Security

You keep your keys and your SOL, and every payment is checked on-chain. Here's exactly what's public.

We never take custody of your keys

• You sign every transaction in your own wallet (Phantom, Solflare, Backpack, etc.).
• We'll never ask for your seed phrase or private key. Anyone who does is a scammer.
• Your coin's mint keypair is generated in your browser, and your wallet signs the transaction. One Ticker never holds your coin's keys either.
• One Ticker has no token, presale or airdrop. If someone DMs you about a "One Ticker token," it's a scam.

The marketplace never takes custody of your funds

• Buying a free ticker is one transaction: 0.05 SOL to the treasury and the NFT to your wallet. Our server co-signs it (only the One Ticker collection can create official ticker NFTs), and you sign last. Each ticker has only one possible NFT address, so two buyers can't both get the same ticker.
• Listing: your NFT stays in your wallet. You approve a transfer for that one listing only. A new price, a canceled listing or any move of the NFT makes that approval useless.
• Buying a listed ticker is one transaction, signed by the buyer: 95% of the price to the seller, 5% to the treasury and the NFT to the buyer. Either all of it happens or none of it does. There's no deposit, no escrow and no balance held by One Ticker.
• The server's marketplace key holds no SOL and can't move SOL. The most it can do is move an NFT whose owner approved a listing, and only inside a transaction the buyer signs and pays for.
• Ownership always follows the NFT on-chain. Before every launch, listing or sale, the server checks the owner on-chain again.

How payments are checked

After each transaction, the server pulls it from Solana and checks that:

• it's confirmed, it succeeded and it's recent (less than 15 minutes old);
• it was paid and signed by the right wallet;
• it includes the expected transfers (to the treasury and to the seller) as top-level instructions;
• it created or moved the right NFT from the One Ticker collection;
• its signature has never been used before.

What's public

Ownership is public. Anyone can look up a ticker and see who owns it, so we show it openly:

• Ticker status: free, owned (with the owner's wallet and the price if listed) or launched, on the site and in the API.
• Activity and marketplace: purchases, listings and sales with the ticker, a short wallet address and the price. Launches too.
• On-chain: your ticker is an NFT and your payments are regular Solana transactions. Like every transaction, they're public.

Want to keep it quiet before launch? Don't buy the ticker first. Launch a free ticker directly when you're ready.

What we check when you launch

• Your coin's mint keypair is generated in your browser and never sent to us. Only its public address is.
• Our server builds the launch transaction itself with pump.fun's official SDK (no middleman): your wallet pays and is the creator, with your exact name, ticker and image, and only the expected programs.
• Once it lands, our server reads the transaction on-chain (success, mint, creator, exact ticker, launch fee) before marking the ticker as launched. The first launch confirmed on-chain wins.
• Image and detail uploads are checked on the server (real image type from the file itself, max 4 MB, text length, https links only). Our IPFS key stays on the server.

Current status: devnet

Report a problem

Found a bug or a security issue? Please don't post it publicly. We'll add a contact address here before mainnet.