Security

ICE Market is a token launchpad on Solana where every token is paired with a commodity coin (gold, crude, orange juice, a Rolex Daytona and others) or with Meteora's MET. Tokens launch on a Meteora bonding curve and graduate to a Meteora DAMM v2 pool whose liquidity is 100% locked. Of the 1–3% trading fee the creator picks, 40% of every fee is paid to holders of the token in its commodity coin, every 15 minutes.

The site is icemarket.fun, live since 15 September 2026. The pre-launch domain icemarkets.fun (registered 12 September, same owner) now redirects here. There is no other official domain; anything else using this name is not us.

Wallets score a site partly on the age of its domain. icemarket.fun is new, so Phantom shows a “new domain” notice for the first weeks, and some wallets flag new launchpads until they have reviewed them. Our reviews with Phantom and OKX are in progress. We will never ask you to bypass a wallet warning; if you are unsure, wait until the notices clear.

Every transaction this site asks you to sign is built in your browser from the programs listed below and simulated before the prompt opens. It never asks for a token delegate and never changes an account authority. Besides the amount you are paying, a trade costs only the Solana network fee and, the first time you trade a given token, about 0.002 SOL of rent for the token account that holds it (refundable if you ever close that account). The site keeps about 0.02 SOL of your balance aside so fees never fail; launching a token costs about 0.025 SOL in rent and fees.

All four ICE Market programs run on Solana mainnet-beta and are upgradeable only by the admin multisig. Each carries a security.txt with these same contacts, visible on Solscan under the program's “Security” tab.

• Graduated liquidity is 100% permanently locked to the fee router at migration. No wallet, including ours, can withdraw it.
• Commodity coins are redeemable only against the protocol's USDC reserve, and holders are never blocked from redeeming by the reserve ratio. It is minting that is refused — a buy that would push the reserve below 98% of the coins it backs reverts on chain.
• Volume caps are off. Trades are gated on chain by price staleness, price confidence and the reserve ratio, and a keeper watchdog monitors every coin's backing.

The programs went through an internal security review on 12–13 September 2026 covering the four programs, the keeper, the indexer, the SDK, the web app and the deployment process. Every Critical finding and most High findings were fixed in the source, and the programs on mainnet were deployed on 15 September 2026 from source that carries those fixes. Two High and four Medium findings remain open; the two Highs are scoped for the next program upgrade. The keeper wallet itself holds only operating SOL, and neither High finding can reach the locked liquidity or send reserve USDC anywhere but the multisig treasury: one would let a compromised keeper key divert a single holder-reward epoch, the other the accrued base fees. No third-party audit has been completed yet. Verified builds (source published at a pinned commit so anyone can rebuild the binaries) are the next step.

• Open any program above on Solscan and read its Security tab: the contacts must match this page.
• Check the upgrade authority of each program on Solscan: it must be the multisig vault listed above.
• Before signing, read the simulation your wallet shows: the only balance changes are the ones the trade panel quoted.

Email icemarketsonsol@proton.me or message @TradeOnIce on X. Please give us a reasonable time to respond before disclosing publicly. The same contacts are in /.well-known/security.txt and in each program's security.txt.

See also how it works.