Security
Security is built into every layer of The Candidate Protocol.
đĄī¸Security & Admin Capabilities
Complete transparency about what the protocol team can and cannot do
âī¸What Admins CAN Do
Pause new sales
Set sale_active = false in FoundersConfig
Impact: Stops new purchases, existing vesting unaffected
Set CCV spending limit to 0
Pause automated buybacks via Squads
Impact: Buybacks pause, USDC stays in vault
Adjust parameters via timelock
72-hour delay for any parameter changes
Impact: Community has time to react
Update fee percentages
Modify marketplace fee rates
Impact: Only affects future transactions
âšī¸All admin actions require 2-of-3 multisig approval and most have a 72-hour timelock, giving the community time to react.
đWhat Admins CANNOT Do
Freeze your tokens
No token freeze authority exists
Why: Tokens are controlled by Streamflow, not us
Modify your vesting schedule
Vesting is immutable once created
Why: Streamflow enforces the schedule
Access your Streamflow streams
You own your streams directly
Why: No custody by The Candidate Protocol
Mint or burn CANDI tokens
Fixed supply of 1B, mint authority revoked
Why: Mint authority was revoked at token creation
Rug pull the protocol
CCV funds are in multisig vault
Why: 2-of-3 multisig + 72h timelock
đThese limitations are enforced by the Solana runtime and our third-party partners. We couldn't do these even if we wanted to.
đ¨ Emergency Procedures
In case of a security incident, the protocol can be paused without affecting your tokens:
- 1Set CCV USDC spending limit to 0 via Squads (stops buybacks)
- 2Set
sale_active = false(stops new purchases) - 3Your existing vesting streams continue unaffected
- 4You can still withdraw unlocked tokens from Streamflow
â No token freeze. Your tokens are always yours.