Everything about PumpPay

1. Connect a wallet. PumpPay reads the SPL and Token-2022 balances of the connected wallet and shows only tokens you actually hold.
2. Pick a token, amount and X handle. Add an optional note it shows up on the gift card and the claim page.
3. Sign one transfer. The tokens move from your wallet into the PumpPay escrow wallet. Nothing else is signed.
4. The recipient verifies X. They sign in with X; PumpPay checks the handle matches the one on the gift exactly.
5. They add a Solana wallet. Escrow releases the exact gift amount to that address on-chain and the gift is marked claimed.

Sending requires a connected Solana wallet (Phantom, Solflare, Backpack and any other wallet-standard wallet). Token selection is intentionally gated behind connection, PumpPay does not present a catalog of tokens to buy, only what is already in your balance.

You need a small amount of SOL for network fees, and the escrow may need a rent-exempt token account for a mint it has never held before. Both are ordinary Solana costs, not PumpPay charges.

After signing you get a claim link. Share it with the recipient or just tag them, the gift is discoverable from the Activity feed by handle either way.

Anyone can open a claim link, but only the X account named on the gift can claim it. Verification uses X OAuth 2.0 with PKCE and requests the minimum scope needed to read your username, PumpPay cannot post, follow, read DMs or see your email.

If you sign in with the wrong account, the claim page says so and offers to re-verify as the correct handle. Once verified, paste or connect a Solana address; the release transaction is submitted by the escrow and the resulting signature is shown so you can confirm it on Solscan.

Claims are idempotent: repeated attempts on the same gift cannot release funds twice, and a gift can only ever be in one of held, claimed or refunded states.

Between sending and claiming, tokens live in a single app-controlled escrow wallet on Solana mainnet. The escrow keypair lives only on the server; it is never exposed to the browser, and every release is authorized by a server function after handle verification succeeds.

Every deposit and release is an ordinary on-chain transfer, so the escrow's full history is publicly auditable. Balances, held vs. released totals and current holdings are summarized on the escrow transparency view.

Unclaimed gifts stay held indefinitely and can be refunded to the original sender's wallet, nothing expires into PumpPay's pocket.

Token metadata, name, symbol, logo, decimals and price, is pulled live from pump.fun and Jupiter and cached server-side so pages stay fast. If a token has no logo published upstream, PumpPay falls back to a generated ticker mark.

Trending on PumpPay is native: rankings are driven by how many gifts a token has received on PumpPay, not by market cap or volume elsewhere. The same is true for the leaderboards, top tokens, top gifters and most-gifted accounts all come from PumpPay activity.

• Solana network fees apply to the send and to the escrow release.
• A one-time rent-exempt deposit may be needed to open a token account for a new mint.
• Gifts are limited to what your wallet actually holds, there is no credit, lending or leverage.
• Any PumpPay fee, if enabled, is shown before you sign. Nothing is ever charged silently.

• PumpPay never asks for your seed phrase or private key.
• The only thing you sign is a token transfer to the escrow address.
• Gift and handle records are not publicly readable from the database; all reads go through server functions.
• X sessions are signed server-side and scoped to reading your username only.
• Wallets may warn on shared preview domains. Use the published PumpPay domain for transactions and always confirm the escrow address before signing.