> HOW IT WORKS

The creator sets up the coin as usual and says how many committed wallets it needs to exist: 5, 10, 15 or 20. They pick how long the muster has to fill, and optionally a dev buy that goes first.

The mint address is fixed right then and shown publicly, before a single commitment. That matters for the next step.

Anyone can take a place by choosing an amount between 0.05 and 10 SOL and signing a message. No transaction, no cost, and nothing leaves the wallet.

This is not a presale. No funds are custodied at any point, by us or by anyone. What you eventually sign is a transaction that spends from your own wallet directly to Pump.fun, and it can only execute inside the launch bundle. If the quorum is missed it is never used. There is nothing to refund because nothing was ever taken.

Your position is fixed when you commit, and earlier positions buy lower on the bonding curve. That is deliberate — an assurance contract needs a reason to commit now rather than wait and see whether it fills. It is also the opposite of what the sibling pad Obscura does, where the order is drawn precisely to remove that advantage. Different problems, opposite answers.

Commitments fill in ranks of 5, and 5 is not a theme — it is the most committers that fit in one Solana transaction. A transaction caps at 1232 bytes and a Pump.fun buy touches 18 accounts, so an address lookup table collapses the shared ones to a byte each, leaving ~156 bytes per committer:

5 committers → 1129 bytes (fits) · 6 → 1285 bytes (over)

When a rank fills it is packed into its transaction and its five members sign it there and then. That is why ranks exist at all: a rank is exactly one transaction, so signing can be spread across the muster instead of becoming one fragile moment at the end where twenty people have to be online at once.

Each rank gets its own durable nonce account. A durable nonce is consumed by the transaction that advances it, so four ranks sharing one would mean three were invalid the moment the first landed. The nonce is also what lets you sign now and walk away instead of racing a 60-second blockhash.

The lookup table is created once and only ever extended. Extending appends, so the table indices an already-signed rank refers to stay valid — rewriting it would silently void every signature collected so far.

A committer who does not sign within 5 minutes of their rank filling is struck. Their position is retired, not refilled, and the muster simply needs one more person at the back.

Retiring rather than reusing a position is what keeps everyone else safe. A strike only ever removes SOL from in front of the people behind it, which makes their fill cheaper. If a vacated position could be refilled by someone committing more, it would push later positions past the amounts they agreed to — and in an atomic bundle that fails everyone at once.

Reach the quorum and the whole thing goes to Jito as one bundle: creation, the dev buy, then up to 4 packed rank transactions, in commitment order, same slot, all-or-nothing.

Miss it and nothing happens. Not a refund, not an unwind — the mint is never created, no transaction is ever submitted, and every signature collected is discarded. Nobody pays a lamport, not even a failed transaction fee. The platform fee is charged only if the muster fills.

Before anything is submitted the marching order is replayed against the live curve to confirm nobody is asked for more than they committed, every packed rank is decompiled and checked against what its members actually agreed to, and the bundle is simulated.

Each position is quoted against the dev buy plus everything committed ahead of it — an exact figure, not a worst case, because arrival order is known. max_sol_cost is set to the full commitment.

Bags are quoted 30 basis points under the exact figure. The program recomputes its own fee from live on-chain state, and a single lamport of disagreement would fail that buy and, because the bundle is atomic, kill the launch for everyone who showed up. That margin is the slack that makes it impossible.

Stated plainly, because the rest of the page is a list of guarantees and these are the holes in them.

• Quorum is not a quality signal. It means at most 20 wallets agreed to buy. A determined creator can be several of them from different addresses, and we cannot tell. Every committer is listed publicly with their amount and position — judge them yourself.
• A full but unsigned rank blocks the launch until its signing window lapses and the no-shows are struck. An atomic bundle needs every signature it was built with.
• The muster is capped at 35 SOL. A Pump.fun curve graduates at about 85.8 SOL, and a bundle that pushed past it would complete the curve part-way through and fail every remaining buy. A commitment that would breach the cap is refused at the door, with the remaining room shown.
• Campaign state is in memory. It does not survive a restart or a deploy. That is why musters are short, and why we say so here rather than after you lose one.
• Nothing here governs what happens after the launch. Once the bundle lands the coin is an ordinary Pump.fun token. The creator can sell, and anyone can buy as fast as they like. If you want the dev's bag constrained, that is what the sibling pads do.
• A commitment can still fail at the last moment if the wallet no longer holds the SOL when the bundle fires. The pre-flight catches it and the launch is blocked rather than half executed, but it means a muster can reach quorum and still not fire.