How Copypad works

The idea in four lines

1. A dev launches a pump.fun coin on Copypad and ties it to a Hyperliquid address that passes the filters. The tie is permanent.
2. The coin's creator on pump.fun is its own fee account, owned by the program. Every creator fee is split: the dev's share at once, the rest into the coin's pool and the treasury.
3. Once per epoch an oracle reads the whale's all-time PnL from Hyperliquid's public API and posts it on chain, signed. Anyone can finalize it after a veto window.
4. If the whale's PnL went up since the coin's last settle, a share of the pool moves into the buyback budget, which only buys this coin on pump.fun / PumpSwap and burns every token. If it went down, nothing is spent and the pool keeps charging.

The whale is picked by the dev

The dev picks the whale. We don't know who it is. It may be a stranger, a fund, or the dev himself. A dev who controls a large account can push its PnL with a second account that loses; the filters make that cost real capital, and the gain is only a faster buyback of his own coin from his own pool, capped per epoch.

Filters a whale must pass

Settle rule

Parameters (live)

Trust points

• Oracle key. Decides when and how much of a coin's own pool becomes burns of that coin, inside the cap per settle and the guarded chunks. It cannot move SOL anywhere else, cannot touch the dev or treasury shares, cannot change a whale. A forged attest can only launch a new coin that pays its own launch fee.
• Guardian. Can veto a pending report during the veto window and revoke the oracle at once. That can stop reports, never move money.
• Admin. Can pause launches and donations, propose new params (24 h timelock, existing coins keep theirs), rotate roles (3-day timelock), set the treasury. No path to any pool.
• Hyperliquid data. No on-chain proof of Hyperliquid state exists. Every report can be re-checked live from your browser (the "Check with Hyperliquid" button), and past ones against the oracle's archive, whose sha256 is inside the signed report. That proves the archive was not edited after posting, not that Hyperliquid sent it.
• Platform. pump.fun and PumpSwap are upgradeable programs.
• Keeper silent. The pool accumulates. After the stale window anyone can drip a small share per epoch into buybacks. Every crank is permissionless: the coin page has a button.

Buybacks

A budget is spent in guarded chunks: at most the depth the price impact cap allows, one chunk per coin per slot and per chunk gap, alone in its transaction, priced against a median of recent on-chain observations. Every token bought is burned in the same instruction. Nobody chooses the size.

What cannot happen

No instruction changes a coin's whale or split, withdraws a pool or a budget, or closes a coin. There are no locks, timers or seasons for holders: a coin works from its first block.

Program