pump.fun launcher · Squads time lock
See the dev's sell 3 days before it can happen.
Launch a pump.fun coin whose dev tokens and creator fees sit in a Squads multisig. Nothing leaves without two keys and a public countdown, 72 hours by default. One leaked seed moves nothing.
Launches open soon: the first real launch and seal are being tested on mainnet. You can prepare yours now; your draft stays in this browser.
Check any Squads vault, right now
Paste a multisig address: its keys, its time lock and every announced exit, read from the chain.
pump.fun alone, or with Cosign
On pump.fun alone
- The dev buy sits in one wallet. It can be sold in the next block, and you find out from the chart.
- Creator fees land in that same wallet, behind one seed phrase. If it leaks, they're gone.
- A dev who says “locked” or “I won't sell” can't show it.
With Cosign
- The dev buy sits in a Squads vault. Any sale is a public proposal first.
- Creator fees go to that vault on-chain. One leaked key can't move them.
- Every exit waits out the time lock, 72 hours by default, with a countdown on the coin page.
How it works
- 1
Pick your keys and your lock
Two to five wallets, how many must sign, and a time lock from 24 hours to 30 days. All of it goes into the coin's metadata.
- 2
Launch, then seal
The coin is created on pump.fun. Then one wallet prompt: a Squads vault is created, the dev buy moves in, the creator fees are routed to it.
- 3
Every exit waits in public
To sell or spend, the keys propose it in Squads. The coin page shows the proposal and its countdown until the time lock lets it run.
The seal, signed once after the launch
- 1Create a Squads v4 multisig: your keys, threshold, time lock, no config authority
- 2Move the dev buy into its vault
- 3Route the creator fees to the vault, through pump.fun's one-time split
- 4Lock pump.fun locks that split as soon as it is set
For creators
A leaked seed can't empty your fees
Fees and dev tokens need two or more keys to move. Phished, drained or a tampered hardware wallet: one key alone moves nothing.
Show you're not dumping, don't just say it
Your coin's card shows a quiet dial while nothing is announced. That is a claim buyers can check themselves, at any time.
Still your money
Spend fees or sell tokens whenever you want: propose it, sign with your keys, wait out the time lock. Nothing goes through Cosign.
For traders
See the dev's sell before it happens
A move out of the vault shows up as a proposal with a countdown. You get the whole time lock, 72 hours by default, to decide.
Check the rules, not the promises
Keys, threshold, time lock and any rule change are read from Squads on-chain, and compared with what the coin promised at launch.
Know what isn't covered
Each coin shows how much of the dev buy is in the vault and how much is still in the launching wallet.
A dev sale, hour by hour
Pick a time lock, then move through time. The dial is the one every coin card shows.
Simulation. No real coin.
Exit announced. Unlocks in 2 d 0 h.
What every visitor of the coin page sees at hour 30.
- Visible to all
- hour 0
- Signed
- hour 6
- Earliest sale
- hour 78
On pump.fun alone, the same sale is visible when it hits the chart. With a vault, Squads won't execute it before hour 78.
Latest vaults
All coinsNo coins yet.
The list can't be read right now.
Who enforces what
A promise that nobody enforces isn't a guarantee. Here is who stands behind each one.
Nothing leaves the vault without enough signatures and the full time lock.
Enforced on-chain by Squads v4The dev tokens and the creator fees sit in a Squads v4 multisig vault. Moving anything out takes a proposal, the threshold of signatures, then the time lock: Squads refuses to execute before it has passed (TimeLockNotReleased). Cosign never holds a key.
The vault's rules can't change faster than the time lock either.
Enforced on-chain by Squads v4The multisig is created without a config authority. Adding or removing a key, lowering the threshold or the time lock, or adding a spending limit are proposals too, and Squads applies the same time lock before they run.
The coin's creator fees go to the vault, and that can't be edited.
Enforced on-chain by pump.funThe seal sets pump.fun's fee split to 100 % for the vault. pump.fun lets that split be set once and then locks it. One exception exists: pump.fun's own admin can reassign a coin's fees through a community takeover (admin_cto). The coin page would show it.
The vault promised at launch is written into the coin itself.
Enforced on-chain by pump.fun and IPFSThe multisig address, keys, threshold, time lock and dev share go into the coin's metadata before it is created. pump.fun fixes the metadata address at creation and an IPFS address is the hash of its content. The coin page compares that promise with the multisig on-chain.
Every exit and rule change is shown with its countdown before it can run.
Tracked by CosignThe site reads the multisig's 25 most recent proposals on every visit, decodes what each would move or change, and shows when it may execute. The same data is public JSON at /api/coin/<mint>, and the vault opens in the Squads app.
Spending limits and instructions the site can't read are flagged.
Tracked by CosignA spending limit would let keys move some funds without a proposal, so without the time lock. Once one has been executed, the coin's dial says so in red for good. Instructions Cosign doesn't decode are shown as such, never as harmless.
Dev tokens kept outside the vault are visible.
Tracked by CosignEach coin shows the share of the dev buy in the vault and the coin still in the launching wallet. Cosign can't see other wallets the creator may own.
Nothing is signed that the review didn't show.
Tracked by CosignTransactions are checked against a list of allowed programs and simulated after you sign: if one would take more SOL than shown, it isn't sent.
The keys belong to different people.
NobodyCosign shows every key's address, nothing more. A creator can hold all of them. What still holds then: one leaked key isn't enough, and every exit waits out the time lock in public.
The price holds, or you'll have time to react.
NobodyThe time lock covers the vault only. The creator can buy and sell from other wallets, and other holders can sell at any moment. A coin can lose all its value in minutes.
Fees
Every fee is shown again before you sign. Cosign takes none.
Creating the coin
No pump.fun creation fee; about 0.02 SOL of rent for the new accounts, and network fees
Solana
Your dev buy
pump.fun's trading fees, plus PumpPortal's 0.5% fee (the service that builds the creation transaction)
pump.fun, PumpPortal
The seal
Squads' multisig creation fee, read live before you sign (0 SOL when last checked), plus rent for the multisig, the fee split and the vault's token account (under 0.02 SOL) and network fees
Squads, Solana
Trading
pump.fun's protocol and creator fees on every buy and sell; the creator fee goes to the vault
pump.fun (live rate on the home page)
Cosign
Nothing. No service fee, no share of creator fees, no key on your vault
Cosign
Questions
+What is a time lock, exactly?
A Squads v4 setting: once a proposal has enough signatures, it must wait that long before anyone can execute it. Cosign uses 24 hours to 30 days, 72 hours by default. Squads enforces it, not Cosign.
+Who should hold the keys?
You decide: your own second device, a co-founder, a friend. At least 2 keys and 2 signatures. Cosign shows every key's address and can't tell who holds it.
+How do I spend the fees or sell dev tokens later?
Open the vault in the Squads app (linked from your coin page), propose the transfer, sign with enough keys, then execute it after the time lock. Your coin page shows the countdown to everyone meanwhile.
+Why two transactions after the launch?
Everything doesn't fit in one Solana transaction. The first creates the vault and moves the dev buy into it; the second routes the creator fees to the vault. Your wallet signs both at once. If the second one doesn't land, your coin page offers to send it again, and the coin shows “Partly sealed” until then.
+Can a creator skip the seal?
They can launch and never seal. The coin is then listed as “Not sealed” in red. Its metadata still names the vault it promised, so the gap is plain to see.
+What if the creator sells from another wallet?
Cosign can't see or stop that. The time lock covers what is in the vault: the share of the dev buy you see on the card, and the creator fees.
+Does it work after the coin graduates?
Yes. The vault and its rules don't depend on the curve, and pump.fun's fee split covers the PumpSwap pool too.
+Does Cosign hold keys, SOL or fees?
No. Your wallet signs everything in your browser. The vault's create key is made in your browser, signs once and is dropped: it has no power over the vault afterwards.
+Is Cosign part of pump.fun or Squads?
No. It is an independent site built on pump.fun's and Squads' public programs.