MoonPop · Crash

How to play

1. Connect a Solana wallet (Phantom, Solflare, Backpack…).
2. Pick SOL or the MoonPop token and a stake tier.
3. Set your auto cash-out between 1.01x and 10x. Higher targets pay more but survive fewer rounds.
4. Sign the bet while the 30-second window is open. The bet is a single transfer to the treasury with a memo naming the round and your target. One bet per wallet per round.
5. When the window closes the operator reveals the seed and the curve flies. If it reaches your target before it crashes, you win stake × target. Otherwise the stake is lost.
6. Winnings are sent automatically from the treasury within seconds — nothing to claim. “My bets” links to every payout transaction.

Odds

The crash point is drawn from the standard crash distribution: the chance the curve reaches a multiplier m is roughly (1 − 1/33) / m. In practice: 2x hits about 48% of the time, 5x about 19%, 10x about 10%, and 1 in 33 rounds crashes instantly at 1.00x. That instant-crash slice is the house edge (~3%); everything else goes back to players over time.

Fairness

Every round is a commit-reveal cycle:

1. When the round starts the operator publishes commit = sha256(seed) and an initial entropy₀ derived from a recent Solana blockhash.
2. Every confirmed bet folds its transaction signature into the entropy: entropy = sha256(entropy ‖ signature). Signatures are produced by players’ wallets, so the final result cannot be known when the seed is chosen.
3. After betting closes the operator reveals the seed and computes crash = f(sha256(seed ‖ entropy)) using the bustabit formula on the top 52 bits: 100·2⁵² / (2⁵² − h), with h mod 33 = 0 forcing 1.00x.
4. If no reveal happens within 10 minutes the round is voided and every stake is refunded.

Trust assumption: there is no on-chain program — the treasury is a hot wallet operated by the team, and payouts are made by the operator. Commit-reveal proves the crash point was fixed before you bet; it does not replace trust in the operator to pay. The treasury address is public so anyone can audit every stake and payout on Solscan.

Prize pool & liquidity

Payouts come from the treasury’s SOL and token balance. The operator tracks every open bet’s maximum payout as reserved; a bet is rejected if the pool cannot cover it, and the UI shows the current cap next to the target input. Losing stakes stay in the pool.

A small SOL reserve is kept back for network fees. Unlike a smart contract there is no withdrawal lock — treat the published pool size as the house’s current bankroll.

MoonPop token

• Launched on pump.fun; the treasury wallet is the coin creator. The game detects the launch on its own: as soon as the treasury creates a coin on pump.fun, token bets switch on and the contract address appears in the header.
• Creator fees fund the prize pool. pump.fun pays the creator a share of every trade (bonding curve and PumpSwap). The operator sweeps that vault into the treasury every 30 minutes; the total appears in the stats tiles.
• 15% of every losing token stake is burned (a real SPL burn from the treasury — supply goes down). The remaining 85% stays in the pool. SOL stakes are never burned.
• No mint authority tricks: the game can only pay out what the treasury holds.

Addresses

Verify a round yourself

Enter a settled round id. Your browser fetches the seed, entropy₀ and the confirmed bet signatures, then recomputes sha256(seed) == commit, the folded entropy, and the crash point. Everything is client-side; compare the bet signatures against Solscan.