Custody, keys and what PumpFundMe can and cannot do
Which keys exist, who holds them, what is irreversible on-chain, and the honest list of things that still rely on us.
5 min read · Updated November 3, 2026
Your wallet
We never ask for your private key and never ask you to sign anything but a plain SOL transfer: the launch deposit. Trading happens on pump.fun with your own wallet. Your first-buy tokens are sent to your wallet; we do not hold them.
The vault
Each coin's vault is a wallet we generate and keep encrypted. Its job is to create the coin and lock its fees. After the launch it holds nothing: the first buy goes to you, the leftover SOL is refunded. Its key remains useful only to repeat a failed fee lock.
The fee lock is irreversible
pump.fun's fee-sharing configuration lists who receives a coin's creator fees. We set it to 100% PumpFundMe fee wallet and pump.fun revokes the admin. From that point no key, ours or anyone's, can redirect the fees. This is the strongest guarantee in the system and it is enforced by the pump.fun program, not by us.
What still relies on us
- The keeper that claims fees and runs the pipeline. If it stopped, fees would simply wait on-chain; nothing would be lost.
- The fee wallet that receives claims and the card wallet that pays GoFundMe. Both are public and auditable, but they are operated by PumpFundMe.
- The final card payment to GoFundMe, because GoFundMe has no donation API. Every payment is matched to a receipt in the ledger.
Open source
The code behind the site and the pipeline is public. If you want to verify a claim in this article, the source is the place to do it.