Security
Custody and security
What TelePump controls, what it doesn't, and the risks that come with it.
TelePump is custodial. The operator holds the master secret that controls every creator vault. If the operator is dishonest, hacked or disappears, unclaimed fees can be lost.
What the operator controls
- Creator vaults. Every vault key is derived from the master secret.
- Payouts. The payout script decides when to collect and bridge.
- The website and API. They could be changed.
What the operator can't do
- Touch your wallet. You sign every launch yourself; TelePump never sees your keys.
- Change a coin's payee after launch. The creator is written into the coin's bonding curve by pump.fun.
- Hide launches. They're public on Solana, with memos.
- Trade your coins or move your tokens.
How the secret is kept
- It lives only in the hosting provider's encrypted environment variables and in the operator's local key store, never in the code or in git.
- Mint keys for new coins are generated per launch and discarded after signing.
Before you launch
- Only launch amounts you're comfortable leaving with a custodian until payout.
- Check every transaction in your wallet before approving.
- Verify the result yourself: see Verify a launch.