Safety and authority

These statements describe the reviewed source, not a security audit or a recorded live deployment. Verify which package and policy a launch actually uses.

Funds and supply

The launch contract holds curve reserves, reserved allocations, undistributed opening-round funds, and accrued fees. The launch ticket holds the full supply before finalization. Finalization removes minting authority through Sui’s Coin Registry; creator capabilities cannot mint tokens or withdraw curve reserves through the current API.

An opening-round bid cannot be withdrawn. A launch that never reaches its target has no cancellation, expiry, or target-miss refund. Selling while the public curve is live is an execution at the current curve price, with fees and possible sell burn; it is not redemption at your purchase price. Virtual quote coins are a pricing parameter and cannot pay sellers.

At the target, curve trading stops. If DEX migration fails, its whole transaction rolls back. There is no migration deadline or fallback refund. A pool may not exist yet when the curve closes.

Liquidity custody

Migration creates a full-range venue position and a shared vault. The current migrators API has no path to withdraw a vault-held position. The migrators package is upgradeable, so vault-held positions and balances depend on its future code and upgrade governance.

On Cetus, the initial migration position is burned through Cetus LP Burn; the vault keeps its fee-collection proof. Later auto-liquidity uses a separate vault-held position. On Bluefin, the initial position itself remains in the vault. These custody mechanisms have different trust assumptions; avoid treating every position as permanently locked.

Pool trading still carries price, liquidity, smart-contract, and external-venue risks. The pool’s initial price can differ from the curve’s last price. Auto-liquidity uses the current pool price and can lose value to transactions that manipulate that price around collection.

Cetus’s pool-manager authority can still create the reserved pair’s pool before migration, and Cetus can remove a registered tier. Either can block migration under the current adapter. There is no user recovery call for these cases; recovery would require a migrators upgrade.

Who controls what

Authority	Powers in the current code
Live curve-fee capability holder	Claims creator curve/LP fees; changes the post-migration LP split after settling existing fees. The capability is transferable.
Live metadata capability holder	Changes coin name, description, and icon.
Blast creator administrator	Reassigns either capability and invalidates the previous one. Reassignment also cancels an outstanding initial creator claim.
Blast fee/treasury administrators	Change policies for new launches, Blast’s live share of existing trade fees and LP fees, and payout destinations. LP shares may reach 100% per asset.
Blast account-claim signer administrator	Replaces or disables the signer used to attest Blast account ownership. Address-based creator claims do not need that signature.
Blast rewards/buyback administrators	Choose funded reward allocations and execute buybacks with minimum-output protection.
Blast upgrade administrator	Authorizes compatible upgrades. Launchpad upgrade authority can be destroyed; the migrators package has no corresponding immutability call.

Current launch economics are fixed as described in Plan a curve launch. Compatible upgrades can change contract behavior; a fixed field is not a promise that all future code is unchanged.

Check before trading

Confirm the coin type and intended deployment, quote coin, sell burn, both trade-fee rates, allocation plan, opening-round state, graduation progress, and minimum received. Review creator identity separately from the launcher: the wallet publishing the coin need not be the recipient of creator fees. Reward allocations and an admitted partner or quote coin are not endorsements or guaranteed returns.