Check every figure yourself

A signature written into a coin's metadata file is checked by nothing on chain. Every figure above is an account balance, an account's contents or a landed transaction, and Solana itself is the record.

The feed lists the newest events first and is read again every 20 seconds. Withdrawals from a vault are signed in the owner's browser and sent straight to Solana, so the feed does not list them. They show on the vault address in any explorer.

Vaults open on chain

Each vault is an account owned by the vault program. Its address commits to the vault's first hash-based public key, so nobody can swap the key behind an address. Open the program on Solscan to see the accounts it owns.

One-time keys spent

Every move out of a vault uses one hash-based key, once. The vault account counts them, and the program refuses a key that was used before. This number is the keys used in each vault's current key set plus one per rotation.

Key rotations

Before a key set runs out, the vault moves to a fresh one at the same address. The account records how many times that happened.

Who can change the program

Read from the program's own data account. If an upgrade authority exists, it is shown here as what the chain says it is: a single key, a multisig with its time lock, or nobody.

Vault launches

A coin counts as sealed only when the vault program holds a launch record for it and pump.fun's fee split is locked with the vault's address receiving the creator share. The verifier repeats that check in your browser with any RPC.

Standard launches

A standard launch has the same fee split, locked on chain with its admin revoked, so nobody can change it later. Its creator share goes to a plain wallet, the launcher's own, and no vault holds it. It is not sealed and this page never calls it that.

Team split launches

The creator share is split between the wallets or vaults the team named at launch, in the shares they chose, and that split is locked on chain with its admin revoked like every other. A share paid to a vault address moves only with that vault's hash-based keys. A share paid to a wallet is an ordinary wallet.

Holder rewards launches

The split is locked on chain at launch: 80% of creator fees to a distributor wallet for that coin, 20% to the platform. The distributor pays holders in SOL, in proportion to tokens held times time held since the last payout, at most once an hour and only when at least 0.05 SOL has collected. The bonding curve, pools, LP accounts, the platform wallet and the distributor itself are never paid. A wallet that sells everything before a payout gives up its share, and amounts too small to send carry over to the next payout. The distributor is an ordinary wallet whose key Privy holds for Appdrop: it is custodial, so a holder rewards coin is not sealed and its creator share is not behind hash-based keys. For now these launches are SOL-quoted only. Each payout is a transaction you can open, and "Paid to holders" adds them up.

Identity-signed launches

A launcher can sign the coin with a post-quantum identity key. The signature goes into the coin's metadata, the server checks it at launch, and the signature checker repeats that check from the chain in your browser. It says who launched the coin. It guards no money and does not make a coin sealed.

Fee splits locked

Every launch counted here, of any kind, has its split locked by a transaction you can open. A coin still waiting for that transaction is not counted.

What the vaults hold

The SOL and dev bag at each coin's vault address, read from chain. No wallet key controls that address. Only a hash-based signature checked by the program moves anything out. A launch can also lock its dev bag: the launch record holds the amount and the date, the program refuses any withdrawal that would go below it, and the lock can only be extended.

Creator fees paid

Each collection is one transaction. It pays the creator's share to the vault address on a vault launch, or to the creator's wallet on a standard launch, and 20% of creator fees to one platform wallet. The two kinds are summed separately, and every amount is read from the landed transaction.

$APPD burned

All of the platform share buys $APPD and burns it. A burn lowers the token's supply for good, and each one is a transaction you can open.