Skip to content
Chapters

Security

What not to do

Seven things that sink a project before the demo.

  • Deploy to mainnet.
  • Issue your own token if the product works without one. The judges see it on the first slide.
  • Write your own AMM, bridge, oracle or custody. It already exists, maintained and with public audits: Jupiter, Wormhole, Pyth, Switchboard, Squads. An audit reduces the risk, it does not remove it: verify the program ID per cluster.
  • Store personal data onchain. It is public and it does not get deleted.
  • Bolt blockchain on at the end, "to qualify for the track".
  • Leave the demo for the last minute. Record a backup video.
  • Use the public RPC for the demo.