How it works

You launch the coin from your own wallet, on pump.fun, with pump.fun's own bonding curve and its own rules. The difference from most pump.fun coins: it is paired with wXMR instead of SOL. wXMR is Monero (XMR) wrapped as a Solana token; buyers pay in wXMR and the price is quoted in wXMR.

The creator fee share is set too. Right after the create, a second transaction from your wallet sets pump.fun's fee sharing so that 75% of the coin's creator fees go to a Solana wallet made for that coin alone, and 25% to the CipherPad treasury, then locks it. Once locked, nobody can edit it — not you, not us. A coin only appears on this site once that lock is on chain.

A program we run, called the keeper, then does the repetitive work: claim, swap, bridge, open a 5x long on XMR, take profit, burn. It runs every five minutes, for every coin, and writes down what it did.

Every step below is a real transaction on a public network — Solana for the fee, bridge, buyback and burn; Hyperliquid for the position. The keeper never holds an off-chain IOU and never nets trades internally.

Creator fees are 0.30% of every trade while the coin is on the bonding curve, and 0.05–0.95% on PumpSwap after graduation, depending on market cap. Because the coin is paired with wXMR, fees are paid in wXMR and accumulate in pump.fun's creator vault.

Claiming is permissionless. pump.fun's distribute_creator_fees instruction can be sent by anybody; the program pays the shareholders recorded at launch. The keeper sends it once at least 0.001 wXMR has gathered, and pays the Solana transaction fee from a small gas wallet — it never touches the money being distributed. Every claim is simulated first.

The bridge to Hyperliquid only carries SOL, so once a coin's perp wallet holds $25 of wXMR the keeper swaps it to SOL through Jupiter. It refuses a swap with more than 2% price impact and waits for better liquidity instead.

Once a coin's perp wallet holds more than $50 of SOL — and never less than 0.15 SOL, which clears Unit's minimum — the keeper sends it to that coin's deposit address at Unit, the bridge Hyperliquid uses for Solana. Unit credits the coin's Hyperliquid account with USOL, usually within a few minutes.

The deposit address is fetched fresh every time and its guardian signatures are checked, and it is also compared against the first address ever recorded for that coin. If it ever differs, the keeper refuses to send and alerts instead. At most 5 SOL moves per transfer per coin, and at most 25 SOL in any 24 hours across every coin — a ceiling on how much a bug, or a stolen server, could move. After a bridge, the next one waits 20 minutes.

On Hyperliquid, the keeper sells the arriving USOL for USDC, moves the USDC into the perp account, and opens or adds to the coin's position: long XMR, isolated margin, 5x — the most Hyperliquid allows on XMR. Every coin runs the same position.

Orders are immediate-or-cancel with 1% maximum slippage, at least $11 and at most $2,000 of notional each, and every fill is read back before the next step runs. When fees arrive later, the same routine tops the position back up to 5x instead of opening a second one.

Each coin has its own Hyperliquid account. Coins never share margin, and one coin's liquidation cannot touch another's.

The keeper tracks the coin's basis: the total margin its fees have put in. When the account is worth 1.30× that basis — counting money earlier take-profits already took out, so the ladder cannot be gamed by withdrawing — it closes 10% of the position with a reduce-only order. The next milestone is 1.40×, then 1.50×, and so on, +0.1 each time.

The margin that close releases is turned back into USOL and owed out in two halves: one to the treasury, one to the coin's burn wallet on Solana. Each half is sent as soon as it clears Unit's 0.12 SOL withdrawal minimum, so tiny amounts wait rather than evaporate in fees.

If a position is liquidated, the keeper sees the empty account, resets that coin's milestone bookkeeping, and the next fees to arrive start a fresh position.

The burn wallet receives its SOL from Unit, swaps it to wXMR through Jupiter, buys the coin with that wXMR — on the bonding curve, or on PumpSwap once the coin has graduated — and burns every token it bought, closing the token account afterwards so its rent comes back as SOL. Each step is safe to retry: a crash in between leaves wXMR or tokens that the next pass uses.

Burned tokens are destroyed, not moved to a dead address. The supply drops, permanently, and every burn transaction is listed on the coin's page and on the burns page.

Pair

Every coin trades against wXMR (wrapped Monero on Solana), not SOL

Fee split

75% to the coin's perp wallet, 25% to the treasury — set with pump.fun's fee sharing right after the create, then locked

Creator fee rate

0.30% of every trade on the bonding curve; 0.05–0.95% on PumpSwap after graduation — paid in wXMR

Claim

Permissionless: anyone can trigger the payout, the pump.fun program decides who gets what

wXMR → SOL swap

Through Jupiter once the perp wallet holds $25 of wXMR; refused above 2% price impact, 1% slippage

Bridge threshold

$50 of SOL in the perp wallet (and never less than 0.15 SOL, Unit's minimum plus margin)

Bridge caps

5 SOL per transfer per coin, 25 SOL per 24 hours across all coins

Position

Long XMR at 5x on every coin — Hyperliquid's maximum for XMR. Not a choice at launch

Margin mode

Isolated, in a Hyperliquid account belonging to that coin alone

Order size

Minimum $11 notional, maximum $2,000 per order

Slippage

1% worst accepted price on every market order

Take-profit trigger

Account value reaches 1.30× the margin put in, then 1.40×, 1.50×, and so on

Take-profit size

10% of the position, reduce-only

Profit split

50% to the treasury, 50% to buying back and burning the coin

Keeper pass

Every 5 minutes, every coin

Nothing here has to be taken on trust. Every part of the loop is public:

• The fee split is stored on Solana by the pump.fun program, written at launch. Look up the coin and you can read who receives creator fees and in what proportion.
• Every keeper transaction — the claim, the bridge, the buy, the burn — is a normal Solana transaction with a signature you can open on Solscan. The coin's page links them as they happen.
• The position lives in a Hyperliquid account whose address is shown on the coin's page and links straight to Hyperliquid's own explorer. Size, entry, margin, liquidation price and PnL on this site are read live from Hyperliquid's public API — the same numbers anyone else reading that account gets.
• The coin's perp wallet — the Solana address its 75% share lands in — is printed on its page, so the wXMR arriving from pump.fun and the SOL leaving for the bridge can be watched in real time by anyone.
• The burns are on-chain burn instructions against the mint. Total supply falls by exactly the amount burned.

What this site shows is a view of that public data, not a ledger of its own. If the two ever disagreed, the chain and the Hyperliquid API are what count.

• Every money move is written down before it is sent, so an interruption resumes the step instead of repeating it. At worst funds sit idle for a pass and get used next time.
• Only one keeper may act at a time. It holds a lease in the database; a second copy does nothing until that lease expires.
• The keeper starts in simulation mode by default. Sending real transactions is an explicit setting, and a kill switch stops every money-moving step without stopping the process.
• Bridge amounts are capped per transfer and per day. Order notional is capped. Slippage is capped.
• Bridge deposit and withdrawal addresses are pinned to the first ones seen and re-verified every time; a change stops payouts and raises an alert.
• The keeper refuses to start if its key material does not derive the wallets already recorded for existing coins — a wrong secret can never quietly become the new one.
• Anything unexpected — a failed claim, a stuck take-profit, a position within 5% of liquidation, a low gas wallet — posts an alert to the operators immediately.

Your coins are yours: they sit in your own wallet, and nothing here can move or freeze them. What is custodial is the fee side. The keeper holds the keys to each coin's fee wallet, Hyperliquid account and burn wallet, and it is the only thing that can spend from them. Holders cannot withdraw those funds, direct the position, or close it.

The treasury's 25% pays for running all of this — gas, infrastructure, bridge fees — and is not held for holders either. After launch the rules above run on their own.