas within a cap.
Fee split: fixed in code on both chains.

Which wallets may call the factory’s launch and sign the price snapshot (the launcher allow-list).
Its own 20 % share of trading fees and the 0.2 % bridge fee.

The bridge depends on LayerZero’s verifiers and executor. If a verifier pauses, transfers on that route wait; funds are not lost because burn and mint are atomic per side.
Opening price uses a signed USD snapshot; a sharp move in BNB or ETH during the ~2 minute launch window can leave a small gap between chains, which arbitrage closes.
The contracts have been tested on forks and local validators; an independent audit has not been published yet.