FAQ

What is Cloak?

A way to trade pump.fun coins without the whole chain watching. You deposit, place orders that stay encrypted until their batch closes, and withdraw to any wallet. Each batch fills everyone at one price per coin.

Why seal an order?

A normal swap shows its coin, size and worst price before it lands. Bots use that to buy in front of you and sell into your fill. A sealed order shows nothing but a hash until the batch closes, and by then every order in the batch opens at once.

Who can see my order, and when?

Nobody, including the operator, until the batch's drand round arrives, about forty seconds after the batch's first order. After that anyone can read it. It names a one-time key, not your wallet.

What price do I get?

Buyers and sellers of the same coin trade with each other at the midpoint first, with no curve fee on that part. Whatever is left trades on the pump.fun curve or PumpSwap. Everyone buying a coin in a batch gets the same price, and so does everyone selling. Your order also carries a worst price, and it is turned down rather than filled below it.

What does it cost?

0.2% of what a fill pays out. Withdrawing through the relay costs 0.001 SOL, or about 0.0035 SOL worth of the coin, which pays for the recipient's token account. Withdrawing with your own wallet costs only the network fee. The curve's own fee applies only to the part of a batch that did not cross.

Which coins can I trade?

Any pump.fun coin that has been added. Anyone can add one in the app; it costs about 0.004 SOL of account rent.

Which wallets work?

MetaMask and Phantom, and any other Solana wallet your browser has. You sign one message to open your book. The same wallet always opens the same book.

Is my wallet linked to what I hold?

Your deposit is visible: the chain sees your wallet put SOL or a coin in. After that every position belongs to a key made for it alone, and withdrawals go to whatever address you choose. The link only breaks if you withdraw somewhere new.

Can the operator take my coins?

No. Coins only leave the vault with a signature from the position's own key, and the program checks that every total the operator commits is really held. The operator can turn an order down, with the reason published, or stop running.

What if Cloak goes offline?

If no batch is committed for 48 hours, or a closed batch is left unsettled for an hour, anyone can freeze the vault. Then every position can leave with a proof rebuilt from published data, sent from any wallet. The app's "My wallet" withdrawal does exactly this.

Is there a token?

No.