Protocol
Security
Review what WickDeck launch contracts constrain, which risks remain outside the protocol, what admin roles can change, and how to verify deployed code.
WickDeck protocol constraints can reduce certain technical risks, but cannot guarantee token value, creator behavior, market liquidity, or trading outcomes.
What is it?
Security in these docs means protocol constraints: what a creator cannot do to a native token or its graduation liquidity, and what roles still exist on the factory and vaults.
Why does it exist?
Traders often collapse “no mint authority” into “this token is fine.” The useful split is: immutable token powers versus remaining admin powers versus everything the contracts cannot see.
How does it work?
Native launch tokens follow Wick Standard:
- Fixed supply
- USDC bonding curve
- No mint authority
- No freeze authority
- No blacklist
- Fixed trading rules
- Defined graduation path
Admin and operational roles still exist:
- Factory DEFAULT_ADMIN_ROLE may set protocolFeeBps from 0 to 5%. The new rate applies to all launches.
- Fee Vault DEFAULT_ADMIN_ROLE may setFeeShares. Shares must sum to 10,000 bps, each at most 50%, safety at least 10%. The new split applies to subsequent accruals; existing credits are not reallocated.
- DEADLINE_MANAGER_ROLE may extend a registered curve’s window (increase-only, capped per call). It cannot shorten a window or un-expire a market.
- Fee Vault admin may pause new accruals, set registries, and claim protocol / safety balances. Claims by creators and referrers stay available when accruals are paused.
- ACCRUER_ROLE on the vault is limited to protocol contracts. Users should not approve the vault.
This page does not claim an audit. If a report is added later it will be listed here. Until then, verification is factory address + implementations + explorer + source.
What can go wrong?
Protocol mechanics reduce specific technical risks. They do not determine the value, legitimacy, or future performance of a market.
WickDeck protocol constraints can reduce certain technical risks, but cannot guarantee token value, creator behavior, market liquidity, or trading outcomes.
Admin keys, deadline extensions, fee changes, paused accruals, and EmergencyPaused market state are real capabilities. Bugs, oracle/routing failures, and chain risk sit outside Wick Standard.
What should traders understand?
Use Contracts to see what this app is talking to. Use Scan for the token in front of you. Do not treat a verified source badge as a valuation.