Your key, from your wallet
When you connect, Phantom asks you to sign a fixed message. That signature never leaves your browser. It is turned into two keys: one that others use to seal room keys to you, and one you sign your messages with. Wallet signatures of the same message come out the same every time, so the same wallet makes the same keys on your phone and your computer. Nothing to back up.
A second signature signs you in and publishes your two public keys, signed by your wallet. Neither signature is a transaction and neither costs anything. Your keys stay in this tab while it is open. Close it and they are gone until you sign again.
If a device ever makes different keys for the same wallet, you are shown both fingerprints and asked before anything changes.
Getting in, staying in
Every pump.fun coin has a room. It opens when the first holder walks in. To enter, you need to hold the room's minimum, which the coin's creator wallet sets. Your balance is read from the chain when you enter and watched while you are inside.
Drop below the minimum, by selling or sending coins away, and you are taken out within seconds. The creator wallet can always enter its own coin's room to keep order.
How a message is sealed
Each room has a room key that only its members hold. Your browser encrypts every message and image with it (XChaCha20-Poly1305 from libsodium) before it is sent, and signs it with your key. Our server gets the sealed result. The room key reaches each member sealed to that member alone, so the server carries it without being able to open it.
When someone leaves
Every time someone leaves, a member's browser makes a new room key and seals it to everyone still inside. The one who left never gets it, so they can't read anything said after. Keys also turn once a day.
New holders get the current key from a member who is online, and can read back the room's history window: 24 hours, or 30 days while holding $TACITUM.
Knowing who speaks
- Fingerprints. Every member shows a key fingerprint. If someone's key changes, they are marked until you confirm it. Comparing fingerprints with someone elsewhere proves nobody swapped a key in between.
- Dev badge. Shown only when the message's signature checks out and it came from the coin's creator wallet.
- Top holders. Members among the coin's largest holders carry their rank.
- Votes. Polls count by holding, and every vote is signed. Your browser counts only votes whose signatures it checked.
What our server sees
Sealed messages and images, sealed room keys, and who is in which room. Not what anyone wrote. We do see when people post, roughly how long a message is, and which wallets are members. Balances are public on the chain anyway. Alerts on your phone say only which room has news.
What this does not do
- Someone who leaves keeps what they already read.
- Members can copy or screenshot what they see.
- We serve the page you run. If our server were taken over, the page itself could be changed. This is true of every encrypted website.
- Who counts as a holder, and which wallet is the creator, is read from the chain by our server. Your browser can't check that on its own.
- Never sign the key message on any other site. Anyone with that signature has your room keys.
The full design, the threat model and every known limit are written down in the project's encryption document. Room behaviour is covered in the room rules.