Security

Asset protection and security best practices

On-Chain Security

PDA Escrow Accounts

All locked tokens are held in Program Derived Addresses (PDAs) that can only be controlled by the Atomic Labs program. No single private key can access escrowed funds, eliminating single points of failure.

Time-Lock Enforcement

Locks are enforced on-chain. Tokens cannot be withdrawn before the lock maturity timestamp. Early exits require explicit instruction execution which applies financial and reputation penalties.

Authority Controls

The program includes emergency pause functionality and asset registration controls. These are managed by a multi-sig authority to prevent abuse.

Best Practices

Verify Asset Registration

Only lock tokens for assets that are registered and active in Atomic Labs. Check asset_config before creating locks.

Understand Lock Duration

Choose lock durations you can commit to. Early exits incur penalties and reputation loss.

Monitor Your Locks

Track your active locks and their maturity dates. Complete locks successfully to build reputation.

Use Reputable Wallets

Connect using well-audited Solana wallets. Never share your private keys.

Audits & Transparency

Atomic Labs contract code is open source and auditable. All on-chain operations are transparent and verifiable. Security audits will be published as they become available.

Always verify you're interacting with the official Atomic Labs program. Check program IDs and verify contract addresses before locking tokens.