How it works
Every pump.fun coin launched on Cat Pad gets nine lives and its own reserve. When a life falls through its line, the reserve buys the coin back in small parts and burns every token it buys. The ninth death is final. All of it runs on chain; every step is open to anyone.
The reserve
SOL held inside the coin's own program account. It comes from the dev's seed at launch (at least 0.1 SOL), 0.8% of every trade made on this site, feeds from anyone, and, only if the dev opts in at launch, a share of the coin's pump.fun creator fee. Nobody can withdraw it, the admin neither: it is only spent buying the coin back.
A life and its line
Life 1 starts 1 hour after launch at the median on-chain price then. Each life's death line sits 50% below the price it was born at. Price = median of three consecutive on-chain readings of the bonding curve, or of the canonical PumpSwap pool after migration. No oracle.
A death
The median has to stay under the line for 10 minutes across at least 10 readings, and the live price has to agree. A life must be at least 6 hours old to die, and a coin dies at most 4 times in 24 hours. Then anyone can call it: the coin loses a life.
Continue
Deaths 1 to 8 are revived. The reserve divided by (lives left + 1), at most 10 SOL, buys the coin back in 10 parts over 10 minutes, only while the price is under 130% of the line, and burns every token it buys. What is not spent goes back to the reserve.
The next life
After a revive the next life has no line for its first hour: the next life is born at the lowest price of its first hour. A pump held over the end of a revive cannot lift the line; growth held for the whole hour does.
Game over
The ninth death is final: no revive. The whole remaining reserve buys the coin back and burns it over 24 hours in 48 parts. Then the coin is dead: its card becomes a gravestone and the router fee for it is 0. The coin itself keeps trading on pump.fun; nobody can stop that.
Each buyback is guarded
The minimum it must receive comes from the median of the newest readings minus 3%; one part is at most 0.5% of the curve's SOL; one program buy per slot; no trade in the same transaction.
What a reserve is not
A cushion, not a floor. A small reserve buys part of the dip back and burns it. A revive also pays sellers in a crash, which is what a cushion does. Trades on pump.fun, Axiom or bots do not pay the router fee and do not feed the reserve.
Trust points
- No attestor and no oracle. The keeper key has no privilege: every step it takes is open to anyone, and a dead keeper only delays.
- The admin can pause new launches, feeds and router buys, change parameters for future coins behind a 24 hour timelock, set the treasury and set $NINE once. The admin cannot move any reserve, any held dev share or any token, and cannot stop a death, a revive or a final buyback.
- Parameters of an existing coin never change.
- Killing a coin on purpose takes a real 50% fall below each life's own line, held 10 minutes, at least 6 hours apart. The killer sells into his own crash.
- Platform risks remain: pump.fun and PumpSwap are upgradeable programs run by pump.fun.
Program ninz4...V9u4 on Solana.