Security

The contracts

Three contracts hold every rule: the launchpad, each coin's token and the graduation contract. Their addresses are published here at launch.
The contracts can't be upgraded. Their code is final once deployed; their settings are held by a multisig (a Safe), so no single key can change them.
Coins on their curve cannot be repriced. Each curve keeps the fees, max per wallet and parameters it was created with; a settings change only applies to coins launched after it.
After graduation, the trading fee is the pool's 1%, set by Project X, not by Mooner. How the locked liquidity's earnings split between creator and protocol is written into the graduation contract and can't be changed by anyone; only Project X's own cut is set by Project X.
Pause switch for emergencies. It stops launches and buys; sells stay open so a pause can never trap funds, and it cannot move anyone's funds.

Some numbers are written into the contracts themselves, so no setting, key or multisig can move them:

What	Limit
Trading fee	Mooner charges 1%. The contracts refuse any setting above 3%, so even a compromised admin key could never make trading expensive.
Max per wallet	Only 1%, 2% or 3%, chosen by each coin's creator at launch, fixed for that coin forever.
Excess tax	5% on the part of a buy past the max. Nothing else is taxed.

Fixed supply. The whole supply is created at launch and nobody can ever mint more.
No freeze. Nobody can freeze anyone's tokens.
Name and metadata link fixed. A coin's name, ticker and metadata link are set at launch and can never be changed, so a coin can't be renamed into something else or pointed somewhere new.

Tests. The curve's math is covered by unit tests, and checked to stay solvent under random trades; and the full life of a coin, from launch to locked liquidity, runs in integration tests against Uniswap V3's contracts, the code Project X runs.
Audit. Its status is published here before mainnet.

Found a vulnerability? See Responsible disclosure.