Document and protect against:
malicious frontend input
quote-mint substitution
transaction tampering
stale RPC state
duplicate transaction submission
fake launch completion
unsafe package substitution
metadata injection
XSS
secret leakage
network mismatch
malicious/compromised RPC responses where practical
wallet-signature confusion
hidden transfers
fee-recipient substitution