Risks

• Upgradeable program. While an upgrade authority exists, an upgrade could change any rule. Check it on Verify on-chain.
• Admin controls. The admin can pause new launches and deposits and pause the vault agent. Trading, refunds and claims don’t depend on it.
• Agent availability. If the agent is offline the vault doesn’t trade. Its status is public at /agents.
• Bugs. The program and SDK are unaudited software. Devnet is for testing; its SOL has no value.

A creator can’t dump the bundle, but can hold ordinary tokens bought on the curve like anyone else, and token metadata (name, image, links) is whatever they uploaded. Holdfast doesn’t vet launches.