Security & Contact.

How to reach us.

For anything private, email hello@o4asol.com. That includes privacy requests, takedown requests and security reports. Privacy explains what the site keeps and what you can ask for.

For public questions, use the official ONE4ALL accounts on X and Telegram. Both are public: anyone can read replies on X and messages in the Telegram group. Never post personal details, wallet secrets or an unfixed security problem there.

Only trust contact details shown on o4asol.com.

What we will never do.

• DM you first about your wallet.
• Ask for your recovery phrase (the secret words that unlock a wallet), your private keys or any password.
• Ask you to pay or send tokens to fix a problem, unlock rewards or handle a request.
• Run “support” accounts. Our official accounts are the ones linked on o4asol.com, and none of them is a support account.
• Ask you to claim rewards. When a payout runs, RevShare sends it automatically, with no claim step, and this site has no claim page. Rewards vary and are not guaranteed. RevShare’s distribution guide explains how payouts work, and Rewards & Risks explains why one may not come.

If anyone does any of these things, it is not us, even if the name and picture look right.

Official places and addresses.

Website

o4asol.com, also served at www.o4asol.com. Check your browser’s address bar. Copycat sites use names that look almost the same.

o4A token address (mint)

5BoCYsrqTucqoceJqq8oZbkmrpuzutDsTUkvtTteRREV

Check the o4A token on Solscan

Donation Omni

7cXdWuXa9Xqde4QYbHcukJwrxFQoGSUz31jYbBQXstz1

The only address for tips. If Wall of Legends payments ever open, they go here too. It is the project owner’s wallet.

X

@o4Asol on X

Telegram

t.me/o4asol, a public group.

Email

hello@o4asol.com

The project’s wallets, and who controls each one, are listed on Transparency.

What each wallet action does.

You can read the whole site without a wallet. These are the only things on o4asol.com that ask your wallet for anything.

Connecting a wallet

Only on the Wall of Legends pages, and in Omni Universe when you link a wallet to your home. It shares your public address with the site. Connecting can’t move funds. Your wallet asks you again, separately, for each signature or transfer.

Wall of Legends sign-in

A message. Its first line is “o4asol.com wants you to sign in with your Solana account”, or the same line with www.o4asol.com if that is the address you opened. It also says “This verifies your wallet; it does not approve a payment.” It proves you control the address. It works once and expires after 5 minutes. It moves no funds.

Wall of Legends bid

A signed message. It starts with the same first line as the sign-in, so read past it. Its bid part names the auction, the place, your picture, the amount and the network. It says “Winner pays within 2 hours. No funds move now.” Standard lines follow, including when it was made and when it expires.

It moves no funds, but it commits you to pay if you win. Bidding is closed.

Wall of Legends payment

A real SOL transfer from your wallet to Donation Omni. Our server builds it, and your browser checks that it matches your order before your wallet asks you. You approve it in your wallet and pay the network fee. It can’t be reversed. Payments are closed.

Omni Universe wallet link

A message that links your wallet to your home. Its first line is “ONE4ALL Omni Universe”. It names your home and its address at o4asol.com/u/, your wallet and the time, and it ends “Signing proves the wallet is yours. It approves no payment and moves nothing.”

Your wallet asks you to approve the connection and then the message. It is not a transaction, and it gives no permission to move your tokens. The site accepts it only for that home, only together with that home’s key, and only within 10 minutes of the time it carries. Then the site reads your wallet’s public o4A balance. It moves no funds. Check that the address bar says o4asol.com or www.o4asol.com before you sign.

Message signing at /build/sign

A tool for the project owner’s wallet checks. It signs any text you paste. Only sign text you wrote yourself. A signature can be used to log in somewhere else.

Tips

You send them from your own wallet to Donation Omni. The site builds nothing and asks for no signature. Check the address matches Donation Omni on this page. Gifts can’t be reversed or refunded.

Buying o4A

The site links to Jupiter and RevShare. You trade there, under their terms, not on this site. Check the official mint before you trade.

The site never asks for token approvals (permission for an app to move your tokens later), never mints NFTs and never sets up recurring charges. It has no way to reverse or refund a transaction. The site can’t sign or send anything for you, and the project’s own code for Omni has nothing that signs Solana transactions.

Before you sign or send.

• Check the address bar says o4asol.com or www.o4asol.com. A sign-in message from this site starts with the same name as the address bar. If it names any other site, don’t sign it.
• An Omni Universe wallet link names your own home at o4asol.com/u/ and your own wallet. If it names another home, another wallet or another site, don’t sign it.
• Read what your wallet shows you. If it asks you to approve a transaction when you expected only a message, stop.
• Check the o4A mint and any destination address against this page before you trade or send.
• Never sign text someone sent you in a DM, a reply or a group chat.
• Never type your recovery phrase into a website, form or chat, and never send it to anyone.
• If something looks wrong, close the wallet window and ask us first.

Reporting a security problem.

If you find a security problem in o4asol.com, email a security report to hello@o4asol.com with “Security” in the subject.

What to include.

• What you found and where: the page, link or feature.
• The steps to see it for yourself.
• What someone could do with it.
• How we can reach you about it.

Never put a recovery phrase or private key in a report, not even your own.

While you look.

• Test only with your own wallet and your own data.
• Don’t open, change or delete anyone else’s data, and don’t touch anyone else’s wallet or funds.
• Don’t disrupt the site. No load tests, floods or spam.
• Keep it private until we’ve had time to fix it. Don’t post it on X, in the Telegram group or anywhere else first.

There is no paid bug bounty right now.

Problems in RevShare, Meteora, Jupiter, Streamflow or a wallet app belong to those services, so report them there. You can tell us too if it affects o4A.

Security researchers can find the same contact in this site’s security.txt file, a standard file for reporting security problems.

Audit status.

No independent security or financial audit of o4A, this site or the project’s wallets has been done.

Using RevShare is not an audit of o4A. RevShare’s own terms say: “RevShare does not endorse, verify, audit, guarantee, sponsor or assume responsibility for any user-created token.” Source: RevShare’s Terms of Service, updated June 29, 2026.

In September 2026 the project reviewed the security of this site’s own code. It covered the site as it was on September 15, 2026, including the Wall of Legends sign-in, picture uploads, bids and payments, the owner controls and the hosting setup. Features added after that date, including Meme Studio, Talk to Omni and Omni Universe, were not part of it. That was an internal review, not an independent audit.