Docs

How it works

1. Launch. A coin launched here is a normal pump.fun coin whose creator is the program. At launch it gets 48 price levels: level k sits at the launch price x 1.15^(k+1).
2. Lease. Each level is leased for 7d by a falling-price (Dutch) auction: it starts at 2x the last lease price and falls to the floor of 0.02 SOL over 24h. The first wallet to sign gets it. 100% of the price goes to the coin's burn bucket. One wallet holds up to 8 live leases per coin.
3. Split. Every creator fee of the coin is split by the program: 40% dev, 40% toll, 10% $TOLL buyback, 10% treasury.
4. Cross. Any trade on pump.fun or PumpSwap (this site, pump.fun, bots, anywhere) that moves the price through a level crosses it. The toll of a trade is 40% of that trade's own creator fee, shared equally by every level it crossed. A trade exactly on a level price does not cross it.
5. Report. Every 24h the epoch closes and the attestor posts a signed report: every trade line, every owner and amount, as a merkle root. The report JSON is public; anyone can recompute it from chain data.
6. Veto. The guardian recomputes each report on its own and has 2h to veto a wrong one. A vetoed epoch pays nobody: its toll burns.
7. Paid. After the veto window the report is final and the toll goes to the owners (the keeper pushes it, anyone can). Toll of a crossing with no leased level, dust, and anything not paid before expiry goes to the burn bucket.
8. Burn. The burn bucket (lease money, unowned toll, donations) buys the coin back on its curve or pool, guarded against price manipulation, and burns every token bought.

Trust points

• Attestor: decides which owner gets which part of one epoch's toll of one coin. The program bounds it: total at most the epoch's booked toll, money only to wallets that leased the named level during the epoch (checked against the level's lease history), each line once. It cannot touch lease money, the burn bucket, the dev share, $TOLL or the treasury. A missing report fails closed: the toll burns at expiry.
• Guardian: recomputes every posted report and vetoes on any mismatch. A veto burns one epoch's toll and pays nobody. It can also revoke the attestor.
• Indexer rule: only trade events that pump.fun or PumpSwap really emitted count, and each epoch window is anchored to the transactions recorded on chain.
• Admin: can pause new coins, leases and donations (never payouts), change parameters for future coins after a 24 h timelock, rotate roles after 3 days, and set the $TOLL mint once. No power over booked SOL, leases or reports.
• Platform: pump.fun admin actions could move a coin's creator away from the program; the programs are upgradeable.

Program LevjHQdfhSH3TC2Rb4kyphT4bfYBFtfmb4itKxh9eAP

$TOLL

10% of every creator fee collects in the $TOLL bucket. Once the $TOLL mint is set, the bucket buys $TOLL in small guarded chunks and burns every token.