I built an MCP server that lets an AI assistant trade tokens and claim creator fees on

Solana. Then I shipped a version where the two write tools built transactions, discarded

them, and returned success. Nothing was ever signed. Nothing was ever submitted.

It had 337 tests. All of them passed.

I didn't find out for three months.