Security
Security
What is really AvaxHook, how to spot a copy, and how to tell us about a problem.
Official identity
| What | Official value |
|---|---|
| Website | avaxhook.fun (and its docs subdomain) |
| X account | x.com/avaxhookfun |
| Chain | Avalanche C-Chain, chain id 43114 |
| $HOOK token | 0x898D93e5BF6ee61a03f50CB0cdBF9C3751dA8Dc7 |
| Launchpad | 0x922A73Bd8aC4db8729aADE7a09288Da536058F02 |
| Hook | 0x179278C7ECD2cFbc003D76985Ba05f11DDc36ACc |
| Router | 0xC8B2b67A1E286f74648A705617d54a0415fc651a |
Every other contract is listed on the Contracts page. A token's identity is its address plus its chain. Names, symbols and logos are chosen by whoever launches, so many tokens can share them.
Impersonation warning
Copies of AvaxHook and of $HOOK exist. AvaxHook never DMs you first, never runs a presale or private sale, never offers support in DMs and never asks for your seed phrase or private key. Any "$HOOK" with an address other than the one above is not ours, and any site other than avaxhook.fun that asks you to connect a wallet as AvaxHook is a phishing site.
Check before you sign
- The address bar says avaxhook.fun.
- Your wallet shows Avalanche C-Chain and a contract from the table above (or the token you meant to buy).
- You never approve more than the trade needs, and you never sign a message you can't read.
- The token page shows the token's hooks; read them before you buy. Some cap buys or lock sells for a while.
Report a problem
Found a bug in a contract, a vulnerability in the site, or an account pretending to be us? Send a DM to @avaxhookfun with what you found and how to reproduce it. Please don't post an unfixed vulnerability in public, and don't test against other people's funds. The machine-readable contact is at /.well-known/security.txt.
Note
Every contract is source-verified on Snowtrace and went through internal audit rounds; an external audit is planned. Admin rights sit with a multisig, and nobody can remove a pool's locked liquidity.