Security
Last updated: July 11, 2026
Curvex is a non-custodial interface — we never hold your funds, private keys, or seed phrase. Every trade, fee, and graduation is enforced by our on-chain Solana program, not by our backend or UI. This page exists so anyone — users, wallets, and security reviewers — can independently verify exactly what Curvex does on-chain.
This is the one and only Solana program CurveX uses for bonding-curve creation, trading, and graduation. Verify it directly on-chain before trusting anything else claiming to be CurveX.
ACbDgim3zKyUpARoULoWDTF32JZEYM9pj4rNADx7Hkr4View on Explorer →Curvex never takes custody of your funds. Every transaction — creating a coin, buying, selling, following a wallet — is built client-side, sent to your wallet for review, and only executes on-chain once you sign it. We cannot move your funds, and we never ask for your seed phrase or private key. Anyone claiming to be Curvex support asking for either is running a scam.
Buy and sell fees are calculated and deducted by the on-chain program itself, with hard-coded fee caps per trade. The UI only displays an estimate — the confirmed on-chain transaction is always the source of truth. There is no backend switch that can change fees, redirect funds, or apply a different rate than what the program enforces. See the full breakdown on the Fees page.
When a coin's bonding curve fills, liquidity automatically migrates to a Raydium pool and 100% of the LP tokens are burned on-chain — immediately and irreversibly. Neither Curvex nor the coin creator can ever withdraw that liquidity. This removes rug-pull risk from the platform side entirely. See How It Works for the full graduation flow.
Curvex has been live on Solana mainnet since approximately June 2026. The program has not yet undergone a formal third-party security audit. We rely on hard-coded fee caps, an immutable graduation flow, and full on-chain transparency in the meantime — every instruction the program accepts can be inspected on-chain at the program ID above.
Found a vulnerability, a suspicious clone of curvex.io, or unexpected on-chain behavior? Please reach out via the Contact page rather than posting it publicly, so we can investigate before disclosure.