How it works
Privacy, on apublic launchpad.
pump.fun is a public program, so a private trade has to be built around it. Here is exactly what happens, and what the chain sees.
Launch
- 01Creator signs the pump.fun create transaction from their wallet.
- 02If the dev buy is hidden, the create carries no buy. Right after it lands, the dev buy runs as a private trade from the creator's ring.
- 03The first deposit of the new coin registers it with the privacy pool, so anyone can hold it shielded.
Buy
- 01Your ring proves the spend inside a zero-knowledge proof. A shared relayer pays the fee, so your wallet signs nothing.
- 02SOL is withdrawn from the privacy pool to a brand-new single-use wallet.
- 03That wallet buys on the bonding curve (or PumpSwap after graduation).
- 04The coins and leftover SOL go back into your ring. If a step fails, the trade resumes from that step.
Sell
- 01Coins plus a little SOL for fees are withdrawn to a single-use wallet.
- 02It sells on pump.fun or PumpSwap.
- 03The SOL goes back into your ring and the wallet is emptied.
What stays private
- Your balanceencrypted, readable only with your viewing key
- Who boughta single-use wallet, never reused
- Amounts inside the ringencrypted
- The trade on pump.fun itselfpublic: price and size of that one fill
Trust model
- Ring keysheld by Cloak, encrypted at rest; only your signed-in wallet can move them
- Proofsgenerated in Helius' attested prover enclave
- Feesa shared relayer pays network fees, so no wallet of yours signs ring transactions
- Exitwithdraw to any address, any time, from My ring
Helius Privacy Rings · mainnet programs
privacy programring1GaLCuJnkUMVkX2JeZLTTX17wKsV4fZmPVzXANW
user registryregy3WAeRXMYuMYxr5iK3Bf9Arr3PcxGxyzAddbiqDQ
native sol interfaceCiNmas621VuyofiDSrEPfTXHKrdZuB6jMKECyNiMpLXE
Read more in the Helius privacy docs.