Risk
Risk disclosure
Read this before you plant, buy, hold or harvest anything here. It is short on purpose.
Memecoins can go to zero
Every coin on Sapling is a memecoin. Most have no product, no team and no reason to hold value. Prices move fast and can fall to zero. Only trade with money you can lose entirely.
Roots are limited
A coin's harvest value comes only from the ZEC in its roots. Roots exist while there's ZEC in them. Deposits are capped at 5 ZEC per coin, so the value per token can be small, and a coin with little trading has little in its roots. Harvesting a tiny amount can pay out zero and fail. The admin can pause harvests for one coin or for all coins.
pump.fun dependency
Coins, curves and pools live on pump.fun and PumpSwap, which Sapling does not control. pump.fun can change its fees, reassign a coin's creator (which stops that coin's fee stream to its roots), change how Token-2022 coins are minted, or remove ZEC from its list of allowed quote mints. Any of these can stop new fees, new plantings or trading through this site. ZEC already in the roots is not affected by pump.fun.
Bridge risk
ZEC on Solana is not native Zcash. It is bridged by NEAR's Omni Bridge and its value depends on that bridge holding the underlying ZEC. If the bridge is hacked, paused or shut down, ZEC on Solana can lose value or become unredeemable, and every coin's roots hold exactly that token. It also has none of Zcash's privacy properties.
Transfers from and to Zcash
Bringing ZEC in from Zcash and paying out to Zcash depend on NEAR Intents, a third party. It can be slow or unavailable, can hold a transfer for a compliance review (a large transfer made through a wallet using it was reported held for over 50 days in 2026), and relies on its own bridge and signers. Sapling cannot release or refund a transfer.
- Deadlines. What arrives after a quote's refund time is refunded, not swapped, and a refund can take days (until NEAR Intents' own deadline). ZEC sent to a deposit address after that deadline may be lost. Never reuse an old deposit address.
- Wrong addresses. A transfer to a mistyped or look-alike address cannot be reversed. Scammers send tiny amounts from look-alike addresses so they appear in your history: never copy an address from a transaction history or an explorer, and check every character.
- Privacy. Payouts and refunds go to transparent Zcash addresses. The amounts, the times and the link to your Solana wallet are public, on both chains and at NEAR Intents.
- Network upgrades. NEAR Intents and Zcash wallets may pause Zcash around a network upgrade (the next, NU7, is planned for early November 2026).
Smart-contract risk
Your funds pass through several programs: sapling_vault, pump.fun, PumpSwap and Jupiter. Any of them can have a bug or be exploited. A flaw in sapling_vault could let the roots be drained; a flaw in the others could affect trades and swaps. Audits reduce this risk but do not remove it.
Admin key risk
sapling_vault has an admin key, and the program itself has an upgrade authority. The admin can pause a coin's roots and, while they are paused, move their ZEC to one fixed recovery address. If the admin key is stolen, an attacker can do the same, which can freeze your harvest. If the upgrade authority is stolen, a malicious program version could drain the roots. Both keys are held by the operator; their addresses are in the Docs.
Not investment advice
Nothing on this site is financial, investment, legal or tax advice. The operator is not a licensed adviser. Roots, market caps and prices are shown for information only and can be stale. You are responsible for your own decisions and for the rules that apply where you live. See also the terms.