Trust

Security

What we ask from your wallet, what we store, what runs where.

Thesis never asks you to sign a transaction. The only signature is the sign-in message, which cannot move funds.
The sign-in message follows the Sign-In With Solana format: it names this site's domain, carries a single-use nonce that expires in 5 minutes, and an expiration time. A signature can't be replayed or reused on another site.
The session is a random token in an HttpOnly, Secure, SameSite cookie. Only its SHA-256 hash is stored. Sign out revokes it server-side.

Every state-changing request checks its origin (cross-site requests are refused) and is rate-limited per IP in the database.
Strict Content-Security-Policy, no third-party scripts, the site can't be framed.
Theses are plain text; links and handles are refused.

The pot wallet's key lives only on our server; it holds at most about an hour of fees plus winnings waiting to be sent.
Every payout is written down before it is sent and settled from the chain afterwards (never paid twice).
No custom program: fees use Pump's own instructions, payouts are plain SOL transfers. Not audited.