How SafePump Works
The math, the mechanism, the policy — everything you need to understand how SafePump operates, why it was built this way, and what makes it genuinely safer than every alternative.
Reading time: ~15 min. All numbers are sourced from deployed smart contracts.
What Is SafePump?
SafePump is a memecoin launchpad on Base(Coinbase's L2) that lets anyone create, trade, and graduate tokens — with one design choice that changes everything: creators earn 0.5% of every trade on their token, forever.
No other launchpad does this. On pump.fun, Clanker, and Flaunch, 100% of trading fees go to the platform. SafePump splits the fee three ways: half to the creator, a quarter to the treasury, a quarter to $SAFE stakers who collectively own a slice of every trade across the entire platform.
The result: an aligned system where creators are incentivized to promote their tokens (because volume = their income), traders are protected by immutable contracts and locked liquidity, and $SAFE holders earn real ETH yield from platform activity — not inflationary token emissions.
Creators
0.5% of every trade on their token — forever
Traders
Immutable tokens, locked LP, on-chain reputation, slippage protection
$SAFE Stakers
0.25% of ALL platform volume, paid in ETH
Why Memecoins Are Broken
The memecoin market is $34.4 billion. pump.fun generated $120 million in revenue in Q1 2026 alone. The demand is real — but the current mechanics are structurally hostile to everyone except the platform.
The Standard Launchpad Lifecycle (Today)
SafePump's Answer
Give creators a permanent revenue share (0.5% of volume). Lock LP at the contract level — not as a promise, but as code that literally cannot be overridden. Make the token immutable so there are no hidden admin controls. Track every creator's on-chain track record so traders can see their history before buying. Align incentives so the creator's best move is to build, not dump.
The Pricing Mechanism
SafePump uses a constant-product virtual AMM— the same mathematical model that powers Uniswap v2. The "virtual" part means the pool starts with synthetic reserves so the initial price is non-zero and early buyers get a real price curve, not a divide-by-zero edge case.
The Core Invariant
This product never changes. Every trade adjusts both reserves while keeping K constant.
Initial virtual ETH
2 ETH
Initial virtual tokens
1,000,000,000
K constant
2 × 10⁴⁵
How Buying Works — Step by Step
Buy Formula
ethIn = msg.value × 99 / 100
newVirtualEth = virtualEthReserve + ethIn
tokensOut = virtualTokenReserve − (K / newVirtualEth)
Sell Formula
rawEthOut = virtualEthReserve − (K / (virtualTokenReserve + tokenAmount))
ethOut = rawEthOut × 99 / 100
Price Curve — At Every Milestone
Spot price = virtualEthReserve ÷ virtualTokenReserve. As buyers add ETH, the ETH reserve grows, the token reserve shrinks, and price rises automatically. Nobody manually adjusts anything.
Why 2 ETH Virtual Reserve?
The virtual reserve solves the cold-start problem. Without it, the first token purchase would set an arbitrary price with no depth behind it. By seeding 2 ETH of virtual liquidity, the curve has price depth from the first trade. You can buy a small amount without moving the price wildly. The curve behaves like a real market from token zero.
Why 8 ETH to Graduate?
At 8 ETH raised, the fully diluted valuation is approximately $125,000 at $2,500/ETH. This is the threshold where a token has demonstrated real community interest, has enough ETH to create meaningful DEX liquidity on Aerodrome, and carries a market cap that justifies migration costs. Below 4 ETH, the LP would be too thin for real trading. Above 20 ETH, graduation would take too long for most tokens and suppress creator incentives. 8 ETH is calibrated to be achievable for any project with genuine community support while high enough to filter out spam and low-effort tokens.
Key Insight: Virtual Reserves ≠ Real ETH
The virtual ETH reserve is synthetic — it never exists in the contract's ETH balance. Real ETH is only tracked from actual buyer contributions. This means 100% of the real ETH raised (minus fees) goes to the Aerodrome LP on graduation. Nothing is diluted by the virtual seed.
The 1% Fee — Split Three Ways
Every trade on every SafePump bonding curve incurs a 1% fee (100 basis points). That fee is split into three streams — no single pool, no commingling of funds. Creator and treasury fees accumulate as independent pull-based balances in the contract; staker fees are forwarded to the SafeStaking contract in real time via a try/catch.
Creator
0.5%
50 BPS of every trade
Goes to the token creator's wallet. They withdraw it whenever they want — each creator only ever touches their own fees. Safer for everyone.
Treasury
0.25%
25 BPS of every trade
Goes to the SafePump platform treasury. Funds operations, security audits, marketing, and Phase 2–3 development.
$SAFE Stakers
0.25%
25 BPS of every trade
Sent to the staking contract and shared among everyone staking $SAFE, in proportion to their stake.
Why Pull-Based?
In plain English: creator and treasury fees stay parked inside the trading contract until those parties choose to withdraw — nothing is sent out automatically during a trade. Staker fees are forwarded to the staking contract right away, but if the staking contract is ever paused or unavailable, those fees fall back to the treasury so trading is never blocked. The contract also has built-in protection against reentrancy attacks (a classic DeFi exploit), so no malicious callback can drain funds.
What Creators Actually Earn
No Other Launchpad Does This
pump.fun, Clanker, and Flaunch all take 100% of trading fees. SafePump gives 50% of fees (0.5% of volume) permanently to creators. A creator whose token generates $100K in volume earns $500 in ETH — passively, forever, without doing anything after launch. This is the economic moat that brings the best creators to SafePump.
From Bonding Curve to Real DEX
When a token raises 8 ETH on its bonding curve, it "graduates" — automatically, atomically, in a single transaction. The bonding curve sends all raised ETH plus the remaining token supply to the SafePumpFactory, which creates a live Aerodrome pool and locks the LP tokens immediately. There is no intermediate state where funds are loose.
Trigger
Real ETH in BondingCurve reaches 8 ETH. The next buy that pushes it over triggers graduation automatically — no manual action required.
Atomic Hand-off
In the same transaction, the bonding curve hands all raised ETH and remaining tokens over to the SafePump factory contract. If anything fails, the whole transaction reverts — funds can never get stuck halfway between contracts.
Aerodrome Pool
Factory calls the Aerodrome Router (0xcF77a3Ba9A5CA399B7c97c74d54e5b1Beb874E43 on Base) to create a volatile token/WETH pair. The LP tokens are returned to the factory.
LP Lock
Factory sends LP tokens to the LiquidityLock contract, specifying the creator's chosen lock duration (30, 90, 180 days, or permanent). The lockByToken mapping is write-once — it cannot be overwritten.
Trading Continues
Bonding curve trading is disabled. The token now trades on Aerodrome at real market prices with the locked LP as the permanent price floor.
Why Aerodrome?
Aerodrome Finance is Base's largest DEX with over $2B TVL and the highest liquidity depth on the chain. Graduating to Aerodrome means your token immediately has access to real market makers, aggregator routing, and the deepest order books on Base. This is significantly better than graduating to a thin, freshly seeded pool on an obscure DEX.
Why SafePump Is Actually Safe
"Safe" isn't a brand promise — it's a set of verifiable on-chain constraints. Every claim below is checkable by reading the deployed contract on BaseScan.
1. Immutable Token Contracts
Every token launched on SafePump is a bare ERC-20. The contract has no mint() function, no pause() function, no blacklist(), no owner. The supply is fixed at construction — 1,000,000,000 tokens — and 100% goes to the bonding curve. The creator gets zero tokens at launch.
2. Contract-Enforced LP Lock
On graduation, LP tokens are sent to the LiquidityLock contract. The creator pre-selected the duration at token creation — 30, 90, 180 days, or permanent. The lock is enforced by code: the unlock timestamp is written once and can never be shortened.
30 Days
Standard
90 Days
Extended
180 Days
Long-term
Permanent
♾️ Locked
3. Pull-Based Fee Accounting
In plain English: when you trade, the creator's fee and the platform's fee don't move — they sit safely in the trading contract until the creator or platform decides to claim them. Stakers' fees do get sent out, but if the staking contract is ever down, those fees fall through to the treasury so a trade can never get stuck. The contract is also protected against the classic DeFi reentrancy attack, so no malicious callback can ever drain funds.
Behind the scenes the contract tracks each token's ETH in a dedicated mapping, never relying on the contract's raw balance — a known DeFi pitfall, because anyone can force-send ETH to a contract to corrupt naive accounting. SafePump avoids that trap entirely.
4. On-Chain Creator Reputation
Every wallet has a public on-chain track record: how many tokens launched, how many graduated, their graduation rate, total volume generated, and total creator fees earned. This record is immutable — nobody can delete or alter it.
New Creator
No prior launches. Proceed with caution.
Verified Creator
1+ successful graduations. Established track record.
Veteran Creator
Multiple graduations, high volume. Top-tier trust.
5. Tested to Production Standard
The SafePump contracts have been tested with 504 Foundry test cases across unit, integration, fuzz, invariant, and attack-simulation categories. 47 security findings were identified during development and resolved before deployment. All contracts are open-source and will be verified on BaseScan at mainnet launch — anyone can read every line.
504
Passing tests
47
Security findings resolved
100%
Open-source & verified
The $SAFE Platform Token
$SAFE is the native platform token for SafePump. It serves a single primary function: stake it to earn 0.25% of every trade across every token on the platform, paid in ETH. Not in new $SAFE tokens. Not in inflationary emissions. In real ETH from real trading activity.
Token Facts
$SAFE Utility
Staking Rewards
0.25% of all platform trading fees in ETH
Feed Visibility
Staked $SAFE boosts token ranking in the feed
Fee Discounts (Phase 1)
Reduced creation fees for $SAFE holders
Governance (Phase 3)
Vote on fee rates, graduation threshold, treasury
APY Model — How Staking Yields Work
Staking APY = (daily platform volume × 0.0025 × 365) ÷ (total $SAFE staked × $SAFE price). Early stakers benefit most: when fewer tokens are staked, each staker's share of the fee pool is proportionally larger. As the platform grows and fee volume increases, the absolute yield grows even if APY compresses as more tokens are staked.
† Assumes 30M $SAFE staked at $0.001/token. APY compresses as more tokens are staked.
This Yield Is Backed by Real Revenue
The staking yield doesn't come from token inflation. It comes from traders paying fees on bonding curve trades. If platform volume is $50K/day, stakers receive a real portion of that $50K. The yield is proportional to how many people use the platform — which is why every staker is also economically motivated to help the platform grow.
What Is the Conviction Pool?
The Conviction Pool is SafePump's genesis liquidity event. There's no countdown clock and no fixed window. The pool is simply OPEN: anyone can contribute ETH, and anyone can withdraw their full ETH at any time. It only seals when the community is convinced — specifically, when 15 ETH has been net-held for at least 14 days. After that, anyone can trigger a 72-hour final-commit window. When the window closes, three things happen simultaneously: all ETH is paired with 200 million $SAFE tokens to create permanent Aerodrome liquidity, the LP tokens are sent to a burn address (so nobody can ever pull the liquidity), and 50 million bonus $SAFE are distributed to contributors. No human intervention required. No back-doors.
Pool Parameters
The Price Formula
Price = Total ETH ÷ 200M
Every contributor pays the exact same price. No whitelist. No VCs with insider allocations. The final price is determined purely by total demand at the moment of seal.
Bonus Formula
bonusTokens = (yourFinalETH ÷ totalETH) × 50,000,000
Calculated against your final balance after any withdrawals.
Vesting — Designed Against Dumps
25% — Immediate
Delivered to your wallet at pool close. Liquid from day one. You can do anything with it.
75% — Auto-Staked for 90 Days
Deposited directly into the staking contract. Vests linearly over 90 days. While vesting, it earns staking yield — your locked tokens generate real ETH from day one. This turns the vesting period from a frustration into an income stream.
The Scenarios — What You Get at Each Raise Size
Notice: The Bonus VALUE is the Same Regardless of Raise Size
Whether the pool raises 10 ETH or 200 ETH, 1 ETH contributed earns roughly ~$625 in bonus $SAFE value at the LP price. A larger raise means fewer bonus tokens but a higher price per token — the dollar value of your bonus is approximately constant. The difference is upside potential after launch: a deeper pool means a higher starting FDV and more room for price appreciation.
Why No Cap? — The Counterintuitive Logic
Most token sales cap individual contributions to appear "fair." SafePump has no cap by design:
Deeper LP = better $SAFE
More ETH raised = deeper Aerodrome LP = lower slippage = more stable token. A $500K pool is better for everyone than a $25K pool.
Same price for everyone, always
The formula Price = ETH / 200M means early contributors don't pay less than late ones. Large contributors don't get better pricing. The pool closes and everyone learns the same price simultaneously.
Natural self-limiting
Very large single contributions move the price aggressively against themselves. The math penalizes over-concentration organically.
LP is your ETH
Large contributors' ETH becomes the LP. They're not extracting value — they're seeding it. Dumping tokens means selling against your own liquidity.
Contract-Level Trust Guarantees
Frequently Asked Questions
What if I change my mind?+
Withdraw your full ETH anytime while the pool is open. No questions, no penalties, no waiting period. Once the threshold is met and the 72-hour final-call window starts, withdrawals lock — at that point everyone is committed together.
What if it doesn't reach 15 ETH?+
There's a 90-day backstop. If the threshold isn't met by then, the pool flips into refund mode and every contributor can recover 100% of their ETH — nobody needs the team's permission to make this happen, the contract enforces it automatically. No fees, no losses. SafePump only launches if the community is convinced.
Why a 14-day convince phase?+
It prevents a single whale from forcing a launch in a day. The 15 ETH threshold has to be net-held for at least 14 days before the pool can close — so the launch reflects sustained conviction, not a one-block spike that withdraws an hour later.
What's the 72-hour final-call window?+
Once the 15 ETH threshold and the 14-day convince phase are both satisfied, a 72-hour window opens. New contributions are still welcome, but withdrawals lock — everyone commits together. After 72 hours the pool closes for good and all the ETH is paired with 200M $SAFE on Aerodrome to create permanent liquidity. The LP tokens are then burned, so the liquidity can never be pulled.
Full Token Distribution
The 1,000,000,000 $SAFE token supply is allocated across seven categories. Every lock duration is enforced by smart contract — no trust-us promises, no multisig that could be overridden. The dev fund requires milestone delivery before unlocking.
Dev Fund Milestones — Accountability by Design
The dev fund (200M $SAFE) cannot be dumped at launch. 100% unlocks only when specific milestones are reached — not on a time schedule alone. The team must ship.
What SafePump Does Not Protect Against
A platform worth trusting is honest about its limits. The contract-level guarantees are real and verifiable — but they don't make crypto risk disappear. Here is what SafePump explicitly does not protect against.
Market Risk
Token prices can go to zero. Memecoins are highly speculative. Past launches on other platforms are not a predictor of future SafePump performance. Never invest more than you can afford to lose entirely.
Platform Risk
SafePump is a new product. It may fail to attract creators or traders. If the platform gets no traction, $SAFE staking yield is low, and creator revenue is low. The contracts work regardless — but the business value depends on adoption.
Smart Contract Residual Risk
504 tests and 47 resolved findings reduce but do not eliminate bug risk. All deployed code is open-source. An undiscovered vulnerability could theoretically allow exploits not covered by the current test suite.
Creator Token Quality
SafePump prevents rug pulls at the contract level. It cannot prevent a token from simply having no community interest. The immutable design means a token with zero buyers stays at a very low price — funds are not at risk from the contract, but you can lose on speculative investments.
Regulatory Risk
Crypto regulation is evolving globally. Changes in regulatory posture toward DeFi, memecoins, or Base could impact the platform's operation. This is a systemic risk across all crypto platforms — not unique to SafePump.
Why We Publish This
A platform that only shows upside is a platform hiding something. SafePump's edge is aligned incentives and contract-enforced safety — not hiding the fact that crypto is risky. Informed participants make better decisions and build stronger communities. We want the people who join SafePump to understand what they're doing.
SafePump vs. The Alternatives
SafePump's primary competitive moat is the creator revenue share. In a market where the best creators generate the most volume, the platform that pays creators will attract the best creators. That volume advantage compounds: more creator revenue → creators promote their tokens → more traders → more platform fees → higher staking APY → more $SAFE demand → stronger treasury → more platform development. Every competitor that copies our model is conceding that ours is correct.
SafePump Does
- Pays creators 0.5% of their token's trading volume forever
- Enforces LP lock at the contract level — not as a promise
- Makes every token immutable at deployment
- Distributes 0.25% of platform volume to $SAFE stakers
- Maintains public on-chain reputation for every creator
- Publishes all contract source code and test results
- Discloses risks honestly, including what the contracts cannot protect against
SafePump Does NOT
- Guarantee that any specific token increases in value
- Protect against market downturns or low trading volume
- Have admin keys to override contract behavior
- Hold custody of user funds at any point
- Charge ongoing fees beyond the 1% per trade
- Require KYC or account creation to trade
- Control which tokens users create or trade
Next Steps
Read the Code. Ask Questions. Then Decide.
Everything described on this page is verifiable on BaseScan. The contracts are open-source. The tests are public. The math is provable. We built SafePump to earn trust, not demand it.