trenchcoat
Free · no sign-up
Website report · 23 min ago

pump-bank.fun

“PumpBank | Solana”

Template-written 33 evidence items Code reader analysed 1 scripts
What this means for you

PumpBank talked to 3 outside services on a first visit.E8E7E6

  • Tech check: the site claims trading / swaps / bots, and its public page shows matching evidence.E32E30
  • We saw no known analytics or advertising services load on the first visit.E1
  • 1 cookie was set in your browser, all by the site itself.E9
  • Its code can ask your wallet to sign transactions. Read every wallet pop-up before approving.E30

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Evidence found

Trading / swaps / bots

“…6LHZG9MCzg1WKdawwqduVAXpNDUuV8M3uyq5ppump Copy Solscan DEX Screener New program. Know how it works. Read the docs…”E32

Transaction requests to your wallet: signTransactionE30

Calls its own backend /api/wallet/sessionE13
Wallet code signTransaction, signMessageE30E31
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What it is

  • The Internet Archive has never saved this site, so it is probably new.E33
  • The site describes itself as: “Borrow USDC against ten supported Solana tokens with PumpBank. No protocol interest or fees. Subject to live pricing, available liquidity an”E2
  • It's built with React (common tools for building web apps).E10
  • In your browser it can copy text to your clipboard and saves small bits of data in your browser.E11E12
  • It has sections such as /docs, /dashboard and /docs/:slug.E25E26
  • While loading, it called 1 endpoint on its own servers, such as /api/wallet/session.E13

Where your data goes

FontsDownload typefaces. 2
fonts.gstatic.comGoogle Fonts: fonts 3×E8
fonts.googleapis.comGoogle Fonts: fonts 1×E7
Not identifiedServices we don't have in our list yet. 1
i.replit.comnot identified 2×E6

Crypto and wallets

  • signTransaction: asks a wallet to sign transactions (often Solana wallets).E30
  • signMessage: asks a wallet to sign a message.E31

How key features work

What it can ask your wallet to sign

Its code can ask your wallet for signTransaction. Each of these opens a wallet pop-up you must approve; read it before you click.E30

signTransaction

Sign-in and accounts

Sign-in and account features show up in its code or traffic (/api/wallet/session).E13

/api/wallet/session

Loading its content

Its content loads from its own API while you browse (/api/wallet/session).E13

/api/wallet/session

Saving data on your device

It saves data in your browser (localStorage), so some things persist between visits.E12

local_storage

Cookies and storage

Names only. We never store the values.

CookieSet forKeptWhose
GAESAE9pump-bank.fun about 30 daysthe site

Pages and API calls

Pages it links to

/docs//dashboard/docs/docs/:slug

Endpoints

Called while loading (seen) or named in the code (code).

pump-bank.fun/api/wallet/sessionseenE13
/docscodeE14
/docs/:slugcodeE15
/dashboardcodeE16
/api/wallet/challengecodeE17
/api/wallet/verifycodeE18
/api/wallet/logoutcodeE19
/api/bank/dashboardcodeE20
/api/bank/rewardscodeE21
/api/bank/preparecodeE22
/api/bank/submitcodeE23
/api/bank/transaction-statuscodeE24

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: PumpBank | Solana
page title · https://pump-bank.fun/
E2
Page description: Borrow USDC against ten supported Solana tokens with PumpBank. No protocol interest or fees. Subject to live pricing, available liquidity and collater
page description · https://pump-bank.fun/
E3
Site name: PumpBank
page site_name · https://pump-bank.fun/
E4
Main heading: Your tokens. A new credit line.
page h1 · https://pump-bank.fun/
E5
15 request(s) to pump-bank.fun
types: 11 image, 1 document, 1 script
GET https://pump-bank.fun/ · image · 15 requests · network recording
E6
2 request(s) to i.replit.com
types: 1 script, 1 fetch
GET https://i.replit.com/script.js · script · 2 requests · network recording
E7
1 request(s) to fonts.googleapis.com
types: 1 stylesheet
GET https://fonts.googleapis.com/css2 · stylesheet · network recording
E8
3 request(s) to fonts.gstatic.com
types: 3 font
GET https://fonts.gstatic.com/s/bricolagegrotesque/v9/3y9K6as8bTXq_nANBjzKo3IeZx8z6up5BeSl9D4dj_x9PpZBMlGIInE.woff2 · font · 3 requests · network recording
E9
Cookie 'GAESA' set for pump-bank.fun
kept for about 30 days
cookie GAESA on pump-bank.fun · value not stored
E10
React detected by the code reader (react-runtime)
confidence: medium
pump-bank.fun/assets/index-B88MZY_o.js · “react-runtime” · the code reader
E11
Uses the browser ability: clipboard_write
can copy text to your clipboard
pump-bank.fun/assets/index-B88MZY_o.js @ 19:42956 · “clipboard.writeText(” · pattern scan
E12
Uses the browser ability: local_storage
saves small bits of data in your browser
pump-bank.fun/assets/index-B88MZY_o.js @ 61:20670 · “localStorage.setItem(” · pattern scan
E13
The page called /api/wallet/session on pump-bank.fun (GET)
GET https://pump-bank.fun/api/wallet/session · fetch · network recording
E14
Code reader found the endpoint /docs
how: property:path
s01-index-B88MZY_o.js · “/docs” · the code reader
E15
Code reader found the endpoint /docs/:slug
how: property:path
s01-index-B88MZY_o.js · “/docs/:slug” · the code reader
E16
Code reader found the endpoint /dashboard
how: property:path
s01-index-B88MZY_o.js · “/dashboard” · the code reader
E17
The code names the endpoint /api/wallet/challenge
pump-bank.fun/assets/index-B88MZY_o.js @ 11:4713 · “/api/wallet/challenge” · pattern scan
E18
The code names the endpoint /api/wallet/verify
pump-bank.fun/assets/index-B88MZY_o.js @ 11:5447 · “/api/wallet/verify” · pattern scan
E19
The code names the endpoint /api/wallet/logout
pump-bank.fun/assets/index-B88MZY_o.js @ 11:6469 · “/api/wallet/logout” · pattern scan
E20
The code names the endpoint /api/bank/dashboard
pump-bank.fun/assets/index-B88MZY_o.js @ 11:6539 · “/api/bank/dashboard” · pattern scan
E21
The code names the endpoint /api/bank/rewards
pump-bank.fun/assets/index-B88MZY_o.js @ 11:6830 · “/api/bank/rewards” · pattern scan
E22
The code names the endpoint /api/bank/prepare
pump-bank.fun/assets/index-B88MZY_o.js @ 11:7117 · “/api/bank/prepare” · pattern scan
E23
The code names the endpoint /api/bank/submit
pump-bank.fun/assets/index-B88MZY_o.js @ 11:7531 · “/api/bank/submit” · pattern scan
E24
The code names the endpoint /api/bank/transaction-status
pump-bank.fun/assets/index-B88MZY_o.js @ 11:7944 · “/api/bank/transaction-status” · pattern scan
E25
1 links to pages on the same site
page links · https://pump-bank.fun/ · /docs
E26
Code reader found the route /
pump-bank.fun/assets/index-B88MZY_o.js @ 67:29100 · “/” · the code reader
E27
Code reader found the route /dashboard
pump-bank.fun/assets/index-B88MZY_o.js @ 67:29134 · “/dashboard” · the code reader
E28
Code reader found the route /docs
pump-bank.fun/assets/index-B88MZY_o.js @ 67:29177 · “/docs” · the code reader
E29
Code reader found the route /docs/:slug
pump-bank.fun/assets/index-B88MZY_o.js @ 67:29215 · “/docs/:slug” · the code reader
E30
Wallet request in code: signTransaction
asks a wallet to sign transactions (often Solana wallets)
pump-bank.fun/assets/index-B88MZY_o.js @ 61:19464 · “signTransaction” · pattern scan
E31
Wallet request in code: signMessage
asks a wallet to sign a message
pump-bank.fun/assets/index-B88MZY_o.js @ 11:8601 · “signMessage” · pattern scan
E32
The site says: “…6LHZG9MCzg1WKdawwqduVAXpNDUuV8M3uyq5ppump Copy Solscan DEX Screener New program. Know how it works. Read the docs…”
page text · https://pump-bank.fun/ · …6LHZG9MCzg1WKdawwqduVAXpNDUuV8M3uyq5ppump Copy Solscan DEX Screener New program. Know how it works. Read the docs…
E33
The Internet Archive has no saved copy of pump-bank.fun
page web archive · https://web.archive.org/web/*/pump-bank.fun

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • The code reader hit its size budget on parts of 1 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id NcuaOUlo.