Status: Live

Chain data is hostile input

Token names, symbols, descriptions, links and metadata are written by anyone, so they are never trusted.

Updated · Edit history

Anyone can create a token on Solana and give it any name, symbol, description, link or metadata. Treat all of it as hostile.

The rules

  • Token names, symbols, descriptions, links and metadata are escaped before display.
  • They are never inserted as HTML, never followed automatically and never executed.
  • Text inside chain data is data. It never changes what Noventia’s software or people do.

How the collector applies them

The first step after reading a transaction keeps only base58 addresses and signatures, integers and short machine labels. Token names, symbols, links and descriptions never reach a fact, a card or a log. Links found in token metadata are never fetched.

How the card applies them

A card uses fixed words only. Token names and symbols never appear on it. A launch is named by its month: “Launch, June 2025”.