Home › Documentation › FAQ & limitations
FAQ & limitations
Can my launch still be sniped?
The dev buy cannot be front-run: it executes inside the create transaction, so at the instant the token exists your dev buy has already happened.
Two things can still be sniped, and both have been observed on real launches.
Same-slot buys behind you. The create goes out over the public RPC path, so bots can see it before it is included and buy in the same slot, immediately after your dev buy. On one measured launch a sniper took 3.4% of supply this way, paying only a higher priority fee.
Your own buy wallets landing late. They are grouped by a Jito bundle, and a bundle is an auction you can lose. When it is not selected the buys fall back to individual public-RPC sends, one per slot. Measured: of three launches carrying a slot measurement, one was fully atomic and two spread their buys over 8 and 10 slots — while using only 10 wallets, inside the 13-wallet bundle capacity. So this is not merely a "too many wallets" problem.
Every launch records atomic and slotSpread measured from the chain, so you can see what actually happened instead of assuming. Keeping the wallet count at or below 13 is necessary for tight grouping but not sufficient to guarantee it.
Does PumpRug guarantee a profit?
No, and nothing that touches a market can. It automates mechanics — creating, buying, exiting, sweeping. It has no view on whether anyone else will buy your token, and most tokens launched on pump.fun end at nothing. Fees and slippage are certain; returns are not.
What does a launch cost even if nothing sells?
Transaction fees, Jito tips, mint and metadata rent (~0.02 SOL), and a token account per wallet (~0.002 SOL each, mostly reclaimable by closing them). Sweeping returns the remaining balances but never the fees already spent.
A launch failed. Where is my SOL?
Still in that launch's wallets. Use Recover, which sweeps every wallet across all your launches that still holds a balance. If a sell failed, the tokens are still in the wallets too — selling is allowed again from failed.
Why am I seeing RPC rate-limit errors?
Public Solana RPC endpoints are aggressively limited and reject some of the heavier calls outright. For real launches use a paid endpoint. PumpRug rotates through fallback endpoints and backs off on 429s, but it cannot conjure capacity that the endpoint will not give.
What can an admin see?
Usernames, emails, sign-in method, join and last-login dates, and whether an account is disabled. An admin can disable an account. There is no endpoint exposing another user's keys, launches, balances or funds, and no impersonation.
I forgot my password.
There is no email-based reset. If Google is linked to your account, sign in with Google and set a new password from your profile. Otherwise a server administrator has to intervene directly.