The transaction enforces the outcome

Every swap step carries a real on-chain bound: amountOutMinimum for exact-input swaps and amountInMaximum for exact-output swaps. The bound is derived from a clamped slippage tolerance — 50 basis points (0.5%) by default, with a hard ceiling of 500 basis points (5%). The signing guard refuses to sign a swap that has no bound.

The figure labelled “minimum received” in the review is a display of that bound; it is never itself the protection. The calldata is.

A route whose live price impact exceeds the configured ceiling (300 basis points, 3%, by default) is blocked before signing. Slippage is never widened to rescue a bad route — that is exactly what enables a sandwich. When a price impact cannot be measured, the app does not invent a number; an unmeasurable impact does not block, but it is never presented as zero.

A quote is a live, perishable value with a hard 20-second limit and a 15-second proactive refresh. A stale quote disables Review/Confirm and is refreshed. If a refresh fails transiently while the last-known-good quote for the current intent is still usable, the app keeps that quote (so staleness keeps ageing honestly) and retries after a short backoff. A definitive failure — no route, unsupported token — clears the quote so the honest error shows.

prepareSigning is the only path to a signature. Immediately before the wallet is asked to sign, it fetches fresh balances and a fresh quote, re-reads the canonical intent and the wallet account, re-checks freshness and price impact, re-checks balance and gas coverage, rebuilds the calldata from the fresh quote, asserts the on-chain bound, and re-reads the intent a final time. Any change aborts with a specific reason. Calldata is never reused from an earlier build.

The guard also refuses a payment the interface is not showing: it compares the displayed intent fingerprint to the canonical intent, so a UI desync cannot result in signing a transaction that differs from what was reviewed.

After a transaction is confirmed, the app proves the recipient's actual on-chain transfer from the receipt against the minimum the transaction enforced. A reverted transaction is failed. An unprovable delivery is reported as unverified — never as success. The interface does not treat a closed wallet prompt as a completed payment.

• We do not claim tokens are audited or safe. Discovery is not an endorsement.
• We do not claim MEV-protected submission is active. Monad has no dapp-controllable private submission path, and a private endpoint cannot be forced onto an injected wallet.
• We do not claim any security audit, partnership or third-party certification that has not happened.
• We do not claim gas is sponsored. Gas is paid in MON by your wallet.
• We do not claim the app ever holds your keys. It never does.

Your wallet authorizes every transaction. The app builds a payment for you to approve; it cannot sign on your behalf, bypass wallet authorization, or alter approved payment details after confirmation. Demo mode is labelled everywhere and never produces a transaction hash or claims a real transaction.