Programs and keys
Every program Socialpad uses on Solana, and what each key can do.
Chain: Solana. Explorer: solscan.io. This deployment’s cluster (devnet or mainnet) is at /api/programs.
pump.fun, which every coin trades on
Source and docs: github.com/pump-fun/pump-public-docs. The same program ids on mainnet and devnet.
Pump (bonding curves) 6EF8rrecthR5Dkzon8Nwu78hRvfCKubJ14M5uBEwF6P
PumpSwap (pools) pAMMBay6oceH9fJKBRHGP5D4bD4sWpmSwMn52FMfXEA
Pump fees (schedule) pfeeUxB6jkeY1Hxd7CsFCAjcbHA9rWtchMGdZ6VojVZ
Every coin is created with pump.fun’s create_v2: a Token-2022 mint with six decimals and a supply of one billion, a bonding curve at ["bonding-curve", mint], and a creator that is the coin’s vault.
Socialpad
Socialpad deploys no program of its own. Its part is server-side:
- A vault key per coin, derived from one master secret and the coin’s mint. It is the creator pump.fun pays. It signs exactly one kind of transaction: collect what pump.fun owes, pay the treasury its share, pay the rest, if any, to the address the owner named.
- A relayer key that pays transaction fees for payouts, so owners pay nothing. It cannot choose the destination.
- A treasury address that receives its share of every payout (all of it, at present) and any dormant balance.
The relayer and treasury for this deployment are at /api/programs; each coin’s page shows its mint, bonding curve and vault.
Roles
| Role | Holds | Can |
|---|---|---|
| Vault master secret | One secret on the server | Derive every vault key. A vault key can move that vault’s balance, and Socialpad’s server moves it only on a valid sign-in, or to the treasury after dormancy. |
| Relayer | A fee-only key | Pay for payout transactions. |
| Operator | The server’s configuration | Rotate the relayer and the treasury for future payouts; flag and unflag dormant vaults. |
Audits
None. The on-chain part is pump.fun’s programs, unchanged; the server’s payout code is in the src/lib/vault.ts file of this site’s repository.