Risks

The admin key can withdraw funds#

The LOADED platform admin key can withdraw a vault's SOL (ammo first, then any backing) and tokens with admin_withdraw_vault, the sponsor pool's idle SOL with admin_withdraw_pool, and the SOL queued for the $LOADED buyback with admin_withdraw_buyback. A withdrawal from a Floor-mode vault lowers its strength and can break the floor; on Burn, Pulse and Diamond it lowers what redeem pays. The stored floor doesn't move. Withdrawals are instant; every withdrawal emits a public on-chain event, and vault withdrawals show in the coin's vault log. Admin powers.

Pool deposits can be lost#

SOL in the public sponsor pool is lent into new coins, most of which die. Losses hit the share price at once; withdrawals wait at least 2 days and are paid only from idle SOL. The platform admin can also withdraw idle pool SOL. The public pool.

Burn and Pulse have no floor bid#

In Burn and Pulse mode nothing bids at a floor; the floor the site shows is the backing, about a quarter of what a Floor coin protects in our backtest. No mode moved the price much in the backtest. The modes.

The floor MC is usually far below the MC#

If you buy above the floor and the market cap falls, you lose the difference. On a young coin that difference is most of what you paid: the floor grows from the vault's 80% of fees and from realized profit, which are small next to the speculation in a memecoin's market cap. From fees alone the floor MC comes to about 8 × the fee rate × volume — at the curve's 0.30% fee, well under 1% of the coin's lifetime volume — and before graduation the floor MC rarely gets anywhere near the curve's own starting market cap.

Every coin page shows the floor MC next to the MC, and Floor vs high: a floor at 3% of the coin's high protects 3% of it. Read it, and the strength beside it, before you buy.

The floor can run out of ammo — and is rationed#

The vault's bid at the floor is only as deep as its ammo: at the moment of a ratchet it can absorb about 10% of circulating supply, less after it has bought. And it spends at most 15% of that ammo per 1 hour: a dump that needs more is only partly met until the next window. A bigger dump pushes the MC under the floor MC and keeps it there until the window reopens or new inflows repair the ammo. The stored floor doesn't move down meanwhile — but a floor nobody is bidding is just a number. Coin pages show strength next to every floor, draw the slab cracked as ammo is spent, and grey it out when it is broken.

In Floor mode there is nothing else: no backing, nothing to redeem. The whole vault is the bid. Burn, Pulse and Diamond coins keep a backing that redeem pays at any time; it is the smaller of their two numbers.

pump.fun can change the ground under the vault#

LOADED coins live on pump.fun, and pump.fun keeps admin powers over every coin on it, ours included:

• It can reassign a coin's creator (a community takeover). Creator fees would then stop reaching the vault, so the floor would stop ratcheting from fees. The SOL already in the vault stays; coin pages flag a coin whose fees were redirected.
• It can switch a coin to fee sharing or holder rewards, which changes where creator fees go. Fees pushed to the vault are absorbed as inflows; fees sent elsewhere are lost to the floor.
• It ships breaking changes to its programs every two to three months. Until LOADED's program is updated to match, vault buys and sells on that venue can fail. Once LOADED's program is immutable, such a change could stop them for good.

One thing pump.fun can't touch: the SOL in the vault. On Burn, Pulse and Diamond, redeem doesn't call pump.fun at all and pays from the vault whatever changes on pump.fun's side; on a Floor coin the ammo stays in the vault until a venue the program knows can trade it.

Smart-contract risk, and no audit yet#

The LOADED program has not been audited. It is tested — every invariant on the rules page is asserted after every step of the test suite — but tests are not an audit, and bugs in on-chain code can lose funds in ways no description on this site anticipates.

Until the audit is published and the upgrade authority is set to none, the program's upgrade key can replace its code, including every rule on this site. Its status is shown live; treat everything here as experimental until it reads “None”.

The keys that do have powers#

• The platform admin can withdraw a vault's SOL and tokens, the pool's idle SOL and the queued buyback SOL (admin powers). It also changes parameters for future launches (inside hard bounds), pauses new launches, chooses the vault agent's wallet, the AI treasury and which modes new launches may pick. It can't change existing coins' terms or mode, or lower a stored floor.
• The vault agent's wallet (7JNY…yJHV) chooses when vaults sell. A bad or compromised agent key still can't sell under the threshold or past the caps, and the proceeds still land in the vault — but it can sell at poor moments within those bounds, or not sell at all.
• The sponsor pool's operator can recall inventory after 1 day, inside the recall rules, and only on a coin that never ran. It can also draw on $LOADED's credit line: borrow part of $LOADED's ammo for the pool, owed back at 125%. $LOADED's floor and backing don't move on a draw, but its bid is thinner until the pool repays.

A leaked selling key, and the reference price#

The keys that sign vault sales are the obvious target: pump the coin, then sell the vault into your own pump in the same transaction. The program closes that path with a market reference, a slow average of the coin's spot in which a spot counts only once two samples in a row see it:

• a vault sale must be alone in its transaction — no pump.fun trade and no other vault trade of the coin beside it. This check reads only the one transaction: it doesn't stop a Jito bundle or a wrapper program that calls pump.fun, which the two-sample fold below bounds instead;
• the reference must be fresh (no older than 2 minutes), and the spot when the sale starts may be at most 5% under it;
• each sample folds the previous and the current spot, both clamped to the drift band: the one closer to the reference counts, and nothing moves when they straddle it. A spot pushed and restored around one sample, even in a bundle, doesn't move it. Moving it for real means holding the market cap up across samples for periods of 2 minutes, in public, with real money at risk the whole time.

What it leaves:

• The drift band. A seller can still start a sale up to 5% below the reference, within the impact and window caps, and the sale must still clear the sell threshold and pay backing first.
• A stale reference. If nobody samples it for a while, the reference lags the market. After a crash, vault sales are refused until it catches down — safe, but the vault waits. A reference nobody sampled for longer than 2 minutes refuses sales outright (RefStale) until someone calls observe; the agent does before planned sales.
• A recall during a fast run. Recall is refused once the reference reaches the inventory's sell threshold (plus a small venue-fee margin), but a reference behind a fast run can still be under it for a while. Such a recall still sells at the market, inside the same caps, with backing paid first.

The full rule set is on the vault rules.

Ordinary memecoin risks still apply#

• Dev buys. A creator can buy up to 5 SOL in the launch transaction and sell whenever they like. LOADED doesn't stop a creator from dumping on buyers; it only puts a floor under the coin.
• The vault's own tokens are supply. The inventory (up to 75% of supply) and tokens bought at the floor are sold into pumps above the coin's sell threshold (1.3× by default for creator-funded coins, 2× for pool-funded) or their cost. That is a sell wall you should expect.
• MEV. Vault sells can be sandwiched within the per-trade impact cap (10%). Floor buys can't be profitably sandwiched.
• Rationing cuts both ways. The window cap keeps one dump from draining the whole bid, but it also means the vault can be standing on the floor with ammo it is not allowed to spend yet.
• Redeem has a cost on the modes that have it: 2% stays in the vault, and a redemption must pay at least a minimum amount.

In one line: LOADED guarantees a trading mechanism — a stored floor that never steps down and a vault that bids it while its ammo lasts — not a market cap. Size your position for the floor and its strength, not the chart.