Contracts

Program ID

7mSqZcYPUGm99M6sGpNRHjorbB1NPF3ThyTpEjhkKzKF

Deployed on Solana mainnet. Built with Anchor framework. Verified on Solscan.

Source code

The on-chain program is open source:

https://github.com/wanderin/reflex

How tokens are secured

• Staked tokens are held in a program-derived vault (PDA). No admin key can withdraw them.

• Each staking position tracks its own reward debt to prevent double-claiming.

• All arithmetic uses checked math to prevent overflow.

• Dangerous Token-2022 extensions are blocked at pool creation (transfer fees, transfer hooks, confidential transfers, permanent delegate, etc.).

• Tokens with an active freeze authority are blocked at pool creation.

• Pool creation and reward syncing are permissionless — no privileged operator.

• The program upgrade authority is managed via Squads multisig.

Audit status

The program has had an audit by an award winning auditor. See github commits. The source code is public and verified on Solscan for anyone to review.