Mainnet safety#
Afterlife is operating as an MVP Mainnet Beta. It verifies live Solana wallets, converts qualifying SPL positions through wallet-signed burn or Jupiter swap transactions, reconciles the onchain result, enables real-value slot play, and pays capped winnings in Solana USDC.
The beta is live with a deliberately small financial envelope. Safety controls are part of the active product, not a statement that the product is waiting to launch.
In this section#
- Read-only discovery
- Asset exclusions
- Preview, simulation, signature, finalization, and reconciliation
- Mainnet USDC payouts
Permanent action: A successful DEAD conversion destroys the full token balance and closes the selected token account. A successful SELLABLE conversion swaps the selected balance through Jupiter. The connected wallet must approve the exact transaction.
Wallet verification and discovery#
The first signature is a short-lived text challenge. It proves control of the public key and cannot move funds. A verified session can then read public token-account data, metadata, authority state, rent, live prices, and route availability.
Public wallet access is active. Discovery is read-only until the user reviews and signs a conversion transaction.
Live classification boundaries#
| Classification | Current rule | Mainnet Beta action |
|---|---|---|
| SELLABLE | Eligible classic fungible SPL position worth at least $1, with current independent price support and an acceptable live Jupiter route. | Exact-in Jupiter conversion to the configured USDC treasury, followed by finalized output reconciliation and credit. |
| DEAD | Eligible classic fungible SPL position below $1 or without a reliable market value, with burn and close authority. | Burn the full balance and close the account; reconcile actual rent and fees before credit. |
| UNSUPPORTED | Token-2022, NFT-like, LP/pool, frozen, wrapped SOL, unknown, stale/conflicting price, missing authority, or unsafe/unavailable route. | No transaction. |
SELLABLE assets cannot fall through to the DEAD path. If independent prices disagree materially, market data is stale, metadata is unsafe, or a route is unavailable, Afterlife returns UNSUPPORTED/NONE.
Price and route safety#
For real-value conversion, Afterlife requires current Jupiter data plus an independently liquid and active DEX Screener market. It uses the more conservative supported value and fails closed when prices differ by more than 15% or data freshness and liquidity requirements are not met.
Every preparation rescans the selected account. SELLABLE assets receive a fresh exact-in Jupiter order with bounded slippage and price impact. DEAD assets receive exact burn-and-close instructions. Mixed-action plans are rejected so each reviewed transaction has one clear purpose.
Review, simulation, and signature#
Before the wallet is asked to sign, the product shows the complete asset, amount, account, mint, action, expected proceeds or rent, destination, fees, and permanent consequences. The server simulates the exact transaction. Failed simulation, changed account state, expired quote/blockhash, or configuration mismatch stops preparation.
After signing, the server verifies that the signed message is byte-identical to the reviewed transaction and that the expected wallet is the signer. A returned signature is evidence of submission, not settlement.
Finalization and reconciliation#
Credit is issued only after finalized confirmation and action-specific reconciliation:
- DEAD: selected accounts are absent, treasury rent delta and actual fees are measured, and current SOL/USD pricing is verified. Credit is
floor(120% × reclaimed rent USD − network fee USD). - SELLABLE: the finalized Jupiter transaction, exact source asset, treasury USDC destination, minimum output, token deltas, and fees are verified. Credit follows the reconciled output.
Submitted and reconciling plans are durable. Reconnecting the same verified wallet resumes them instead of creating a duplicate. Request IDs, unique database constraints, conditional state transitions, and settlement locks provide replay and duplicate-credit protection.
Real-value play and payout envelope#
Mainnet spins require a fresh treasury reserve snapshot, a 120% default reserve ratio, serialized coverage of the complete 2,000× maximum regular win, and active wallet/platform caps. Automatic USDC payouts are sent only to the wallet that owns the session.
Current public limits:
| Control | Live value |
|---|---|
| Minimum payout request | $0.01 |
| Maximum payout request | $10 |
| Wallet 24-hour payout ceiling | $10 |
| Wallet lifetime cash-out ceiling | $10 |
| Platform 24-hour payout ceiling | $50 |
| Default reserve ratio | 120% |
| Verification mode | Single-primary-RPC MVP |
These caps define the active Mainnet Beta operating envelope. They can be tightened during an incident and should only expand after stronger independent verification, operational monitoring, treasury separation, responsible-play controls, and jurisdiction-specific review.
See Product status, Key risks, and FAQ.