Security and custody

This page explains, plainly, where your money sits on Manna and who can move it. Short version: your wallets and keys are yours, Manna can sign trades for you only after you switch on one-tap trading, launched liquidity is locked forever, and Manna's own contracts have not had an external audit yet.

Your wallets and keys#

When you sign in with an account (X, Google, Telegram, email and others), Manna's wallet provider, Privy, creates two wallets for you: a Solana wallet and an EVM wallet (one address on Robinhood Chain, Base, BNB Chain, Ethereum, Arbitrum, Optimism, Polygon and Avalanche).

• The private keys are held in Privy's secure infrastructure. They are never sent to Manna's website or servers, and Manna does not store them.
• You own the wallets. You can export your private key at any time from the account menu (Export key). The export opens in Privy's own secure window, so the key never passes through Manna.
• If Manna disappeared tomorrow, you could still export your keys through Privy and use your funds in any other wallet app.

If you connect your own wallet instead (Phantom, MetaMask and others), Manna never has any access to it. Your wallet app asks you to approve every transaction.

One-tap trading: what Manna can sign#

One-tap trading lets you buy and sell without a confirmation pop-up, and lets Manna run things for you while you're away: orders, DCA, copy trading, the bot's sniper, bridges and withdrawals.

It works by adding Manna's signing key as an extra signer on your two wallets. You switch it on once (Manna asks right after your first sign-in, or shows Turn on one-tap trading in the buy sheet).

What that means:

• Manna's servers can sign transactions from your wallets, and use that only to carry out what you ask: the trades you tap, the orders and copy trades you set up, bridges and withdrawals you request, and launches you start from the bot.
• The signer can only sign. It can't remove you as the owner, can't export your key, and can't lock you out. You keep full control of your wallets and can always export your key.
• Accounts created through the Telegram bot have the same signer from the start, because the bot trades on your behalf.

Turning it off. Open your account menu (your avatar, top right) and tap Turn off next to One-tap trading, then confirm. Manna's signer is removed from both of your wallets with your own Privy session, and Manna never adds it back by itself: it stays off until you tap Turn on. While it is off, every trade asks your wallet to confirm, and orders, DCA plans and copy trades you set up on mannas.fun don't run. The Telegram bot's wallets have no switch yet: to remove the signer there, export your private key and move your funds to a wallet only you control, or contact hi@mannas.fun.

Signing in and sessions#

• Sign-in with accounts is handled by Privy. Sign-in with your own wallet uses a signed message (not a transaction): the request is valid for 15 minutes and can only be used once.
• After you sign in, Manna keeps a single session cookie, manna_session. It is signed so it can't be forged, is unreadable to scripts on the page (httpOnly), is sent only over HTTPS, and expires after 30 days. Manna uses no advertising or analytics cookies. See the Cookie and Storage Notice.

Sign in with Telegram#

Continue with Telegram signs you in through Manna's own bot, with no phone number and no Telegram login widget:

• Who you are comes from Telegram only. The bot learns your Telegram account from Telegram's servers, which Manna checks with a secret only Telegram and Manna know. Nothing the web page sends can claim to be a Telegram account.
• You confirm every sign-in. Opening the link (or sending /login CODE) only shows a confirmation with the browser and place the sign-in comes from. Nobody is signed in until you tap ✅ Sign in, so a link someone sends you can't take your account by itself.
• Short and single use. Each sign-in request lasts 2 minutes, belongs to the first Telegram account that opens it, and turns into exactly one session.
• Tied to the browser that asked. The page that starts a sign-in gets a random secret in a cookie scripts can't read (manna_tg_login). Manna stores only a fingerprint of it. Only that browser can collect the session: another device that sees the link or code can't.
• The code travels one way. If Telegram doesn't open, the page shows a code that you send to the bot. Manna never asks you to copy a code out of Telegram into a website, which is how most sign-in scams work.
• Revocable. Every Telegram sign-in is logged. 🚫 Revoke on the bot's message, Sign out next to a browser in your account menu, or Sign out in that browser ends the session on Manna's servers within seconds.
• Rate limited. New sign-in requests are limited per network address, and sign-in attempts per Telegram account.

• Actions that cost money or spam others are rate limited (for example 5 posts per minute, 30 orders per minute, 10 bridges per 10 minutes, 5 launches per hour in the bot).

Manna's contracts and programs#

Coins on Robinhood Chain are launched by Manna's own smart contracts. The addresses are on Contracts and addresses.

On Solana, coins launch on Meteora's Dynamic Bonding Curve program. Manna's own Solana program is a Token-2022 transfer hook that enforces trading rules; it is not deployed yet. Solana token locks use Jupiter's lock program, set so nobody can cancel a lock.

What Manna's admin keys can and cannot do#

• The contract owner can list pair assets and their starting prices, set the treasury wallet and the keeper, and withdraw the $MANNA buyback and holder reserves. It cannot touch curve reserves, the fee vaults that belong to holders, anyone's claimable balance, or liquidity.
• The keeper (Manna's automated payout key) moves fee-vault balances into holders' claimable balances every 15 minutes, runs burns and Spread airdrops, and collects pool fees. If it were ever compromised, only fees not yet paid out would be at risk. Running it every 15 minutes keeps those balances small.
• Liquidity is locked. On Solana, every public coin's liquidity is permanently locked when it graduates. On Robinhood Chain, the migrator owns every pool position and has no way to withdraw it.

Third parties Manna relies on#

Manna is built on other people's infrastructure, each with its own risks: Privy (sign-in and wallets), Meteora, pump.fun, Jupiter, Raydium and Uniswap (trading venues), KyberSwap (EVM routing), Relay (moving money between chains), and the blockchains themselves. If one of them has an outage, some Manna features may pause.

How to stay safe#

1. 1Use the real addresses. Manna lives at mannas.fun and the official bot is the one linked from there. Bookmark it.
2. 2Never share your private key or sign-in codes. Manna staff will never ask for them, never DM you first, and never ask you to "verify" or "sync" a wallet.
3. 3Check coin addresses. Coins launched on Manna carry Manna's address ending, published on Contracts and addresses at launch. Anyone can copy a name and a picture; nobody can copy an address. Open the coin from mannas.fun when in doubt.
4. 4Read the coin's settings before you buy. The coin page shows its fee, fee split, trading rules, team wallets, dev buy and locks. Rules such as max wallet, vesting or market hours can stop you from buying or selling at some times.
5. 5Keep only trading money in hot wallets and move the rest to a wallet only you control.
6. 6Beware of anyone selling $MANNA. $MANNA does not exist yet. Any "$MANNA" token, presale or airdrop claim today is a scam.

Report a vulnerability#

Found a security issue? Please tell us privately before telling anyone else. Our Security and Bug Bounty page explains what's in scope, how to report, and how we reward reports.

Related#

• Create your account
• One-tap trading and cash
• Contracts and addresses
• Risks