AntiVamp

Changelog

What shipped, and when.

Tracked against the public roadmap — no marketing dates, just what's actually live.

  1. 2026-07-21

    Security hardening

    • • Closed an unauthenticated reservation enumeration path on GET /v1/reservations?wallet= (ILIKE wildcards rejected; wallet must be hex/base58).
    • • Webhook registration and delivery reject private/loopback/metadata IPs; HTTPS required on hosted APIs.
    • • Public unauthenticated routes rate-limited at 120 req/min per IP; production hosts no longer treat spoofed localhost as dual-env.

  2. 2026-07-16

    Phase 3 — Launchpad network

    • • Solana registry program live on mainnet — the audited program handles reservations, 60d/48h/90d/7d copycat locks, keeper-verified milestones, and guardian corrections. Program upgrade authority, admin, and guardian are held by a Squads multisig.
    • • Completed an internal adversarial audit of the Solana program before mainnet: fixed a PDA-prefund denial-of-service, an initialization front-running vector, missing unreserved-launch locks, unbounded renewal stacking, and added keeper price-push bounds. All fixes re-verified on devnet.
    • • Reproducible OtterSec verified build now runs in CI (verification submission pending a one-time multisig upgrade to the verifiable bytes).

  3. 2026-07-16

    Phase 3 — Launchpad network

    • • Shipped the partner sandbox: self-serve API keys, HMAC-signed launch-validation decisions with a 5-minute TTL, launch/bond/milestone reporting, signed webhooks with delivery history and replay, and per-key request logs and rate limits.
    • • Backed the registry index, partner keys, and webhooks with a dedicated database; the public API now serves live index data with an honest fail-closed adapter.
    • • Froze the normalization standard with official cross-language test vectors (v1 at the time; v2 adds the Unicode confusables pass and is current) and published the developer quickstart, error codes, and OpenAPI spec.

  4. 2026-07-16

    Phase 1 — Novamp protection

    • • Deployed the TickerReservationRegistry on Hyperliquid (HyperEVM); reservations and launch validation are live on the chain.
    • • Deployed the graduated-token registry on Hyperliquid for post-bond copycat locks.
    • • Rebuilt the marketing and documentation site — pricing, networks, status, and full API reference.

  5. 2026-07-15

    Phase 1 — Novamp protection

    • • Added the global ticker availability hook powering cross-chain identity checks.
    • • Wired Solana treasury payments into the global ticker claim flow (off-chain payment, on-chain-equivalent claim).

  6. 2026-07-13

    Phase 1 — Novamp protection

    • • Finalized the graduated-token registry addresses for Base and Robinhood Chain (Novamp's origin chain).
    • • Published the reservation registry and graduated registry contract ABIs used across every chain adapter.

Looking for what's next rather than what shipped? See the roadmap on the homepage.