Trust model

What is enforced on chain

• The coin’s creator, the vault, is fixed by pump.fun at launch. Nothing Socialpad does can point a coin’s fees at another key.
• The fee schedule is pump.fun’s, the same for every coin.
• Creator fees accrue in accounts pump.fun keeps for the vault key, and only that key can sweep them onwards.
• A coin is recorded on Socialpad only after its confirmed CreateEvent names the vault as creator.

What you are trusting

The platforms’ sign-in. Socialpad learns which account you are the same way any app with “Sign in with X” or “Continue with Reddit” does. If a platform’s sign-in is compromised for one of your accounts, so is your vault, in the same way that account is.

Socialpad’s server, which holds the vault keys. This is the honest centre of the design. Every vault key is derived from one master secret that lives on the server; the server signs a payout only after a valid sign-in, and only to the address that sign-in named. If the master secret were stolen, the thief could move every vault’s balance. Compare the previous design on Robinhood Chain, where a vault was a contract that enforced the release path itself; on Solana that would need a program of Socialpad’s own, and this version chose not to ship one. It is a stated trade-off, not an accident, and moving vaults into a program is the next step before balances become meaningful.

pump.fun. The curve, the graduation and the fee accounting are pump.fun’s programs. Socialpad reads them and does not modify them.

What you are not trusting

• Socialpad’s ability to change where a live coin’s fees accrue. It has none.
• Socialpad’s ability to change a coin’s fees. It has none.
• Socialpad’s records. The chain has everything: the coin’s creator, every trade’s fee, every payout.

Incident brake

The operator’s fastest action is to remove the master secret and relayer key from the server, which stops every launch and every payout at once. Nothing else moves money. That is deliberate: the fastest thing Socialpad can do is stop.