upstream

Proof run on 2026-10-09

Proof, not promises.

Every claim on this site, with the run behind it. All of it can be run again with one command.

34/34engine and attester tests
22/22on-chain tests
60/60random histories, JS vs program
1/1real pump.fun on a mainnet fork

What was run

CheckWhat it proves
Engine and attester networkCodes, attestations and the vault rules hold, including against forged signatures, replays, lying attesters, hung servers and crafted input.
Live reads6 of 6 real accounts on GitHub, YouTube, Twitch and Kick were read today with the real adapters.
On-chain testsEvery instruction of the Solana program, every refusal, the freshness limits to the millisecond, and the native Ed25519 precompile, in a real Solana runtime.
DifferentialThe program and the JS engine run the same random history of 46 operations (fees, claims, rotations, vetoes, expiries, waits of minutes to days). Every balance matched to the lamport after every step, and they refused the same operations for the same reasons.
pump.fun on a mainnet forkThe real pump.fun programs accept the vault as the only shareholder of a real coin, distribute fees to it, and the streamer is paid.

The pump.fun run, as it printed

coin 5BHTmt8bnEizr5tcokZTWoHjMmptR29Me6MqLrVWpump  creator gMBQ9t4MnPgAkaZ8A783vdgJa5qmRueSF4K2ntGuMk8
upstream vault 4KkZBKgtuEfmMMy55TYKC8faRVcg1ekVDMfBX6cHZNzv
unswept creator_fee on the bonding curve: 0.019394101 SOL (quote mint 11111111111111111111111111111111)
pump.fun accepted the vault as sole shareholder (100 %), admin revoked, bonding curve re-pointed
pump.fun distribute_creator_fees paid the vault 5 SOL
streamer claimed 4.5 SOL, launcher kept 0.5 SOL

The fork credits the coin's accrued fee directly, as trades would. Everything after that, from the sweep to the payout, is pump.fun's own code. Signature checks are off on the fork, so it can act as the coin's creator; nothing touches mainnet.

Compute units

instructionunits
crank2479
claim (3 attestations)20380
rotate19597
cancel rotation936

A transaction may spend 200,000 by default.

Still missing

  • An independent audit.
  • A run on a real validator cluster, then a deployment.
  • Removal of the upgrade authority after that.
  • Independent attester operators.
  • Wrapped-SOL fees from graduated coins.

Run it yourself

npm test
node _tools/chain-up.mjs
node --test tests-chain/vault.test.mjs
SEEDS=60 STEPS=45 node --test tests-chain/differential.test.mjs
node _tools/chain-up.mjs --fork
SURFNET=http://127.0.0.1:8810 node --test tests-chain/pump-fork.test.mjs
node _tools/verify-all.mjs     # all of it, then writes the report

Read the full report