Keep the zombies out.
Defence-in-depth security for the Vault, the TOASTs, and every builder who refuses to hand their jam to the old banks.
Built like a vault. Run like a protocol.
This page is maintained by Pass The Jam to answer common security and privacy questions about the protocol. It describes the controls we have built, the platform capabilities we rely on, and the responsibilities that remain shared between us, our users, and the underlying infrastructure providers.
Pass The Jam does not store your private keys, mint unauthorised tokens, or commingle reserve capital with day-to-day operating wallets. Every design choice starts from one assumption: the people who create value must keep control of it.
Six layers of protection
Access & Authentication
- ▸Wallet-based authentication. No shared passwords, no central credential database.
- ▸Role-based server functions enforce the principle of least privilege.
- ▸Row Level Security policies ensure users can only touch data they own or are explicitly authorised to see.
Data Protection
- ▸All traffic is served over TLS 1.2+ in transit.
- ▸Underlying cloud datastore encrypts information at rest.
- ▸Sensitive metadata is minimised: we collect only what the protocol needs to function.
Smart Contract & Custody
- ▸TOASTs and JAM are governed by immutable, deterministic smart-contract logic.
- ▸Protocol treasury and reserve flows require multi-signature approval — no single key can move funds.
- ▸TOAST assets are custodied in segregated structures; investor capital is never commingled with protocol operating wallets.
Network & Infrastructure
- ▸Edge-deployed application layer with automatic DDoS mitigation and bot filtering.
- ▸Server functions run in isolated, stateless workers with no long-lived access to raw private keys.
- ▸Rate limiting and input validation on every public and authenticated endpoint.
Monitoring & Incident Response
- ▸Automated alerts on contract events, failed authentications, and anomalous on-chain activity.
- ▸Defined incident escalation path with a dedicated security contact.
- ▸Post-incident reviews feed directly into protocol upgrades and runbook updates.
Legal & IP Safeguards
- ▸Every TOAST is backed by a real IP usufruct agreement, legally enforceable in the relevant jurisdiction.
- ▸Default waterfalls and CDS triggers are documented in the offering structure before any capital is deployed.
- ▸Equity-flip mechanics are disclosed upfront so investors understand recovery scenarios.
What we do. What you do.
Pass The Jam
We secure the protocol contracts, the application layer, the custody structures, the reserve logic, and the infrastructure that serves the site. We publish the rules, enforce them in code, and monitor for abuse.
You
You keep your wallet seed phrase and private keys safe, verify transaction details before signing, use a hardware wallet where possible, and only interact with official Pass The Jam URLs and contracts.
Verified. Not virtue-signalled.
We are working toward independent smart-contract audits and a formal information security programme. Audit reports and compliance documentation will be published or made available to qualified counterparties once complete.
Until then, the protocol runs on transparent, deterministic code: reserve rules, default waterfalls, and issuance mechanics are visible on-chain and documented in the whitepaper. If you are a regulator, investor, or enterprise user and need our latest security pack, please contact us directly.
Found a crack in the vault?
We welcome responsible disclosure. If you discover a security issue in our application, contracts, or infrastructure, please email us with enough detail to reproduce and remediate it safely.
security@passthejam.com