Docs

Every coin launched here has a tower. The program reads the coin's price through the round. If the tower stands, half of its pot goes to the holders who held through it.

The fee split

Every coin is launched on pump.fun with its own program account as the creator. Every lamport of creator fee is split by constants:

DEV: 35%
TOWER POT: 45%
BUYS + BURNS $TOWER: 10%
TREASURY: 10%

Launch fee 0.02 SOL, paid by the dev to the treasury.

Rounds

A round lasts 2 h. The next opens at once.
Anyone can post a price reading (the keeper does it all the time). Readings are clamped to within 20% of the median of the last 3 and only count once they are final.
Each new final reading runs a step on the median of the newest 3: the top rises with it; a step 1% under the last adds one sway; a step 1% over it resets sway to zero.
Fall line = top x (1 - max(20%, 40% - 3% x sway)). A median at or under it topples the tower for the rest of the round.

How a round ends

Stood: watched and never crossed the line. 50% of the pot moves into that round's payout (if it is at least 0.05 SOL; smaller pots carry).
Fell: pays nobody. The pot carries to the next round.
Unwatched: fewer than 8 readings that formed a median, or a gap over 15 min between them (round edges included). The round was not observed, so it pays nobody and the pot carries. Fail closed.

Holder payouts

The attestor lists holders; weight = the lowest balance a wallet held over the round. Holders under 0.05% of the supply, the dev and the pad's own wallets are left out.
The list is sealed on chain. The guardian recomputes it and may veto for 2 h.
Anyone finalizes it; the keeper pushes the SOL in batches of 16. One wallet gets at most 20% of a payout. Leftovers go back to the pot.

Droppers

When a tower falls, the program records the falling run on chain. The wallets that sold into it are named on the tower's page and left out of the next 2 payouts.

Trust points

Program TowUS1ocLPaVUPvhotW75PLDopj8qdxWkqXnYBqmKD9.
The attestor picks who is paid and the weights. It cannot change how much: the payout is fixed when the round ends, and the 20% cap applies at pay time.
The guardian, on a separate key and host, recomputes every sealed list, vetoes on mismatch and can revoke the attestor at once.
The admin can pause new launches, change future params after 24 h, rotate roles after 3 days and set the $TOWER mint once. There is no path from the admin to any pot.
Dropper bans and the minimum holding are attestor rules, not enforced on chain. The fall window itself is on chain.
A short dump can topple a tower; it costs the seller the round trip and his own share. Readings sandwiched by trades inside one bundle can move the tower; the keeper re-reads any reading more than 2% off the live price within seconds.
pump.fun's own admin powers and these programs are upgradeable and unaudited.