What is Lockpad?

Lockpad is a trust-enforcement wrapper around pump.fun. It is not a competing DEX or launchpad. All trading still happens on pump.fun exactly as you'd expect — Lockpad only handles the launch transaction, adding mandatory token locks to the developer's token allocation before the token ever goes live.

The problem is simple: devs launch tokens, buy a bag during creation, and dump it on buyers within minutes. Lockpad makes that impossible by locking the dev buy through a Streamflow token lock — an audited, non-cancelable on-chain lock. If a dev launches through Lockpad, their tokens are locked. Period.

Key point

Lockpad does not custody funds, run a DEX, or deploy a custom on-chain program. It constructs a client-side transaction bundle that atomically creates, buys, and locks — all in one signature.

How It Works

The Atomic Transaction

When you launch a token through Lockpad, three instructions are bundled into a single Solana transaction:

1

Create token on pump.fun

The token is created using pump.fun's bonding curve program, exactly as a normal pump.fun launch.

2

Dev buy executes

Your initial SOL buy goes through the bonding curve. You receive tokens into your wallet.

3

Tokens are locked via Streamflow

The purchased tokens are immediately deposited into a Streamflow token lock contract with your chosen duration.

If any step fails, the entire transaction reverts. You cannot end up with an unlocked buy — that's the whole point. The atomicity is enforced at the Solana runtime level.

The Flow

Your SOL
→
pump.fun buy
→
Tokens
→
Streamflow lock
→
Lock schedule

Streamflow Token Lock

Streamflow is an audited token lock protocol on Solana. When Lockpad locks your tokens, it creates a Streamflow token lock contract with the following properties:

  • Non-cancelable — once locked, the creator cannot withdraw tokens early
  • Cliff-based lock — tokens unlock in full at the end of the lock period
  • On-chain verifiable — anyone can inspect the lock on Streamflow's explorer
  • Non-transferable — the lock recipient cannot be changed

Trust Tiers Explained

Every token launched on Lockpad receives a trust tier based on the developer's profile and launch configuration. Tiers are computed dynamically — they can go up or down as conditions change.

TierRequirementsWhat it signals
LOCKEDToken launched with a token lock. No GitHub connected.Dev tokens are locked, but the developer is anonymous.
VERIFIEDLock + GitHub account connected (public profile with history).Dev has a verifiable identity tied to their launch.
BUILDERVerified + linked public GitHub repo + lock duration of 30+ days.Dev is actively building something and has committed to a longer lock.
SHIPPEDBuilder + live product URL that resolves + recent repo activity.Dev has shipped a working product. Highest trust signal.

Can a tier go down?

Yes. Tiers are evaluated dynamically. If you disconnect GitHub, your tier drops back to LOCKED. If your repo goes private or your live URL stops resolving, your tier adjusts accordingly.

Can I upgrade my tier after launch?

Yes. Connect GitHub, link a repo, or add a live URL at any time. Your tier will be recalculated the next time your token page is loaded.

For Developers

Launching a Token

The launch wizard walks you through four steps:

  1. Token details — name, ticker, description, and image
  2. Dev buy amount — how much SOL you want to buy at launch
  3. Lock configuration — lock duration and percentage of your buy to lock
  4. Review and sign — preview the transaction, then sign with your wallet

GitHub Verification

Sign in with GitHub via OAuth. Lockpad reads your public profile — account age, public repos, and contribution history. No private data is accessed. Your GitHub username is displayed on your token's page so buyers can verify your identity.

Lock Duration Guidance

7 daysMinimum. Shows intent but low commitment.
30+ daysRequired for BUILDER tier. Recommended.
90+ daysStrong signal. Shows long-term commitment to the project.

Achieving SHIPPED Status

To reach the highest trust tier, you need all of:

  • GitHub connected with a linked public repo
  • Lock duration of 30+ days
  • A live product URL (must resolve to an actual page)
  • Recent commit activity in the linked repo (within the last 30 days)

For Buyers

Reading a Trust Tier

Every token on Lockpad displays a tier badge. Higher tiers mean more verifiable signals of developer commitment. A SHIPPED badge means the dev has a verified GitHub, a public repo, a live product, and a 30+ day lock. A LOCKED badge means the tokens are locked but the developer is anonymous.

What the Lock Means for You

A Streamflow token lock means the developer cannot sell their locked tokens until the lock period ends. This protects you from immediate dumps. However, a lock does not guarantee the project will succeed — it only guarantees the dev cannot rug by dumping their allocation.

Verify Independently

Every token page on Lockpad links to the Streamflow lock transaction. You can verify the lock directly on Streamflow's app or by inspecting the transaction on a Solana explorer. The lock parameters (duration, amount, recipient) are all on-chain.

Red Flags to Watch For

Even with locks, exercise caution:

  • Very short lock durations (under 7 days)
  • Low lock percentage (locking only 10% of a large buy)
  • No GitHub connected (Tier 1 only)
  • No linked repo or live URL
  • Remember: locks prevent dumps, but the token could still lose value through normal market activity

FAQ

Is this free?

Yes. During the MVP phase, Lockpad charges no additional fees. You only pay standard Solana transaction fees and the pump.fun creation fee.

Do I need GitHub to launch?

No. You can launch without GitHub, but you'll only receive LOCKED status (Tier 1). Connecting GitHub unlocks higher trust tiers and gives buyers more confidence.

Can I cancel my lock?

No. Streamflow locks created through Lockpad are non-cancelable by design. This is the entire value proposition — buyers can trust that the lock is permanent. Once signed, you wait for the lock period to end.

What if pump.fun changes their program?

Lockpad constructs transactions against pump.fun's on-chain program. If pump.fun updates their program ID or instruction format, we monitor for changes and update our transaction builder accordingly. Your existing locks on Streamflow are unaffected by any pump.fun changes.

Is this audited?

Streamflow is audited (by Sec3/Soteria and others). Lockpad itself does not deploy a custom on-chain program — it bundles existing audited programs (pump.fun + Streamflow) into a single client-side transaction. There is no smart contract risk from Lockpad specifically; the risk surface is the same as using pump.fun and Streamflow directly.

What wallets are supported?

Phantom and Solflare. Both desktop extensions and mobile wallets are supported.