Security & transparency
Everything a wallet review team or curious user needs to verify what this dApp does.
On-chain identity
Program ID
DnzB7YfUeDLryWRYYDCtBngoYvSgMTyzr2RpUS6r2GAM
Network
Solana - currently devnet for testing, mainnet at launch
Token mint
Set per-deployment in the NftitBank PDA. View on chain via the program account.
Source
What the program can do
- initialize - one-time bank setup at deploy. Locks the $TOKEN mint address.
- initialize_collection - one-time creation of the Metaplex Certified Collection NFT.
- wrap_nftit - moves 1,000,000 $NFTITS from the caller into a vault PDA, mints them a fresh NFT, verifies the NFT into the collection. Caller is the only signer.
- unwrap_nftit - burns the caller's nftit NFT and returns 1,000,000 $NFTITS from the vault to the caller. The caller must hold the NFT in their ATA. Permissionless - anyone holding a nftit can unwrap it.
The program holds no custody outside the per-NFT vault PDAs. Each vault's authority is derived from its NFT's mint address, so the locked tokens follow the NFT through every transfer (Magic Eden, Tensor, direct send). Every wrap/unwrap is initiated by the user and signed in their own wallet.
Hard limits enforced on chain
- 1,000,000,000 $NFTITS total supply (pump.fun-immutable)
- Exactly 1,000,000 $NFTITS locked per wrap
- Maximum 1,000 NFTs in circulation at any time
- NFT mint authority retired by Metaplex master edition (1-of-1)
- Vault authority is a PDA derived from the NFT mint
On-chain invariants checked by audit script
scripts/audit_chain.sh (reproducible from any RPC). Last devnet run: GREEN.
- in_circulation == total_wrapped - total_unwrapped
- live NftitAsset count == in_circulation
- Σ vault.amount == in_circulation × 1,000,000 $NFTITS
- Each live NFT mint has supply == 1
- (next_tier - 1) - len(free_tiers) == in_circulation
- All free_tier values fall in [1, 1,000]
- collection_mint is set (Metaplex Certified Collection live)
What the website does and doesn't do
- Reads on-chain state via Solana RPC (Helius)
- Builds wrap_nftit / unwrap_nftit instructions in the browser
- Asks your wallet to sign - every action is your signature
- Does not request any token approval, account delegation, or sign-and-broadcast permission. Each wrap and unwrap is its own one-shot transaction.
- Does not collect emails, store cookies, or run analytics scripts.