ceda field node · saferoom · live · devnet
campaign · 02
dead man's switch for solana
deadmans.fundevnet · zero gas in betabuild a room ›
ceda · campaign 02
devnet · live
SAFEROOM
specimen · sealed · armed
4Tkk·n3mP·ZELX·1dFW
survivor
66Net…ZxY3A
l4d-02

A dead man's switch for your Solana bag.

Walk in. Seal the door. Sleep through the horde.

Pre-arm a vault. Define one trigger. When the horde arrives, your funds evacuate to safety in 23ms. No keepers. No alarm clock. No human reaction window. Permissionless on arrival.

read field brief ↓
evac latency
23ms
trigger → settle
baseline
3000ms
off-chain keeper
speedup
130x
vs status quo
instructions
6
anchor / rust
HORDE
chapter 01 · evacuation brief

stay alive
while you sleep.

SAFE ROOMis a dead man's switch wrapped in a safe room. You pre-stage tokens inside a vault PDA, register one trigger (price, time), and configure where funds go when the horde arrives. While the room is armed, anyone may broadcast the evacuation tx the moment the trigger condition is reached. Vault drains atomically to the destination you chose. No bot you need to trust. No exchange API. No alarm clock.

Liquidations don't wait for your reaction time. Rug pulls don't respect your sleep cycle. The horde doesn't negotiate. Sit a guard at the door before you close your eyes. The door slams shut on contact.

solana-onlycomposable primitivepermissionless triggeranchor / rusttoken-2022 readypyth-pull oracle
chapter 02 · evac mechanism

the door
is the trigger.

The vault is a PDA owned by the room. The room is a PDA owned by the program. The trigger is a flag the horde flips. The door is automatic.

  1. phase · 01build the room

    Arm the vault

    Owner deposits tokens into a PDA-owned vault. Configures trigger (oracle + threshold) and destination. Status flips to ARMED.

  2. phase · 02watch the perimeter

    Trigger waits

    Oracle account is the early-warning siren. Off-chain responders watch it. Nobody can touch the vault while status is ARMED and trigger is false.

  3. phase · 03horde arrives

    Threshold breached

    Price drops below threshold or scheduled slot passes. Oracle data is published on-chain. Trigger becomes truthy.

  4. phase · 04door slams

    Anyone may evacuate

    Any signer broadcasts trigger_safe_room. Program verifies oracle, checks staleness, transfers vault to destination, flips status to EVACUATED.

  5. phase · 05horde eats whatever stayed

    Unprotected positions liquidate

    Wallets without a Safe Room get destroyed on the same candle. The room owner wakes up with their funds at the destination they pre-chose.

  6. phase · 06extraction

    Reclaim rent

    After terminal state (EVACUATED / DISARMED / EXPIRED), owner calls close_safe_room. Vault account closes. Rent returns.

chapter 03 · observatory

live rooms.

armed
01
rooms standing
evacuated
01
hordes survived
avg evac
21ms
trigger → settle
room · sf-001armed

SOL → USDC

trigger · pyth(SOL_USD) < $240

action · transfer 4.2 SOL → USDC

room · sf-002evacuated

BONK → USDC

trigger · pyth(BONK_USD) < $0.000022

action · transfer 12000000 BONK → USDC

evacuated · 21ms

on-chain rooms hit devnet immediately · seed cards above are stubs to show what a saturated observatory looks like. evacuation will succeed once trigger slot passes.

chapter 04 · autopsy sheet

blueprint.

v0.1.0 · anchor 1.0 · solana 3.x
instructions · 6

weapons rack

  • initialize_registry · one-time global init
  • create_safe_room · vault deposit + trigger arming
  • trigger_safe_room · permissionless evacuation
  • disarm_safe_room · owner cancels, vault refunds
  • expire_safe_room · past deadline, vault refunds
  • close_safe_room · terminal-only rent reclaim
triggers · 3

siren rack

  • PRICE_BELOW · oracle price drops under threshold
  • PRICE_ABOVE · oracle price exceeds threshold
  • TIME_AFTER · slot >= scheduled trigger slot
  • oracle staleness window · 50 slots
  • expiry window [25, 27_000_000] slots
  • pyth pull oracle integration · week 2
actions · 2

exit routes

  • TOKEN_TRANSFER · vault to destination ATA
  • TOKEN_BURN · destroy token from vault
  • jupiter swap action · week 2
  • vault authority = room PDA
  • destination locked at create time
  • min_received guard prevents downside spikes
deployment record
on-chain · devnet · live
program id
4Tkkn3mPZELX1dFWVUVnqiCeD3P9z76GSzmFBsmNZ527
registry pda
FA1QFRh3ZqVq9mwUUftgGFd4tab1mHVQ42h9Ywk8Rdcb
deploy authority
66NetYhHPMeMcvXE8Lryr8MJQB21GwojxHXKre3ZxY3A
registry init tx
4DyRc4oVoPM8JcbXGhdUxUQH…

on-chain program live on devnet. browser sdk wire-up · pyth pull oracle · jupiter swap action · responder bot · all targeted for week 2. use at your own quarantine.