Risk disclaimer

• Prices are extremely volatile. Most tokens lose almost all their value, often within hours.
• Locked liquidity prevents a liquidity pull, but it does not stop large holders, including the creator's dev buy, from selling into the pool and crashing the price.
• Fees of 1%–5% per trade, plus an anti-snipe fee of up to 80% in the first two minutes, make frequent trading expensive.
• Liquidity sits in fixed price ranges. At some prices, depth can be thin and price impact large. Always set slippage limits.
• Anyone can launch a look-alike token. Verify before buying.

• zk-pad's contracts have not been externally audited. They are deployed and verified on BNB Smart Chain mainnet, but no independent security firm has reviewed them. Only use amounts you can afford to lose.
• zk-pad's contracts (factory, token, hook, locker, anti-snipe module, FeeVault, adapters, consolidation) and the systems they rely on (PancakeSwap Infinity, Railgun, Chainlink) may contain bugs that lead to loss or frozen funds.
• Because liquidity is locked forever and there is no migration path, a bug in a pool, the hook or the locker cannot be fixed by moving funds.
• Oracle-bounded consolidation depends on Chainlink or reference-pool prices, which can be stale or manipulated within their bounds.
• PancakeSwap can change its protocol fee and other parameters on its side.

Tokens are paired with quote tokens issued by third parties. Some issuers keep powers over their tokens:

Freeze-capable (Tier 2)

XAUt (Tether Gold), USD1 and FDUSD can blacklist or pause addresses. A frozen pool halts trading in every launch paired with that quote, permanently, because the liquidity cannot move. A frozen FeeVault traps every beneficiary's balance in that asset.

Upgradeable

USD1, FDUSD, XAUt and Binance-Peg USDC are upgradeable proxies. An upgrade could add transfer fees or other behaviour that breaks pools or claims.

Custodial / bridged

USDT, USDC, BTCB and ETH on BSC are backed by issuers or bridges. They can depeg or lose backing.

RWA

Real-world-asset tokens such as XAUt depend on the issuer's custody of the underlying asset and on its legal standing.

Tier badges and issuer names are shown in the app. Disabling a quote in the registry only stops new launches. It does not protect existing pools.

• Railgun is third-party software governed by its own DAO. It can pause, upgrade, change fees (shield fee about 0.25%) or block tokens. A paused or failing shield makes the claim revert, and funds stay in the FeeVault.
• Newly shielded funds wait about one hour in Private Proofs of Innocence (PPOI) standby. If a shield is not accepted, the funds can only go back to their origin, a per-beneficiary contract that re-credits the FeeVault. Recovering them takes extra steps.
• Spending privately may require broadcasters that accept USDT or BNB on BSC. Their availability is not guaranteed.
• BSC's shielded pool is small, which weakens anonymity. See Privacy.

• Social-account binds are not live yet: no attestors are running, so a social escrow cannot be bound and its fees stay in the FeeVault until attestors come online (or the fallback, if set, triggers).
• Social escrows rely on k-of-n attestors to verify account ownership. If enough of them collude or are compromised, they could sign a bind for the wrong person. The timelock and the veto by the guardian or any single attestor are the safeguards, and they only work if someone notices in time.
• Attestors can go offline, refuse service, or veto. A bind can then be delayed indefinitely. With a fallback set, funds go to the fallback after ≥ 180 days of inactivity.
• If the social platform's account is hijacked, an attacker could try to bind. Rebinds take twice the timelock and the current owner can cancel them, but only if they act.
• OAuth platforms can change their APIs or suspend accounts, which can block verification.

• A lost claim link or key cannot be recovered by anyone. A leaked one can be drained by whoever acts first.
• Relayers may be unavailable or charge changing fees. Claims can still be submitted by any relayer, or by yourself.
• The indexer may lag or show wrong data. The chain is the source of truth.

zk-pad reduces what is revealed. It does not guarantee anonymity. Coin metadata, amounts, timing, small anonymity sets, network-level observers and your own behaviour can all link a beneficiary to an identity. See what is and isn't hidden.

Laws on tokens, donations, privacy tools and sanctions vary by jurisdiction and change over time. Using zk-pad may be restricted where you live. Donations through zk-pad are generally not tax-deductible, and beneficiaries may owe tax on what they receive. Get professional advice if in doubt.