Protocol & operations

Release state

Follow the three-part deployment guide: program, website and token delivery worker.

Enigma v1 is deployed on Solana mainnet. The finalized bytecode, upgrade authority, configuration and lookup table match the reviewed release. The first funded launch-and-delivery acceptance remains outstanding. Configuration, local execution and public funded acceptance are separate checks.

Sequence’s previous program was closed by its authority. Enigma v1 replaces that dependency; it does not migrate Sequence accounts, deposits or claims.

Prepared for funding review

Current mainnet rent check: 2026-11-04T23:46:27.379Z. The compiled artifact, pinned Pump dependencies, independent launch-and-claim tests and deployment-restart tests passed. Program deployment is finalized. A funded launch-and-delivery acceptance remains outstanding.

Conservative available balance

0.591037720 SOL

Retained account deposits

0.571037720 SOL

Temporary upload buffer

0.563499000 SOL

The estimate includes a 0.02 SOL network allowance. Account deposits are not trading purchases. Recovery depends on retained authority and account shutdown; 0.002174240 SOL has no recovery instruction in this release. Network fees are spent.

The program identity derives from the selected dev wallet and reviewed artifact. The deployment console requests wallet signatures, never a private-key upload. The runner derives its program address, resumes the original upload, verifies deployed bytecode and initializes a fresh account table. A capped public test follows deployment before enabling public deposits.

Independent program

Source: Pinocchio Rust, version 1. The compiled program checks windows from 60 to 3,600 seconds in whole-minute increments. Wallet caps have a maximum of 1% of the token supply. Local VM tests execute all 60 windows and reject over-cap instructions. Mainnet program identity and configuration are verified. The program charges no Enigma fee.

Deployed program address: 9BGuGSqb2m54PmaxX3mVTNtPLU8Ps4bE1cuiY9QkF9HN

Finalized deployment slot: 465500596. Upgrade authority: ENGm5zbJA2h6KixiqPZ9CbnCgHviSghWBhNMQfmjDGpx. View the deployed program.

Derived ProgramData: BXMDCYsJQddNtECXwrJX7ytsU9jWC2xMqyJB7gN6zV1u

Compiled code SHA-256: 1a55b7329c62cacdc0454f52410b2c02f9c6eb12dce0e0a8984831c73b3dc729

Initialization requires the actual loader upgrade authority. Its only configuration action pauses new windows. It cannot withdraw offering funds or change an existing offering’s terms through the published v1 instructions. The deployment upgrade authority can still replace code; this is an explicit trust boundary.

Escrow vaults are isolated by offering. Anyone can finalize after close or pay for a claim, but the funds and tokens go only to the recorded beneficiaries. Finalization creates the mint and buys atomically.

Verification

The independent program test loads pinned Pump.fun, Pump Fee and Mayhem binaries into an isolated Solana VM with synthetic wallets. It exercises initialization, deposit caps, timing, atomic mint-and-buy, rent reimbursement, beneficiary validation, proportional claims and replay rejection. Upstream account snapshots are public fixtures, not current market quotes.

Local test transactions never appear as live activity or explorer receipts. This is not an independent security audit and does not establish public mainnet execution.

The application checks mainnet genesis, executable owner, ProgramData, deployment slot, code hash, configuration and address-table state before preparing a transaction. The reviewed manifest pins the finalized deployment; any unexpected program upgrade pauses wallet actions.

Operations

Deployment requires a separately authorized spending cap, funded wallet, confirmed program deployment, initialization and a new address table. The closed Sequence table is not reused. Publish the reviewed deployment manifest before enabling wallet actions.

A private production RPC remains server-side as SOLANA_RPC_URL. User wallets sign their own reviewed transactions; this application does not need user private keys. The shared development RPC is not embedded in production.

ENIGMA_WRITES_ENABLED remains false. This flag cannot override onchain checks or version verification. Exact signed-wire recovery stays scoped to both the wallet and program identity.

Any wallet can finalize a closed pool. No funded automatic keeper is bundled or promised. Deposits and the creation budget cannot be withdrawn before finalization; a dependency failure can strand them. Small proportional rounding remainders stay in the vault with no operator sweep instruction.

Uploaded metadata uses content-addressed Vercel Blob URLs and remains dependent on that hosting account. It is not immutable decentralized storage.