Skip to main content
Stay safe while using RugFreePump and other Solana applications. The most important part of using a blockchain application is understanding that your wallet is under your control. Your recovery phrase and private keys give access to your assets, and no legitimate application or support representative should ever ask you for them.
The single most important rule on Solana: never share your recovery phrase or private key. RugFreePump will never ask you for your recovery phrase, private key, wallet password, or other wallet credentials.
Everything else on this page is secondary to that rule.

​
Safety Basics

​
Verify the RugFreePump Website

Before connecting your wallet, make sure you are using the official RugFreePump website. Scammers can create websites that closely imitate legitimate applications and use them to trick users into connecting their wallets or approving malicious transactions. Always:
  • Check the website address carefully before connecting your wallet.
  • Use a bookmark or a trusted link to access RugFreePump.
  • Be cautious with links shared through social media, comments, private messages, or community groups.
  • Watch for misspelled domains, unusual characters, or unfamiliar domain extensions.
  • Never assume a website is legitimate simply because it looks identical to RugFreePump.
A website having HTTPS or a browser security indicator does not prove that it is the official website. Always verify the domain itself. If you are unsure whether a link is legitimate, do not connect your wallet.

​
Protect Your Wallet Credentials

Your wallet credentials are the keys to your assets. Depending on your wallet, these may include:
  • Recovery phrase or seed phrase.
  • Private keys.
  • Wallet password or PIN.
  • Device authentication used to access the wallet.
Never share these credentials with anyone. RugFreePump does not need them to:
  • Connect your wallet.
  • Create a sale.
  • Buy tokens.
  • Withdraw contributed SOL.
  • Migrate liquidity.
  • Claim purchased tokens.
  • Resolve a transaction problem.
Anyone asking for your recovery phrase or private key is attempting to gain control of your wallet.

​
Verify Transactions Before Signing

Connecting your wallet to RugFreePump does not give RugFreePump control over your assets. Transactions must be approved by you through your wallet. Before approving a transaction:
  1. Read the transaction request shown by your wallet.
  2. Confirm that you initiated the action.
  3. Check the account or asset changes shown by your wallet when available.
  4. Make sure the requested action matches what you intended to do.
  5. Reject the request if anything appears unexpected.
Do not blindly approve a transaction simply because a website tells you that it is required. If you did not initiate the action or do not understand what your wallet is asking you to approve, reject it.

​
Do Your Own Research

RugFreePump provides the infrastructure for creators to launch token sales, but the existence of a sale does not mean that RugFreePump endorses the project or guarantees its success. Before contributing to a sale, research the project and creator yourself. Consider:
  • Who created the project?
  • Have you reviewed the token sale model and its token claiming and unlock conditions?
  • What is the project trying to build?
  • Is the creator’s information consistent across their official channels?
  • Does the project have a genuine community?
  • Does the project’s communication match its stated goals?
  • Are there unusual claims or promises?
  • Are you comfortable with the risks involved?
Remember that a token’s name, ticker, logo, description, or social links are not proof of legitimacy. The token’s mint address is its unique on-chain identity. When verifying a token, use the mint address rather than relying only on its name or ticker.

​
Common Solana Scams

Most wallet-related losses fall into a few common categories. Understanding how these scams work makes them much easier to recognize.

​
1. Recovery Phrase and Private Key Theft

Your recovery phrase or private key provides access to your wallet. Anyone who obtains it may be able to control the assets in that wallet. Scammers may ask for it while pretending to be:
  • RugFreePump support.
  • Wallet support.
  • A developer.
  • A moderator.
  • A community administrator.
  • A security or verification service.
  • Someone helping recover a failed transaction.
They may tell you that you need to provide your recovery phrase to:
  • Verify your wallet.
  • Fix a transaction.
  • Recover your funds.
  • Complete a migration.
  • Unlock your account.
  • Claim a reward.
  • Resolve a security issue.
These are common scam techniques. No legitimate RugFreePump representative will ever ask for your recovery phrase or private key.

​
Protect Your Recovery Phrase

When creating a wallet:
  • Keep your recovery phrase offline.
  • Store it somewhere physically secure.
  • Do not photograph or screenshot it.
  • Do not store it in email, cloud storage, messaging applications, or ordinary notes.
  • Do not paste it into websites or forms.
  • Never send it to another person.
The recovery phrase should only be entered when you intentionally restore your own wallet through your wallet application.

​
If Your Recovery Phrase Is Exposed

Treat the wallet as compromised. Create a new wallet with a new recovery phrase and move any remaining assets to the new wallet as soon as possible. Do not continue using the compromised wallet simply because the assets appear to be safe at the moment.

​
2. Phishing Websites

Phishing websites are fake websites designed to look like legitimate applications. A scammer may create a site that looks almost identical to RugFreePump and then convince you to connect your wallet or approve a transaction. The fake site may be promoted through:
  • Search engine advertisements.
  • Social media posts.
  • Comments.
  • Discord or Telegram messages.
  • Private messages.
  • Fake announcements.
  • Fake partnership posts.
  • Links embedded in videos or other content.

​
How to Protect Yourself

Always:
  • Verify the website address before connecting your wallet.
  • Check the domain character by character.
  • Be suspicious of links sent by unknown people.
  • Avoid connecting your wallet to unfamiliar websites.
  • Use a trusted bookmark when possible.
  • Do not trust a website simply because its design looks identical to RugFreePump.
A phishing website may successfully connect to your wallet and then ask you to sign something that has nothing to do with the action you intended. If the wallet request looks unexpected, reject it immediately.

​
3. Fake Support and Social Engineering

Scammers frequently impersonate support staff, developers, moderators, or community members. A common pattern is:
  1. You publicly ask for help.
  2. Someone contacts you privately.
  3. They claim to be able to solve your problem.
  4. They send you a link or ask you to connect your wallet.
  5. They ask you to approve a transaction or provide wallet credentials.
The scammer may create a convincing profile and use logos, names, or other information copied from legitimate accounts.

​
Protect Yourself

Be extremely cautious when someone unexpectedly contacts you about a wallet or transaction problem. Never provide:
  • Recovery phrases.
  • Private keys.
  • Wallet passwords.
  • Authentication codes.
  • Screenshots containing sensitive wallet information.
Never connect your wallet to a website simply because someone claims it will fix a problem. Never sign a transaction just because someone tells you that signing it is necessary for support. Be especially cautious of messages claiming that you must visit an external website to unlock or claim your purchased tokens. RugFreePump token claims are initiated through the official platform, and no legitimate claiming process requires you to disclose your recovery phrase or private key. If you need help, use the official RugFreePump support channels rather than trusting unsolicited messages.
Someone claiming to be support does not make them support. Verify who you are communicating with before taking any action.

​
4. Malicious Transactions and Signatures

A scam does not always require someone to steal your recovery phrase. A malicious website may instead try to convince you to approve a transaction or sign a message that gives the attacker access to your assets or causes an unwanted transfer. This can happen even when the website looks legitimate.

​
Before You Approve

Ask yourself:
  • Did I initiate this action?
  • Does the requested transaction match what I am trying to do?
  • Do I understand what my wallet is asking me to approve?
  • Are the displayed account or balance changes expected?
  • Did I arrive at this website through a trusted source?
If the answer to any of these questions is unclear, do not approve the request. Close the request and verify that you are using the correct website.

​
5. Fake or Misleading Tokens

Solana allows tokens to be created without requiring permission from a central authority. As a result, anyone can create a token using a name, ticker, image, or description that resembles another project. A token can look legitimate while having no connection to the project it claims to represent.

​
The Mint Address Is the Identity

A token’s:
  • Name can be copied.
  • Ticker can be copied.
  • Logo can be copied.
  • Description can be copied.
  • Social links can be misleading.
The mint address is the unique on-chain identity of the token. When researching a project, verify the mint address through trusted sources rather than relying only on the token’s appearance. For RugFreePump sales, carefully review the project information and verify that you are interacting with the sale you actually intended to support.

​
Understanding Project Risk

Wallet security and project risk are different things. You can use your wallet safely and still lose money because a project fails, loses community interest, performs poorly, or does not deliver what you expected. RugFreePump is designed to change the structure of the fundraising process and reduce certain risks associated with unrestricted bonding-curve selling. However, RugFreePump does not guarantee the success, honesty, quality, or future performance of any project launched on the platform.

​
Creator and Project Risk

A creator may:
  • Fail to deliver their plans.
  • Stop developing the project.
  • Lose community interest.
  • Make poor decisions.
  • Misrepresent their intentions.
  • Fail to meet expectations.
Research the creator and project before contributing.

​
Token Risk

Token prices after migration are determined by the market. A successful sale and liquidity migration do not guarantee:
  • A particular token price.
  • Future demand.
  • Profit.
  • Continued liquidity.
  • Project success.
A token can lose significant or even nearly all of its market value after migration. Only contribute funds you can afford to lose.

​
What RugFreePump Does and Does Not Protect Against

RugFreePump’s on-chain program enforces the protocol’s defined rules, including the rules governing token sale creation, contributions, withdrawals, sale progression, liquidity migration, and token claiming. This does not protect users from every possible form of loss. The protocol cannot prevent:
  • A creator from abandoning a project.
  • A community from losing interest.
  • A token from losing value.
  • Users from choosing a project that does not meet their expectations.
  • Users from voluntarily signing malicious transactions.
  • Users from giving their wallet credentials to scammers.
  • Compromised devices or wallets.
Understanding these limitations is an important part of using RugFreePump safely.

​
If Something Goes Wrong

Act quickly if you believe your wallet or credentials may be compromised.

​
Your Recovery Phrase or Private Key Was Exposed

If someone may have obtained your recovery phrase or private key:
  1. Create a new wallet with a new recovery phrase.
  2. Move your remaining SOL and other valuable assets to the new wallet immediately.
  3. Stop using the compromised wallet.
  4. Do not reuse the compromised recovery phrase.
  5. Review your wallet activity for unauthorized transactions.
Do not wait to see whether someone actually takes your funds. If the recovery credentials are compromised, assume the wallet is compromised.

​
Your Wallet Credentials Were Stolen

If someone has gained access to your wallet:
  1. Create a new wallet immediately.
  2. Transfer remaining assets to the new wallet.
  3. Stop using the compromised wallet.
  4. Review recent transactions.
  5. Secure the device you use to access your wallet.
If the attacker still has access to the compromised wallet, moving funds may need to be done immediately.

​
You Approved a Malicious Transaction

If you realize that you approved a transaction you did not intend to approve:
  1. Check your wallet activity immediately.
  2. Move any remaining valuable assets to a new wallet if you believe the wallet is compromised.
  3. Stop interacting with the suspicious website.
  4. Do not approve additional transactions from the compromised wallet.
  5. Record the relevant transaction signatures and wallet addresses for investigation or reporting.
Blockchain transactions are generally irreversible once confirmed. RugFreePump cannot reverse a transaction that you authorized through your wallet.

​
You See an Unauthorized Transaction

If you see a transaction that you did not authorize, treat the wallet as potentially compromised. Do not spend time interacting with the suspicious website to investigate the issue. Instead:
  1. Move remaining valuable assets to a new wallet if possible.
  2. Stop using the potentially compromised wallet.
  3. Review recent wallet activity.
  4. Secure your devices and wallet credentials.
  5. Report the incident through appropriate official channels.

​
Quick Safety Checklist

Before using RugFreePump, make sure:
  • Your recovery phrase is stored securely and offline.
  • You have never shared your recovery phrase or private key.
  • You know how to recognize the official RugFreePump website.
  • You verify the website before connecting your wallet.
  • You read wallet transaction requests before approving them.
  • You reject unexpected or unfamiliar signing requests.
  • You do not trust unsolicited support messages.
  • You verify token mint addresses when researching projects.
  • You research creators and projects before contributing.
  • You understand that token and project performance cannot be guaranteed.
  • You understand that blockchain transactions can be irreversible.
If something feels unusual, stop before signing. Taking a few seconds to verify a transaction can prevent a permanent loss.

​
Your Responsibility

RugFreePump is designed to provide a transparent, protocol-enforced environment for token fundraising. However, wallet security ultimately begins with you. Your recovery phrase and private keys control your wallet. Transactions you approve are authorized by your wallet. The projects you choose to support are your responsibility to research. The safest approach is simple:
Protect your wallet. Verify the website. Read every transaction. Research every project. Never sign what you do not understand.
For more information about the risks associated with the RugFreePump protocol and its ecosystem, see Risks. For help getting your wallet ready to use RugFreePump, see Getting Started. For information about buying tokens through a bonding curve sale, see Buying Bonding Curve Sale Tokens.