sealed order flowsolana · pump.fun
Orders encrypted to the future.
Snipers read your order before it lands. OPAQUE seals it to a future drand round, so nobody can read it until that round arrives. Not bots, not validators, not us.
tlockdrand quicknetBLS12-381age v1
- Scheme
- Identity-based encryption on BLS12-381
- Key
- drand's signature on the target round
- Payload
- age v1, ChaCha20-Poly1305
- Server
- None. Sealing runs in your browser.
/seal
Seal an order.
Pick an order and how long it stays sealed. It is encrypted in your browser to a future drand round and opens the moment that round's signature is published. The only network request is for that one public signature.
/threat
Solana has no mempool. It still has sandwiches.
There is no public waiting room on Solana, but an order still passes through RPC nodes, relays and the validator building the block before it lands. Anyone on that path who can read it can trade ahead of it.
The bot reads your size and slippage, buys in front of you and sells into your fill.
The same order, sealed to a round about an hour from now. Nothing in it can be read or priced until then.
Illustration of a sandwich. The sealed row shows the real ciphertext of an order sealed in your browser just now.
- ~6.9Msandwich attacks by bots against about 2.2M Solana wallets, Oct 2025 to Oct 2026Bitquery data, via Forklog
- Oct 12, 2026Aptos switched on an opt-in encrypted mempool on mainnetAptos, via Forklog
- Ethereumcore developers run a recurring call to design an encrypted mempoolEthereum Magicians
/protocol
The key doesn't exist yet.
-
01t₀
Lock
Your browser encrypts the order to round N. The round number is the identity and drand's public key is the master key. Nothing is sent anywhere.
-
02t₀ → tₙ
Wait
The key is drand's BLS signature on round N. A threshold of independent operators produces it, and it does not exist before that round. quicknet launched with 18 organizations running 22 nodes.
-
03tₙ
Open
drand publishes a signature every 3 seconds. When round N's lands, anyone can open the order, and everyone gets it at the same instant.
/beacon
This is the clock.
The latest drand quicknet round, fetched live from its public relays. Every seal on this page points at one of these rounds.
{
"round": …,
"randomness": "…",
"signature": "…"
}
/batch
The line is set before anyone can read it.
Orders sealed to the same round take their place in line while they are still ciphertext. They open together and run in that order, so once the contents are visible there is no slot left to jump into.
Demo batch. These orders are generated in your browser and really sealed with tlock to the batch round. Sequencing and execution on pump.fun are in development.
/verify
Don't trust this site.
An OPAQUE seal is a standard tlock ciphertext. Once its round has passed you can open it with drand's own tools, without this website.
# drand's own CLI
$ go install github.com/drand/tlock/cmd/tle@latest
$ tle -d order.age
BUY 2.5 SOL $OPAQUE
// tlock-js, the library this site uses
import { timelockDecrypt, mainnetClient } from "tlock-js"
const order = await timelockDecrypt(ciphertext, mainnetClient())
/status
What runs today.
OPAQUE never asks you to deposit funds, connect a wallet or sign a transaction.
/token
$OPAQUE
Live on pump.fun
A bet that sealed order flow reaches the trenches. Sealing is free and stays free.
- chain
- Solana
- launch
- pump.fun
- supply
- 1,000,000,000
- ticker
- $OPAQUE