Programs and keys

Every program Socialpad uses on Solana, and what each key can do.

Chain: Solana. Explorer: solscan.io. This deployment’s cluster (devnet or mainnet) is at /api/programs.

pump.fun, which every coin trades on

Source and docs: github.com/pump-fun/pump-public-docs. The same program ids on mainnet and devnet.

Pump (bonding curves)   6EF8rrecthR5Dkzon8Nwu78hRvfCKubJ14M5uBEwF6P
PumpSwap (pools)        pAMMBay6oceH9fJKBRHGP5D4bD4sWpmSwMn52FMfXEA
Pump fees (schedule)    pfeeUxB6jkeY1Hxd7CsFCAjcbHA9rWtchMGdZ6VojVZ

Every coin is created with pump.fun’s create_v2: a Token-2022 mint with six decimals and a supply of one billion, a bonding curve at ["bonding-curve", mint], and a creator that is the coin’s vault.

Socialpad

Socialpad deploys no program of its own. Its part is server-side:

  • A vault key per coin, derived from one master secret and the coin’s mint. It is the creator pump.fun pays. It signs exactly one kind of transaction: collect what pump.fun owes, pay the treasury its share, pay the rest, if any, to the address the owner named.
  • A relayer key that pays transaction fees for payouts, so owners pay nothing. It cannot choose the destination.
  • A treasury address that receives its share of every payout (all of it, at present) and any dormant balance.

The relayer and treasury for this deployment are at /api/programs; each coin’s page shows its mint, bonding curve and vault.

Roles

Role Holds Can
Vault master secret One secret on the server Derive every vault key. A vault key can move that vault’s balance, and Socialpad’s server moves it only on a valid sign-in, or to the treasury after dormancy.
Relayer A fee-only key Pay for payout transactions.
Operator The server’s configuration Rotate the relayer and the treasury for future payouts; flag and unflag dormant vaults.

Audits

None. The on-chain part is pump.fun’s programs, unchanged; the server’s payout code is in the src/lib/vault.ts file of this site’s repository.

Sign in

Continue with the account a coin was launched for. Socialpad never sees a password; the platform's own login does the checking.

Signing in through a platform links its handle to you. That link is what opens a vault.