How it works

Every coin launched here mints on pump.fun's bonding curve exactly like any other pump coin. It trades on pump.fun, on aggregators, and on the AMM after migration. Nothing about the token is different.

What is different is the creator. pump.fun pays 30 basis points of every trade to a creator vault. On nearpad that creator is a keypair derived for the coin alone, so the fees accrue to an account the launcher cannot touch. A keeper sweeps that account on a schedule, converts the SOL into the privacy coin chosen at launch, and hands the result to holders in proportion to what they hold.

The whole flow, from launch to a holder's wallet, in five steps.

1. 1
   Launch

   The coin mints with a per-coin vault as creator.
2. 2
   Fees accrue

   30 bps of every trade lands in the vault.
3. 3
   Sweep

   The keeper claims the vault and opens an intent: SOL in, privacy coin out, into the pool.
4. 4
   Distribute

   The pool is split across a holder snapshot.
5. 5
   Claim

   A holder signs a message and names an address. An intent delivers it.

The launch form takes a name, ticker, image, optional description and links, the privacy coin holders will be paid in, and an optional initial buy. When you submit:

1. 1The image and metadata document are pinned to IPFS.
2. 2The server derives a fresh vault keypair for this coin and builds a create_v2 instruction with that vault as creator and your wallet as fee payer. If you set an initial buy it is added to the same transaction at the opening price.
3. 3The mint keypair signs server-side. Your wallet signs as fee payer. The server broadcasts and waits for confirmation.

The privacy coin is written into the coin's metadata and its database row. It cannot be changed after launch.

pump.fun credits the creator vault with 30 bps of every buy and sell on the bonding curve, and continues to do so on the AMM after migration. The vault is a public account. Anyone can read its balance on Solscan, and the coin page shows it as Unclaimed fees.

Only the vault key can move that balance. The key is derived from the keeper's secret and a salt stored with the coin, so no private key is ever written to disk per coin.

The keeper runs on a loop. For every live coin it:

1. 1Claims the vault once at least 0.005 SOL has accrued. This is a pump.fun collect_creator_fee transaction signed by the vault.
2. 2Once at least 0.01 SOL is unswapped, requests a NEAR Intents quote: exact input of that SOL on Solana, maximum output of the coin's privacy asset, credited to the pool.
3. 3Transfers the SOL to the one-time deposit address the quote returns, then polls until solvers fill it.

The filled amount is the coin's pool. Every sweep is listed on the coin page under Fee sweeps with the claim transaction and the amount received.

When a pool reaches 0.01 ZEC, the keeper reads every holder of the coin at a single slot using a program-accounts query over Token-2022 on Helius. The bonding curve, the AMM pool, and the vault are excluded.

Each wallet is credited its share of the pool in proportion to its balance over the circulating total. Shares below the dust floor are not written; that amount rolls into the next distribution. The distribution and the snapshot slot are shown on the coin page and on the Distributions page.

Open the claim page and connect the wallet that holds the coin. The page reads your token accounts over Helius and lists every coin launched here that you hold, what you have earned, and what you have already claimed.

1. 1Paste a Zcash address. Shielded (u1… or zs1…) keeps it private; transparent works too.
2. 2Press Claim. Your wallet asks you to sign a short message naming the wallet, the asset, the address and a timestamp. No transaction is sent and no gas is paid.
3. 3The server verifies the signature, bundles every unclaimed credit for that asset into one claim, and opens a NEAR Intent from the pool to your address.

The claim shows as on its way until the destination chain confirms, then paid with a link to the transaction. Claims open once your unclaimed total reaches 0.0005 ZEC.

nearpad uses two kinds of intent:

Both are quoted with a 15 minute deadline and a refund path. If a sweep fails to fill, the SOL returns to the vault. If a withdrawal fails, the credit is returned to the holder and shows as refunded.

What is public: the Solana wallet that held the coin, the amount it was credited, and the fact that a claim was opened. What is private: where the coins went, once they are on the destination chain. The claim address is stored so the withdrawal can be opened and is never shown to other users.