Questions

Can you take my money?

No. The vault is a program-derived address - it has no private key. The program pays only the wallet named in an attestation, and that wallet is bound on your first claim. The attestation carries no amount, so even a fully compromised Signer cannot skim a payout or redirect one that has already been bound.

What a compromised Signer could do is authorise a claim for a handle that has never claimed. That is the honest limit of the design, and it is why claiming early matters.

Why not pay me in Telegram Stars?

Because it would require someone to take custody of your SOL, sell it, and buy Stars. That someone would be us - which destroys the one property that makes this defensible. Right now nobody can move your money, including us.

Stars are also Telegram's currency for digital goods inside Telegram. Routing crypto revenue out through them is what their terms restrict, bot balances cash out via Fragment with a hold, and there is no API to credit an arbitrary user's balance from a bot's.

The real want behind the question - let me choose how I get paid - is better answered by choosing the destination and the asset without custody. Swapping to USDC inside the same non-custodial transaction is on the roadmap.

Do I need a wallet before someone can launch for me?

No. The vault exists whether or not you have ever heard of this. You only need a wallet at the moment you withdraw - and it can be an empty one.

What if I lose the wallet I claimed to?

Rotation exists: the current wallet signs, you log in again, and after 48 hours the destination changes. If you have lost access to the bound wallet entirely, the delay does not help you - the current wallet must sign. Claim to something you will keep.

Can two people claim the same handle?

No. The Signer checks that the Telegram account's username matches the handle being claimed, and the program binds the Telegram ID on first claim.

What if someone changes their Telegram username?

The vault follows the username, not the account. If you change your username, a new vault address applies to the new one. Funds already in the old vault stay bound to the Telegram ID that claimed them.

Why is my withdrawal "not worth it"?

A withdrawal costs 10,000 lamports in network fees - double the 5,000 base fee, because the ed25519 signature the proof carries is charged too. If the vault holds less than that, withdrawing makes you poorer, so we do not offer a button that does it. Nothing expires; come back when it is worth more.

Why is it on devnet?

Because it has not been audited. The program holds other people's money and has been read by one person. Self-review already found two real bugs that passed the entire test suite first. Mainnet should follow a review, not precede it.

Is this affiliated with pump.fun or Telegram?

No. It uses pump.fun's public programs and Telegram's public login widget, the same way any application does.

Someone launched a token using my handle without asking

Anyone can point a token's fees at any handle, the same way anyone can mention you. The dashboard states plainly that it is not an endorsement. You can withdraw without endorsing the token, or ignore it entirely - leaving it alone costs you nothing.