ringpad

How it works

Privacy, on apublic launchpad.

pump.fun is a public program, so a private trade has to be built around it. Here is exactly what happens, and what the chain sees.

Launch

  1. 01Creator signs the pump.fun create transaction from their wallet.
  2. 02If the dev buy is hidden, the create carries no buy. Right after it lands, the dev buy runs as a private trade from the creator's ring.
  3. 03The first deposit of the new coin registers it with the privacy pool, so anyone can hold it shielded.

Buy

  1. 01Your ring proves the spend inside a zero-knowledge proof. A shared relayer pays the fee, so your wallet signs nothing.
  2. 02SOL is withdrawn from the privacy pool to a brand-new single-use wallet.
  3. 03That wallet buys on the bonding curve (or PumpSwap after graduation).
  4. 04The coins and leftover SOL go back into your ring. If a step fails, the trade resumes from that step.

Sell

  1. 01Coins plus a little SOL for fees are withdrawn to a single-use wallet.
  2. 02It sells on pump.fun or PumpSwap.
  3. 03The SOL goes back into your ring and the wallet is emptied.

What stays private

  • Your balanceencrypted, readable only with your viewing key
  • Who boughta single-use wallet, never reused
  • Amounts inside the ringencrypted
  • The trade on pump.fun itselfpublic: price and size of that one fill

Trust model

  • Ring keysheld by Ringpad, encrypted at rest; only your signed-in wallet can move them
  • Proofsgenerated in Helius' attested prover enclave
  • Feesa shared relayer pays network fees, so no wallet of yours signs ring transactions
  • Exitwithdraw to any address, any time, from My ring

Helius Privacy Rings · mainnet programs

privacy programring1GaLCuJnkUMVkX2JeZLTTX17wKsV4fZmPVzXANW
user registryregy3WAeRXMYuMYxr5iK3Bf9Arr3PcxGxyzAddbiqDQ
state tree777pvSGe5LaBd9nCczvE2FXEauiwtfGJ5XRpjKyniGor
native sol interfaceCiNmas621VuyofiDSrEPfTXHKrdZuB6jMKECyNiMpLXE

Read more in the Helius privacy docs.