PumpCrateDocsPermissions and security
The safest permission is the one never asked for. PumpCrate's design keeps your wallet out of the trading entirely: it reads one public address, and the only transaction you ever send is the payment you make yourself.
The short version#
- Sign-in reads your public address. That is all it can see.
- Nothing is ever signed to log in, and no transaction is ever put in front of you to approve.
- No token approval or delegate is requested, so there is nothing that could move your funds.
- No page, form or support channel asks for a seed phrase or private key.
- Trades are placed by session wallets that PumpCrate funds. Your wallet never trades.
Why read-only sign-in is enough#
Most dapps ask you to sign a message to prove you own an address. PumpCrate does not need that proof for anything that could hurt you: the balance stored against an address can only be spent on sessions for that same address, and payments are matched by the reserved address and amount, not by who sent them. Reading the address is enough to show you the right balance and to credit the right account.
What the payment looks like#
The payment is a normal SOL transfer that you build in your own wallet, to an address the panel shows you, for an amount the panel shows you. The panel never constructs a transaction for your wallet to sign. If your wallet ever shows a PumpCrate-related request to sign a message, approve a token or confirm a transaction you did not create yourself, reject it.
Recognising the real PumpCrate#
| Channel | Official address |
|---|---|
| Website and panel | www.pumpcrate.com |
| Documentation | docs.pumpcrate.com |
| Telegram support bot | @pump_crate_bot |
| support@pumpcrate.com | |
| X | @pumpcratecom |
| Medium | medium.com/@pumpcrate |
Support will never message you first on Telegram or X, never ask you to "verify" or "sync" a wallet, and never ask for a seed phrase, a private key or a screen share. Anyone who does is impersonating PumpCrate.
Data PumpCrate keeps#
To run the service the panel stores, against your public address: your balance, your orders and their payment signatures, your sessions with their settings and events, and your ledger. Custom comment lines you upload for a session are stored with that session so its wallets can post them. Nothing about your identity is required. The privacy policy on the main site has the full details.
Good habits that help#
- Bookmark the panel URL and use the bookmark instead of links from chats.
- Check the payment address in your wallet against the one shown in the panel before sending.
- Keep the transaction signature of your payment until the order shows Paid.
- Use a wallet for the panel that you would be comfortable sharing publicly. Your address is public on chain anyway, and the panel never needs more than that.