HOW IT WORKS
Every coin launched on Vault Pad has a safe with a secret 4-digit code. Half of the coin's creator fee fills it. Every buy through the pad is one guess. The first exact match takes the whole pot, then a new safe with a new code takes its place.
THE LOOP
- Launch. The coin is created on pump.fun with its own Vault Pad account as creator. Each creator-fee lamport splits 50% safe, 40% dev, 10% pad. The dev can seed the first safe (up to 10 SOL).
- Lock. Before the safe takes any try, the keeper posts the hash of the code (sha256 of code, salt, coin, safe number). The safe arms once its pot reaches 0.05 SOL.
- Try. A buy through the pad's router of at least max(0.02 SOL, 1% of the pot) is one try. Your 4 digits ride inside the buy and are written to the safe's log on chain. 0% router fee; wallets, bots and terminals can all call it.
- Answer. The keeper answers every try in order: how many digits sit in the right place, 0 to 3. Never which ones. A 4 cannot be posted: the keeper must reveal the code instead.
- Reveal and check. On a hit the keeper reveals the code and salt; the program checks them against the hash. Anyone then runs the check over the whole log: the program recomputes every hint and finds the earliest try that really matched, answered or not.
- Open. The whole pot goes to that try's buyer, pushed to the wallet. No claim. The next safe starts with the code the keeper already committed.
- Reshuffle. A safe that reaches 4096 tries or 7 days is revealed and gets a new code. The pot carries over.
- Keeper silent. An unanswered try older than 1 h stalls the safe. After 72 h more without a reveal, the pot buys the coin back and burns it in chunks. Nobody gets it.
THE NUMBERS
Read live from the program's config. Parameter changes need a 24 h timelock and only apply to coins launched after them.
TRUST POINTS
- The keeper knows every live code. The chain proves it never changed a code and never hid a winner or lied in a hint (checked after the reveal). It cannot prove the keeper never leaked a code. The keeper key and its secret live on a different machine than the admin key.
- A wrong hint is caught after the reveal and pauses new safes pad-wide until the admin rotates the keeper (3-day timelock) and resumes.
- The keeper can force a reshuffle by staying silent: hints reset, real matches are still paid.
- No admin path moves a pot, the dev share or the pad share anywhere else. The admin can pause launches and donations, change future parameters (24 h) and roles (3 days).
- Role wallets cannot try codes (admin, treasury, keeper). A fresh wallet could, which is why the leak point above matters.
- Platform: pump.fun admin actions could redirect a creator fee. The program is upgradeable.
GAME NOTES
- Hints are public. A sharp crowd can crack 4 digits in about 10 tries, so it is a race: watch the codes-left map.
- Only buys through Vault Pad count as tries. Buys on pump.fun or terminals still fill the safe through the creator fee.
- Each try costs a real buy of the coin. You keep the tokens.