Skip to content
MIFI
Prototype artWizard images are agent-drawn placeholder assets that prove the pipeline. They are not the production collection art.

User guide · Page 08

Risks and Disclosures

On this page

Magic Internet Finance is new software that holds real assets on Solana, and every Internet Wizard is a real financial position wearing a very good hat. This page lists, plainly, what can go wrong: the code, the markets, revenue drying up, swaps failing, third-party services wobbling, who holds which keys, what marketplaces do and do not enforce, when fees actually count as yours, and what this project is not. Read it before you conjure. Nothing here is a forecast, and nothing here is legal, financial, or tax advice.

The short version#

RiskWhat it means for youWhat the protocol does about itWhat it cannot do
Smart-contractNew code can have bugs; worst case is stuck or lost fundsInvariant tests, bounded parameters, no instruction can spend principal, independent review planned before public fundsMake bugs impossible; tests are not an audit
MarketMIFI, SOL, and tokenized BTC can fall in priceReturns exact token amounts on dispelGuarantee any dollar value
ActivityRevenue can slow to zeroLabels each revenue source separatelyCreate revenue when nobody conjures or trades
ExecutionSwaps can fail, slip, or waitRejects out-of-bounds swaps; SOL stays pendingGuarantee a price or a schedule
IntegrationMeteora, Metaplex Core, Jupiter, Pyth, RPC, IPFS can degradeDegraded modes; settlement and dispel keep workingControl third parties
AuthorityUpgrade and admin keys existMultisig, bounded parameters, disclosed inventoryRemove the trust placed in key holders
MarketplaceRoyalties are advisory; vaults changeRefresh-before-buy guidance, 100% of collected royalties to ManaForce any marketplace to pay or protect you
TimingEntitlement is set at receipt, not at trade timeFrequent claiming; visible "claimable, not received"Eliminate the window entirely

Smart-contract risk#

The MIFI program, keeper, indexer, and renderer are new code. New code has bugs until proven otherwise, and "proven otherwise" is a high bar.

An independent security review of the financial program is planned before it holds public funds. Until that review is published, treat the program as unreviewed. Passing tests, including the randomized accounting-model tests, are evidence of care, not an audit. If anyone (including us) points to a green test suite and calls it an audit, that is a red flag.

What the design tries to guarantee, in plain words:

Intended invariantPlain meaning
Principal is untouchableNo admin, keeper, renderer, or swap instruction can move the 100,000 MIFI in a Wizard's vault. Only dispel by the owner returns it
Liabilities are backedSOL owed to Wizards never exceeds the SOL sitting in the reserve
Receipts count onceEvery SOL receipt is recognized exactly once; every settlement leaves the reserve exactly once
One share, one exitTransfer moves one position; dispel removes one share and cannot pay twice
Redemption is never pausableConjure, execution, and ingestion can be paused; settle_wizard and dispel cannot

These are intentions enforced by code and checked by tests. A bug in the code, the tests, or the assumptions behind them could still cause loss.

Practical steps: start on devnet, then start small. Verify the program id, mint, and collection from official project channels before signing anything (this guide deliberately does not print addresses). Nobody from the project will DM you first.

Market risk#

Dispel returns tokens, not dollars. You get back exactly 100,000 MIFI plus whatever else your Wizard's vault holds. What those tokens are worth is up to the market, which does not consult us.

  • MIFI can fall in price, including to near zero. Locking tokens into Wizards reduces freely circulating supply but does not create demand or burn supply.
  • SOL can fall in price. Pending and retained SOL is SOL.
  • Tokenized BTC (Orange Spell) is a tokenized representation of bitcoin on Solana. It is not native bitcoin in a bitcoin wallet. The configured asset is cbBTC (Coinbase Wrapped BTC; shown in the app with its issuer, mint, and decimals), a custodial token: Coinbase holds the bitcoin, and the mint carries an issuer freeze authority that can freeze any token account holding cbBTC, including a Wizard's BTC vault. It may trade at a discount or premium to bitcoin and is redeemable for native bitcoin only through the issuer, on the issuer's terms. MIFI does not custody bitcoin and cannot make an issuer honor anything.
  • NAV is an estimate. The app shows token balances first and an estimated NAV second, built from reference prices with a timestamp and a stale flag. A Wizard's market price on a marketplace can differ from its estimated NAV in either direction.
  • Liquidity is not guaranteed. Selling 100,000 MIFI after a dispel depends on pool depth at that moment. Selling a Wizard depends on someone wanting to buy one, and a Wizard's market price can fall below what you paid for it or below its estimated NAV.

Your Wizard's MIFI is locked while it is active. You cannot sell that MIFI without dispelling the Wizard or selling the Wizard itself.

Activity dependence#

The Mana Pool is filled by activity. Not by magic, despite the name.

SourceWhere it comes fromWhat stops it
Conjure feesNew Wizards being conjuredNobody conjures
Trading feesSwaps on the MIFI/SOL pool, paid to protocol-controlled LP positionsNobody trades, or the venue stops paying fees to us
RoyaltiesMarketplaces that choose to honor the advisory royaltyMarketplaces do not pay, or nobody resells
Direct depositsAnyone sending SOL to the reserveLabeled separately; never presented as trading revenue

Rewards depend on new participants and on trading. Conjure fees come from new conjures. Trading fees come from trading. If activity stops, revenue stops, and Wizards simply hold what they already hold. The Mana page shows the mix by category so you can see how much came from each source.

Two smaller points that surprise people:

  • Every active Wizard has exactly one share. More Wizards means each share of the same revenue is smaller. Rarity, age, art stage, and spell choice never change share weight.
  • Revenue that arrives while zero Wizards exist goes to a visible bootstrap reserve. It is not allocated to the first Wizard as a windfall. Any later policy for it would be explicit and visible before it takes effect.

Sub-lamport rounding remainders from division become nonclaimable accounting dust. It is tiny, it is disclosed, and it is not anyone's.

Execution risk (spells)#

Orange and Infinity spend your pending SOL on a swap. Swaps happen on a live market and can fail, slip, or wait.

FailureWhat you seeWhat happens to your SOL
Price moved beyond the slippage boundExecution rejected on-chainStays pending in your Wizard's vault
No executable route (Jupiter or pool unavailable)Keeper skips your WizardStays pending
Oracle stale or uncertain (Orange)Execution rejected on-chainStays pending
Amount below the minimum viable swapNot attempted yetAccumulates until it is economical
Keeper offline or out of budgetExecutions pauseStays pending; you can self-execute and pay the network fee

How the bounds work, briefly. Each execution is capped by a per-execution maximum and a minimum. Infinity checks output against the pool's spot price with a maximum price-impact bound. Orange checks output against Pyth SOL/USD and BTC/USD reference prices with maximum age, maximum deviation, and confidence bounds. The keeper cannot set an arbitrary near-zero minimum output. If the flash-fill route is used, the transaction fails as a whole if the second half is missing, and the lamports never leave.

Residual risks the bounds do not remove:

  • A pool's spot price can be nudged in a prior transaction. The per-execution cap and the keeper's off-chain pre-check limit the damage; they do not make it impossible.
  • Only the Wizard's owner or the configured keeper can trigger execution. That limits who can time your swap, but it does not stop other traders from moving the market around it.
  • All three spells receive the same gross SOL entitlement for the same period. Realized outcomes differ with prices, slippage, pool fees, and timing. No spell has a multiplier. Infinity "compounds" tokens in your vault; it never increases your share of revenue.
  • Changing spells affects unprocessed and future SOL only. It never sells what you already hold. Queued jobs for the old spell are rejected by a strategy nonce.
  • Orange depends on the cbBTC swap route being available and on fresh Pyth prices; when either is missing, executions are skipped and the SOL stays pending in the vault.

Network fees for keeper executions are paid from the protocol's operating budget, never deducted from your entitlement. If that budget runs dry, the keeper waits and you may execute your own spell and pay the network fee yourself.

Integration risk#

MIFI stands on other people's software. When it wobbles, so do we, in specific and mostly recoverable ways.

DependencyUsed forIf it degradesWhat keeps working
Meteora DBC and DAMM v2Token launch, trading, LP fee sourceTrading fees may stop or become unclaimable; a venue change could strand fee routing since the fee claimer and pool creator are fixed at creationConjure, settle, dispel, Sol Spell
Metaplex CoreThe Wizard NFT and the burn restrictionA Core version change or unproven marketplace behavior could limit where Wizards can be listedOwnership, transfers, dispel through MIFI
JupiterOrange Spell routingOrange executions pauseSOL stays pending; Sol and Infinity unaffected
PythPrice references for Orange bounds and NAV estimateOrange executions rejected; NAV shows a stale flagEverything else
RPC (served through the app's proxy)Reading chain state, sending transactionsThe app cannot read or actChain state is unchanged; you can use another RPC or wallet
IPFS pinning and metadata serviceWizard images and metadataNew renders delay; site shows stale statePreviously pinned images remain content-addressed and retrievable; financial rights are unaffected
Indexer and databaseHistories, lists, statisticsViews lag or go empty ("no data yet")Never authoritative; ownership is rechecked on-chain for every action
KeeperClaiming, ingesting, settling, executingVenue fees stay claimable but not yet received; executions pauseAnyone can call ingest and settle; owners can self-execute

Degraded modes are labeled in the app rather than papered over. Empty states say "no data yet" instead of showing a made-up number.

The burn restriction deserves its own line. A plain Core NFT can be burned by its owner, which would strand collateral. MIFI uses a Core Oracle plugin so that burns outside dispel are rejected while transfers stay unrestricted. This has to be proven against the exact deployed Core version and tested on devnet, including against marketplaces. If a marketplace turns out to be incompatible, the app will say so rather than pretend.

Authority risk#

Some keys can change things. Here is who holds what and what each can do.

AuthorityHolder (mainnet)CanCannot
Program upgrade authorityMultisig, disclosed policy; timelock recommendedReplace the program code, which in principle reaches everything— (see the caveat below; this is the largest single trust assumption)
config.adminMultisigChange bounded parameters, pause conjure/execute/ingest, set the keeper, add art catalogs, withdraw from the protocol treasury, re-point metadata URIsChange principal, decimals, mint, or collection; pause settle or dispel; touch any Wizard vault
config.keeperOperations hot walletClaim and ingest fees, settle Wizards, execute spells within program limitsWithdraw anything; pick a spell for you; move principal
Collection update authorityProgram-derived addressSign asset creation and burns inside MIFI instructionsNo instruction exists to remove plugins, add permanent delegates, or hand the authority elsewhere
MIFI mint authorityExpected to be none after launchMint more MIFI (verify in the published authority inventory)
Protocol treasuryProgram-derived address; admin withdrawsFund operations and keeper network fees from the protocol's share of feesHold Wizard principal or Mana; those live in separate accounts

Parameters the admin can change are bounded in the program:

ParameterProposed launch defaultOn-chain bound
Conjure fee0.05 SOLAt most 1 SOL
Mana share of fees80% (20% protocol)Between 50% and 100%
Dispel fee0 SOL
Per-execution maximum and minimumSet from measured costsConfigurable
Slippage, oracle age, deviation boundsSet from measured liquidityConfigurable
Pause bitsOffConjure, execute, ingest only

What cannot change through configuration: the 100,000 MIFI principal per Wizard, the one-share-per-active-Wizard weight, the mint, its decimals, and the collection. Serials are never reused.

An honest caveat: a program upgrade could in principle change anything, including the items above. The mitigation is who holds the upgrade key and the disclosed policy around it, not arithmetic. The full authority inventory is published with each deployment; read it, and watch for a timelock.

Marketplace and royalty limitations#

Wizards are ordinary Core NFTs with unrestricted transfers, so they should list on compatible marketplaces. Some things to know:

  • Royalties are advisory. The proposed 5% royalty uses Core's None rule set. Marketplaces and wallets may pay it or ignore it. Never assume every resale contributes to Mana. Royalties that are actually collected go 100% to Mana. If a marketplace cannot pay to a program-derived address, the payment lands in the reserve and is still shared, but it is counted under direct deposits rather than royalties, because the program cannot tell the two apart.
  • Compatibility must be verified. Marketplace support for the burn restriction and for Core plugins varies by version. Anything unverified is labeled an integration gap in the app.
  • The vault travels with the NFT. A listing shows a Wizard whose balances can change before the sale executes: the seller may execute a spell, change spells, or dispel (which burns the NFT and voids the listing). Refresh ownership and balances immediately before buying. An estimated NAV label is not a binding quote.
  • Selling sells your entitlement too. Unsettled Mana belongs to whoever owns the Wizard when it settles. Nothing is reset or refunded to the seller.
  • Escrow changes who the owner is. If a marketplace holds your Wizard in escrow, the on-chain owner is the escrow, so you cannot execute, change spells, or dispel until it is back in your wallet. Accrual continues regardless; the share does not care who is holding the hat.
  • No transfer tax, no MIFI marketplace. The token has no transfer hooks. MIFI does not run its own exchange; listing happens on third-party venues with their own terms and risks.

Timing: receipt-time entitlement#

MIFI uses receipt-time entitlement. Your share of a fee is fixed by who is active at the moment the SOL is received and ingested by the protocol, not by who was active when the trade that generated it happened.

Consequences:

  • Trading fees accumulate on the venue first and are not MIFI revenue until claimed and ingested. The app shows "claimable on venue, not yet received" separately from money that has arrived.
  • Someone who conjures just before a large claim lands shares in it. Someone who dispels just before misses it. The keeper claims frequently (proposed default: roughly every 10 minutes and whenever the claimable amount crosses a threshold) to keep that window small. It cannot make it zero.
  • Your own conjure fee goes to the Wizards that existed before you. New Wizards start at the current index with zero historical entitlement.
  • Revenue that has been received is allocated immediately; it is never held back until a processing threshold. The proposed default of executing spells when aggregate pending SOL reaches 10 SOL or on a periodic scan applies to swap execution, not to who is owed what.

Other limitations worth knowing#

  • At most 10,000 Wizards can be active at once. When the cap is reached, conjure is unavailable until someone dispels.
  • Dispel is final. That serial and that character are never minted again.
  • The permanent art-identity reservation account's rent is non-refundable and is shown in the conjure quote. Other account rent is returned on dispel under the documented refund policy.
  • The target exit is a single atomic transaction. If transaction limits force a two-step EXITING path on the deployed version, the app will say so; in that state the Wizard cannot be transferred, earn, or execute, and completion pays only the fixed recipient.
  • Artwork labeled PROTOTYPE is programmer-drawn placeholder art that proves the rendering system. It is honestly labeled in the app and is to be replaced by an artist-approved catalog before mainnet. Art, stage overlays, and trait rarity are cosmetic and never affect rewards.

Not affiliated#

Magic Internet Finance is a new project inspired by the internet wizard aesthetic. It is not affiliated with, endorsed by, or a continuation of any prior "Magic Internet Money" project or token, any Bitcoin organization or foundation, or any exchange. The issuer of the configured tokenized BTC asset is an independent third party. Meteora, Metaplex, Jupiter, Pyth, and the RPC and pinning providers are independent services MIFI integrates with, not partners, unless stated otherwise.

Bitcoin is the lore. Solana is the settlement network. Nobody here speaks for either.

Jurisdiction and taxes#

This is general information, not advice.

  • Digital assets are regulated differently in different places, and some places restrict or prohibit them. You are responsible for knowing whether you may use MIFI where you live.
  • Conjuring, dispelling, changing spells, spell executions (which are swaps), transfers, and sales may each be taxable events in your jurisdiction. Rules and rates vary widely.
  • Keep records. Wizard profiles and the archive retain transfer history, spell history, executions, and timestamps to help, but they are not tax documents.
  • Talk to a qualified professional in your jurisdiction if you are unsure. We are wizards, not accountants.

Before you conjure#

  • Confirm the program, mint, and collection addresses from official project channels.
  • Read the quote line by line: principal, non-refundable action fee, refundable and non-refundable rent, network fee.
  • Decide whether you are comfortable if MIFI, SOL, or tokenized BTC falls sharply.
  • Understand that revenue depends on conjures and trading, and may stop.
  • Try it on devnet first.

Source: docs/guide/08-risks.md. This page describes a protocol still being built; values marked "proposed default" may change within on-chain bounds, and nothing here is a forecast.