Module 04

Security and Trust

What is structurally impossible on TREADSTONE, what we verify, and how the platform behaves when things go wrong.

Trust on TREADSTONE is not a badge or a promise. It is a set of things the contracts make structurally impossible, a set of things anyone can verify on-chain, and an honest account of how the system behaves when something goes wrong. This page covers all three, including the current unaudited public beta posture.

What is structurally impossible

These are not policies we intend to follow. They are outcomes the code does not allow.

  • Liquidity principal cannot be unlocked. The locker that holds each launch position has no function to withdraw or reduce the principal. There is no admin path, no creator path, and no emergency multisig path, because the function does not exist.
  • Tokens cannot be turned into traps. The token template is a standard ERC-20 with no owner mint, no blacklist, and no pause on trading. A creator receives nothing that would let them freeze holders or inflate supply after launch.
  • Trades cannot be taxed. Factory tokens carry zero transfer tax. Buys and sells are plain swaps.

What we verify and what you can verify

Fee claims are permissionless. Collection and distribution can be triggered by anyone, and each recipient pulls their own share, so no claim depends on our interface being online.

You do not have to take our word for any of this. Two checks settle most questions:

  • Confirm the locker holds the position NFT for the token. The token page shows the locker address and the position NFT ID, and you can confirm the ownership directly on the block explorer.
  • Confirm the token has no owner functions. Read the token contract on the explorer and check there is no owner, no mint, and no pause on transfers.

The platform also surfaces best-effort risk signals on token pages: whether the factory is the known TREADSTONE factory, whether the LP is locked in the known locker, whether the token has zero transfer tax, and whether ownership is renounced. These are informational aids, not guarantees, and the copy says so. The authoritative source is always the chain.

What "pause" means here

TREADSTONE has one pause, and it is narrow. The protocol can pause new launches, for example under a spam flood or during an incident. It can never freeze trading of a token that already launched.

This matters because "paused" on some platforms has meant holders could not sell. On TREADSTONE that is impossible by construction: existing tokens trade on their own Uniswap V3 pools, which the protocol does not control and cannot halt. Pause stops the factory from minting new launches and nothing else.

Verification and audit posture, stated honestly

TREADSTONE is live on Robinhood Chain mainnet as an unaudited public beta. We will not overstate that status.

  • Factory, locker, fee router, reinvest module, and token template addresses are public on this site and on the block explorer. Read the code and the deployments yourself.
  • An external audit is planned and not yet complete. We do not describe the contracts as audited today. When an audit report exists, it will be linked here.
  • Structural guarantees (permanent LP lock, immutable factory tokens, permissionless fee claims, pause never freezes existing trading) are verifiable in the deployed bytecode and on-chain state, independent of an audit badge.

Treat this page as an honest account of what the code makes impossible and what you can verify today, not as a claim that a third-party audit has already finished.

How it behaves when things go wrong

The useful question about any launchpad is what degrades under stress and what cannot.

What degrades is convenience. If the website is down or the indexer lags, discovery gets worse: the floor may be slow, and metrics may be stale. That is the failure surface, and it is bounded.

What cannot degrade is the core. Trading continues on Uniswap because the pools are independent of our frontend. Fee collection and creator claims still work, because they are permissionless on-chain calls you can make from a block explorer. The liquidity locks hold, because there is no unlock to fail. When an incident happens, our commitment is to say so publicly and quickly rather than go silent, and to never quietly change contract behavior in response.

The short version: the parts that hold your money are on-chain and cannot be switched off. The parts that can break are the parts that only make things more convenient.