How the crew works

A crew is one account of the Syndicate Pad program. It has 3 to 5 seats. Each seat has a job (ART, LORE, RAIDS, CODE, CHART, OPS or a custom label), a work weight, a member wallet and that member's seed SOL.

When every seat is funded and every member has signed the exact same table, anyone can launch. The program creates the coin on pump.fun and buys it with the whole seed pool in the same transaction. The tokens it buys, the team bag, stay in the program's escrow and vest per seat.

• No member can sell a locked token alone. An early sale needs every other active member's signature, a public notice, and stays under a hard daily cap.
• A member who stops working can be kicked by everyone else. What he vested stays his; the rest of his bag is burned, never shared out.
• If the crew does not launch in time, every seed goes back to the wallet that put it in.

1. formThe lead picks the name, ticker and picture (uploaded to IPFS), the charter text, 3 to 5 seats (job, work weight, a named wallet or an open seat) and his own seed. The work weights must add up to exactly 100%. The lead always holds seat 1.
2. joinA member takes a seat with a seed between the minimum and the maximum. A named seat is only for that wallet; an open seat is first come. One wallet holds one seat per crew.
3. acceptEvery funded member signs the sha256 of the whole table (see What you sign). The site recomputes the hash from what it shows and refuses to sign if it differs from the chain.
4. launchAnyone, once every seat is funded and signed, before the window ends.

Before launch a member can leave (whole seed back; the lead cannot leave, he disbands). The lead can evict a funded member (whole seed back to that wallet at once, the seat reopens) and edit the table (funded seats keep their index and wallet). Each of these wipes every signature.

The table hash is sha256 over, in this order: the tag syndicate:table:v1, the crew account, the name, ticker and metadata uri (each with a u32 length), the charter hash, every copied parameter (borsh), the lead and his seat index, the seat count, and for each seat its job, label, wallet, work weight and seed.

So a signature covers the exact people, jobs, weights, seeds and rules. Any join, leave, eviction or edit changes the hash and wipes every signature; the launch needs all of them on the current hash. The charter text lives in the coin's metadata; the site shows charter verified when its sha256 equals the signed charter hash.

One transaction, alone (only compute budget or a tip next to it, so nobody can append a buy behind the crew's): launch fee to the treasury, pump.fun create_v2 with the crew's Fees account as the coin's creator and the Vault as payer, then one buy with everything else. The seed pool is capped so a full crew stays under the amount that would complete the curve.

Seed the curve did not take (the unused rent margin) is booked back to the seats by seed and paid to each member (launch leftover, anyone pushes it).

Per seat: nothing before the cliff, then linear over the vesting period. When the curve completes (the coin graduates to PumpSwap) a fixed part of every seat unlocks at once.

unlocked = migration part + (bag − migration part) × min(now − launch − cliff, vesting) / vesting

Unlocked tokens only ever go to the seat's own wallet; anyone can push them there (claim_vested, the pusher pays the token account rent). Tokens sold early count against the unlock.

1. proposeThe seat's member asks to sell an amount of his escrowed tokens. One open request per seat. The amount must fit the daily cap.
2. signEvery other active member signs that request (the signature binds its number and amount). Any of them can reject it; the member can cancel it.
3. noticeA public notice runs from the request. Everyone watching the crew sees it on the signing sheet.
4. executeOnly the seat's member, with his own minimum SOL out. The program sells from the escrow (pump curve, or the coin's canonical PumpSwap pool after graduation) and sends the SOL to him.

Hard cap: for the whole crew, all seats together, at most the daily-cap share of the supply in any rolling 24 hours, and at most 4 sales per seat in 24 hours. Signatures never lift it. Before the cliff, this is the only way out, and it is slow on purpose.

A member proposes a kick; every other active member except the target signs; after the kick delay, anyone executes it. The kicked seat keeps what it had vested at that moment (claimable, frozen there). Every other token of the seat is burned; nobody else receives a single token. From then on its creator-fee share goes to the chest. A crew never drops below 2 active members. Before the cliff nothing has vested, so a kick burns the whole bag: then it needs at least 4 active members, all others signing.

For a lost key. A member can move his own seat at any time. The others can propose it only for a seat whose wallet signed nothing for the idle period (30 days by default); any signed action (a vote, a post, a sale, the I'm here key, a veto) restarts that clock. Every other active member signs; after the delay anyone moves the seat. The seat's current wallet can veto at any time, so the others can never take a live member's seat.

At the switch the program first pays the old wallet everything already earned: booked creator fees, the unpaid launch leftover and every unlocked token. Only the future (still-locked tokens, future fees, votes) moves to the new wallet. An open early sale of that seat is closed.

The coin's pump.fun creator is the crew's Fees account. Anyone can collect the creator fees into it and book them: the crew share is split by bag size, the chest share goes to the chest, the treasury share to the pad. A kicked seat's part moves to the chest. Each seat's fees go only to that seat's wallet.

The chest only ever buys the coin and burns what it buys. A buyback spends a fixed part of the chest, at most once per interval, at most 1% of the reserves it buys against, and its minimum out comes from the median of the program's own 7 freshest price records (at most 30 minutes old, one per minute, recorded by anyone).

• Every number on the site is read from the program's accounts at the moment you look; there is no database. The site's worker only proxies RPC calls, caches IPFS pictures and renders share cards.
• The coin's creator on pump.fun is the crew's Fees account ["fees", syndicate], not a person. The team bag sits in the Vault's token account; its balance equals the sum of every seat's escrow.
• The table hash: recompute it from the account fields in the order of What you sign and compare it to table_hash; the site does this before every signature.
• Each crew's page links its account in the explorer; its transactions carry the program's events (Formed, Joined, Accepted, Launched, SaleProposed, Kicked, ...), which the work log reads.

• Sybil crews. Three wallets may be one person. Nothing on chain tells. Look at who the members are before you buy.
• Collusion. All members together can still sell early at the cap after the notice: up to the daily cap for the whole crew (1% of the supply by default), every day.
• Self-completed curve. A crew with a big seed pool can buy the rest of its own curve and unlock the graduation share of every bag at once. The site shows how much of the supply the team holds.
• Released tokens are free tokens. Vesting and signatures protect only what is still in the escrow.
• Kick timing. A kicked member keeps what vested up to the kick; the others choose when to kick.
• Wallet change while away. After the idle period, if every other member signs and the member does not veto for the whole delay, the seat's future moves. What it had earned is paid to the old wallet first.
• Griefing a forming crew. A stranger can take an open seat and never sign. The lead evicts him (full refund) and names the seat.
• Same-slot bundles. Launch, price records and buybacks refuse neighbours in their transaction, but a bundle can place a buy right after the launch.
• pump.fun. Its admin powers and program upgrades are outside this program. This program is upgradeable and unaudited.