Known boundaries, visible risks.
Cook is not independently audited and has not been deployed. Using reviewed upstream components does not establish the safety of a future deployment, integration or arbitrary tokens. Smart-contract failures, price manipulation, liquidity loss, impermanent loss and malicious token behavior can cause loss.
The planned factory administrator is a timelock with a minimum delay of 48 hours. The current deployment plan uses a single project wallet rather than a multisig; this would be a governance concentration risk. No Cook owner key is stored on the website server.
Wallet approvals can persist after a cancelled operation. Inspect and revoke allowances through your wallet when appropriate. An LP NFT deposited into the staker must be unstaked from every active incentive before it can return to your wallet. Never share your seed phrase with this site or support.