Skip to content
Quantix Security Labs

Kestrelle Launchpad

Token sale launchpad with vesting and liquidity locking.

Projects run token sales with whitelists and tiered allocations. Raised funds seed a liquidity pool, and team tokens vest over time. The platform owner can modify sale parameters and pause claims.

Ecosystem
BNBBNB Chain
Category
Launchpad
Languages
Solidity
Launched
Mar 2026
52.2CSevere risk

Grade C · Severe risk

Severe risk; fundamental controls missing.

−3.0 since Mar 2026 · −3.0 since Jul 2026

Quantix Protocol Research · as of 24 Oct 2026 · About this data

Risk Index

How the score is built

Six weighted components, each scored 0–100 where higher means less risk. Points are the component value multiplied by its weight; the gap is what the component costs against a perfect score.
ComponentWeightValuePointsGap
Code Security30%5416.2−13.8
Operational Security20%5010.0−10.0
Governance Risk15%406.0−9.0
Economic Security15%568.4−6.6
Infrastructure Resilience10%646.4−3.6
Transparency10%525.2−4.8
Quantix Risk Index100%52.2−47.8
CodeOperationalGovernanceEconomicInfrastructureTransparencyKestrelle Launchpad, Code: 54Kestrelle Launchpad, Operational: 50Kestrelle Launchpad, Governance: 40Kestrelle Launchpad, Economic: 56Kestrelle Launchpad, Infrastructure: 64Kestrelle Launchpad, Transparency: 52
Risk Index components: Kestrelle Launchpad Code 54, Operational 50, Governance 40, Economic 56, Infrastructure 64, Transparency 52
ComponentKestrelle Launchpad
Code54
Operational50
Governance40
Economic56
Infrastructure64
Transparency52

Grade scale

  1. AAA90–100
  2. AA85–89.9
  3. A80–84.9
  4. BBB75–79.9
  5. BB70–74.9
  6. B65–69.9
  7. CCC60–64.9
  8. CC55–59.9
  9. C50–54.9
  10. D0–49.9

Score history

8 monthly snapshots

Each point is the Risk Index computed from that month’s component values. Markers below the chart show the events that moved a component; the history starts at launch in Mar 2026.
Kestrelle Launchpad Quantix Risk Index by month
PeriodQuantix Risk Index
Mar ’2655.2
Apr ’2655.2
May ’2655.2
Jun ’2655.2
Jul ’2655.2
Aug ’2655.2
Sep ’2655.2
Oct ’2652.2
  1. 2 Oct 2026

    Incident analysis

    Liquidity lock shortened and drained on a launchpad sale

    An owner-only setter moved a liquidity unlock date forward by six months; the pool was drained four minutes later.

    Incident analysis in Threat Analysis
    • Economic Security−10
    • Transparency−6
    • Governance Risk−6

Risk factors

What keeps the score from being higher, most severe first.
  • HighGovernance RiskProfile analysis

    Owner can change sales in progress

    Allocation, price and claim schedule can change after contributions are made.

  • HighEconomic SecurityProfile analysis

    Shortenable liquidity locks

    The locker trusts the owner’s new expiry, so “locked” liquidity can be released early.

  • HighTransparencyProfile analysis

    Unverified contracts

    Participants cannot review the logic they send funds to.

Recommendations

Each recommendation raises one component to a target value. The score effect is recomputed with the Risk Index model, holding every other component fixed.
  • Governance Risk: 40 → 60

    Freeze parameters once a sale starts

    Make sale terms immutable after the first contribution.

    +3.0

    → 55.2

  • Economic Security: 56 → 68

    Immutable lock durations

    Allow extending but never shortening liquidity locks.

    +1.8

    → 54.0

  • Transparency: 52 → 70

    Verify every deployment

    Publish source for each sale contract from the factory.

    +1.8

    → 54.0

Analysis

Contract, governance and operations

Contract analysis

Source
Unverified
Upgradeability
Transparent proxy on sale contracts
Administrative control
Deployer key (EOA)
Enforced delay
None identified
External dependencies
DEX pool seeded at sale end; Liquidity locker
  • FailSource verification. Recent sale contracts are not verified.
  • FailOwner privileges. Owner can change sale parameters and pause claims after a sale starts.
  • FailLiquidity lock. Owner can shorten lock durations.
  • PassVesting. Team tokens vest linearly.

Governance exposure

High

One externally owned key controls sale parameters, claims, liquidity locks and upgrades.

Operational resilience

Weak

No published incident process; the October incident showed liquidity could be withdrawn early.

Monitoring

Monitoring history

7 recorded security events for Kestrelle Launchpad, most recent first.
  1. 3 Oct 2026HighPlatform ownership transferred to a new addressAccess Control · SaleFactoryOpen
  2. 2 Oct 2026MediumSale claims paused by the platform ownerConfiguration Change · SaleAcknowledged
  3. 2 Oct 2026HighMinted GLF sold into the remaining liquidityWhale Activity · SaleOpen
  4. 2 Oct 2026HighOwner minted 40% of GLF supplySecurity Alert · SaleOpen
  5. 2 Oct 2026Critical96% of GLF/WBNB liquidity withdrawnSuspicious Transaction Pattern · LiquidityLockerOpen
  6. 2 Oct 2026CriticalUnlock date moved from 2027-04-01 to 2026-10-02Configuration Change · LiquidityLockerOpen

Research assessment

No Quantix assessment of Kestrelle Launchpad has been published. Its security findings are represented by the contract-analysis signals above: 3 failed and 0 cautionary.

Continue with

Comparable protocols

Compare side by side

Research

Relevant research

Publications on the risks that matter most for a launchpad protocol.

Architecture

System components

SaleFactory
Deploys sale contracts
Sale
Contributions, allocation and claims
Vesting
Linear vesting of team and sale tokens
LiquidityLocker
Time-locks LP tokens

Turn risk factors into a remediation plan.

A research assessment traces each weakness to code, configuration or process, and verifies the fix before the score moves.