Albrim docs

What it does

Albrim ($ALBRIM, Chinese name 白帽, "white hat") is a Solana security coin. The name is alb, white, and brim, the edge of a hat.

When a hack happens, an AI publishes an analysis within 1 hour and a public vault burns coins. Behind that, an AI white hat hunts bug bounties on a fixed budget, inside public bounty scopes only.

This site can't drain your wallet. It has no connect button. It is read-only and has no wallet code at all. You buy on Jupiter, Axiom, wherever you already trade.

The coin's only use inside the product is your wallet's plain send. Send to an aim address and the coin is locked forever, because an aim address is off-curve and has no private key. The amount counts as a vote for the next audit target.

Where it stands

Supply and authorities

Mint authority and freeze authority are revoked at launch. Supply is fixed and there are no emissions. The only team-side coins are the public vault.

After graduation the LP is 100% permanently locked. Nobody can pull it, the team's multisig included.

At graduation Meteora takes 0.2% of the liquidity, measured at 0.17 SOL and 400,000 ALBRIM, which is 0.04% of supply. Those are not team coins, and Meteora may sell them.

Meteora can upgrade its programs. Its upgrade authority is live, so its 20% share is a constant in code it controls, and a future upgrade could change that.

The burn vault

The public burn vault holds 3% of supply, bought in the open at launch, with a cap of 5%. It sits in a separate 2-of-3 Squads multisig, with a public promise to use it for burns only.

Each confirmed incident burns once. $1M or more burns 1% of the vault. $100M or more burns 10%. The rule uses the current vault balance at burn time, so each burn is a share of what is left.

An incident is confirmed by two or more independent sources, one of them trusted, such as an official statement, DefiLlama, SlowMist or PeckShield. Loss is the confirmed minimum.

A burn waits a cooling period after the analysis goes out, because it can't be undone. A small hot wallet holds up to 10% of the vault so a burn can run without waiting for signatures. If it can't cover a burn, the multisig has 24 hours to execute it, and the desk shows that deadline.

Where fees go

The fee is 2.5% flat, after a 60-second decay from 50% that makes sniping the first minute expensive. Fees are taken in SOL.

Meteora's protocol share is 20% of the fee, which is 0.5% of volume. The rest, about 2.0% of volume, is the team and operations share. It is about, not exactly, because anyone adding liquidity after graduation takes a proportional part of it.

There is no buyback from fees.

What volume pays

This is arithmetic, not a forecast. AI costs, at most $20 a day plus $5 an incident, are paid out of the team and operations share.

The AI budget

Hard caps are $20 per day for scanning and $5 per incident for analysis. When the day's scan budget is spent, scanning stops until the next day. If the AI fails on an incident, a fixed template is published, and the page says which one you are reading.

Bounty income may be zero for a long time. If any ever arrives, 70% of it buys coins and burns them, and 30% goes to the team.

Launch day schedule

Nine utilities open exactly 30 minutes apart, in this order.

Recompute the schedule hash

Right after T+0 a person writes the hash of the plan on-chain by memo, once. The plan is the launch time and each utility's id and opening time, with sorted keys and no spaces. It is published in site.json as schedule.canonicalText.

curl -s https://THIS-SITE/data/site.json | node -e "let s='';process.stdin.on('data',d=>s+=d).on('end',()=>console.log(require('crypto').createHash('sha256').update(JSON.parse(s).schedule.canonicalText).digest('hex')))"

What the chain does not enforce

The vault's burn-only promise is a public promise. The chain does not enforce it. What you can watch is the multisig itself.

The schedule hash is on-chain, and that proves what the schedule was. Opening each utility is done by a cron job and is not enforced on-chain.

Plain statements

This is more than a memecoin only if the desk, the alerts and the scans keep running. They are what the coin is for.

The product has to work by T+30m, when the incident desk opens. You can watch whether it does.

The revenue link to the token is weak. The fee is the team and operations share, and none of it buys the coin back. What touches the token is the vault burns, the aim locks, and, if bounty money ever arrives, a bounty buyback. Vault burns create no buying.

Supply is fixed, authorities are revoked, and there are no emissions. The only team-side coins are the public vault.

Nothing here pays a dividend or depends on new buyers paying old ones. There is no promise of return.

The security market is large. That says nothing about this coin. Bounty income may be zero for a long time.

The incident list

The attack lists on this site come from DefiLlama's public hack list. No culprit is ever named here.