Yes, as a platform. It is run by Baton Corporation Ltd. and Bracket Company Ltd., published terms and fee schedules, and took $175.0M in fees in October 2026 (DefiLlama). Most coins launched on it are not legit investments.

Can pump.fun steal my money?

pump.fun says it can't access or freeze funds in its app wallets, which are self-custodial and provided by Privy (App Store listing; Terms §30.1). The main ways people lose money are bad coins, scams and leaked keys.

Has pump.fun been hacked?

Yes, twice in ways that mattered. In May 2024 a former employee took about $1.9M from bonding-curve contracts. In February 2025 its X account was hijacked to promote a fake PUMP token.

What percentage of pump.fun coins are rugs?

Solidus Labs put it at 98.6% with rug-pull or pump-and-dump traits (May 2025). A separate measure: 0.84% of coins launched in April 2026 graduated to PumpSwap.

Is pump.fun Safe? The Risks, Ranked (2026)

The risks, ranked

#	Risk	How likely	What it costs	What helps
1	The coin goes to zero	Very likely	Most or all of what you put in	Small amounts; check the coin first
2	A scam that imitates pump.fun	Common	Your whole wallet	Official links only; never share keys
3	Losing wallet access	Occasional	Everything in the wallet	Export and store your key safely
4	Fees and slippage	Every trade	About 1.7% each way in the app, more on thin coins	Know the cost
5	Platform or legal events	Rare but real	Access, features, rewards	Don’t keep more on it than you can afford to lose

1. Most coins lose most of their value

Anyone can create a pump.fun coin with no platform fee, and about 25,000 appear each day (763,350 in April 2026). Very few last:

0.84% of the 763,350 coins launched in April 2026 graduated from the bonding curve to a PumpSwap pool (pumpfundata, from on-chain data).
Solidus Labs’ May 2025 report found 98.6% of pump.fun coins showed rug-pull or pump-and-dump traits, and that of more than 7 million coins only about 97,000 kept $1,000 or more of liquidity.

pump.fun’s own terms say it “do[es] not recommend that any User-Generated Digital Asset be bought”. The app listing says memecoins “do not possess any intrinsic value”. Treat any coin purchase as money you expect to lose. How to spot a rug covers the checks that catch the worst ones.

2. Scams that look like pump.fun

The people who lose whole wallets usually lose them to imitations, not to pump.fun: fake “PUMP airdrop” sites, fake support accounts in Telegram or X messages, and cloned coins with the same name and ticker. Even official channels have been hijacked: pump.fun’s X account in February 2025, and rival launchpad bonk.fun’s domain in March 2026. pump.fun scams has the full list. The one rule that stops most of them: pump.fun “will never ask you for your private keys or seed phrase” (Terms §12.2(c)).

3. Custody: who holds your coins

pump.fun’s app wallets are self-custodial: the App Store listing says pump.fun “cannot access or freeze your funds”, and the terms (§30.1) say the wallet is provided by Privy.io, which isn’t part of pump.fun. That cuts both ways:

pump.fun can’t take your coins, and a pump.fun outage doesn’t lock them.
Nobody can reverse a mistake. A transfer to the wrong address, or a signature on a drainer site, is final (Terms §9.6).
If you lose access to your email and haven’t exported your key, recovery depends on Privy’s process.

See email sign-in vs your own wallet.

4. Fees add up fast

Buying a bonding-curve coin in the pump.fun app costs 1.25% in curve fees plus the 0.45% Platform Fee (0.40% with any referral code): 1.70% on the way in and again on the way out, before network fees and slippage (Fees page, 17 October 2026). Trading terminals often charge about 1%. On a small, thin coin, slippage can be larger than all the fees. The fee calculator shows the full round trip.

5. Platform history and legal risk

May 2024: a former employee used privileged access to take about 12,300 SOL (about $1.9M) from bonding-curve contracts. pump.fun redeployed the contracts.
February 2025: pump.fun’s X account was hijacked to push a fake PUMP token.
United Kingdom: blocked since December 2024 after an FCA warning.
US class action (Aguilar v. Baton Corp., S.D.N.Y.): on 31 August 2026 the court dismissed the securities claims and the claims against the Solana defendants, but RICO claims continue against Baton Corp. and three founders, who filed their answer on 15 October 2026. See the court case.

pump.fun can also change fees, end programs or restrict accounts with little notice (Terms §14, §15). Rewards such as Holder Rewards “may never be paid”, in the terms’ own words.

The bottom line

pump.fun is a large, functioning platform: $175.0M in fees in October 2026 alone (DefiLlama). It is safe to use only in the narrow sense that the software generally does what it says. The coins are a different matter: assume any one of them can go to zero within hours, and only use money you can lose. Start safely walks through the whole path.

Is pump.fun safe?