InspectorLab
$pumpanion
Closed23s
3flags1confirmed0refuted3untested0unverifiable

Case file № 7E14BB · opened Oct 5, 2026 · Solana

$pumpanion

“your trench agent”

26Zmky7RFLH82XS37XNMLntMJ2bXS6b3wxc4k2Qipump

  • Memecoin
  • Analytics
  • Trading
Price
$0.0000383
Market cap
$38.3K
Liquidity
$0
Vol 24h
$75.1K
Age
today

The short version

Pumpanion is a token associated with a proposed read-only Solana research extension; no required role for the token in using that extension is described (review, C1–C2). The website references the supplied mint, and on-chain data shows no mint or freeze authority (site/mint-referenced, facts). Product functionality and security assurances remain untested: installation limitations and Padre's verification gate made the usage checks inconclusiveL. The market snapshot reports zero liquidity, while the largest account holds 23.9% and belongs to the listed pump.fun pair address, rather than necessarily an individual whaleBD.

Red flags

3red flags

  1. Rule

    Its pools hold almost no liquidity.

    Liquidity $0

    market/no-liquidityB

  2. Rule

    One account holds a large share.

    Largest account holds 23.9%

    holders/whaleD

  3. Call

    The team is anonymous.

    No named team or verifiable team profiles appear in the reviewed material.

    claims/team-anonymousJ

Part two

The claims

4 claims lifted from their own site. 1 confirmed, 3 untested.

C101/04product

They say

Four public-data checks. No guesswork, no hype — just a faster way to see what is actually sitting in front of you.

pumpanion.fun

We checked

The attempted test was inconclusive because the extension could not be installed and Padre access was blocked; no displayed checks could be compared with on-chain data.

Rests on

To settle it Install the extension, supply a Helius key, open a coin on Padre, and inspect the displayed checks against public Solana data.

Skeptic: plausible These checks can be built from public Solana transaction, wallet, and token metadata. The resulting wallet-clustering, age, and name/image matches are indicators rather than definitive evidence of coordination or cloning, so their accuracy depends on implementation and data coverage.

We used it: inconclusive The Padre verification gate and unavailable ZIP installation blocked running Pumpanion. I could not enter a Helius key or inspect creator launch history, commonly funded/coordinated wallets and holdings, newly created top-holder wallets, or matching ticker/name/image findings against public data. This failure to access the product is not evidence against the claim.

C202/04product

They say

Your own free Helius key. Nothing else.

pumpanion.fun

We checked

The attempted test could not reach the extension workflow, and no Helius key was provided, leaving compatibility and key requirements unsettled.

Rests on

To settle it Install in desktop Chromium, enter a Helius key, and test it on a Solana coin page on Padre.

Skeptic: plausible A browser extension using a user-supplied API key to query Solana data and run on a specified trading interface is technically ordinary. The site does not independently establish the stated Padre compatibility or the Helius free-tier limits.

We used it: inconclusive Could not test the stated free Helius-key requirement or confirm that the extension operates on Solana coin pages in Chromium. No Helius key was provided. Padre's access check prevented reaching the intended coin page.

C303/04security

They say

Pumpanion never signs, sends, or touches transactions. It never asks for a private key or seed phrase. Your Helius API key stays in your browser

pumpanion.fun

We checked

No Pumpanion code ran or was inspected, so key storage and transaction handling could not be verified. The observed wallet signature was Padre's sign-in message, not a Pumpanion action.

Rests on

To settle it Inspect extension permissions and network behavior, and verify whether keys leave the browser or transactions are signed or sent.

Skeptic: doubtful A read-only extension that does not interact with wallets or transactions is feasible, but the reviewed site does not provide the extension source, audit, or other independent basis to verify that the key stays local or that the extension never signs or sends transactions. Manual ZIP installation makes users reliant on the distributed code matching these assurances.

We used it: inconclusive Could not verify where Pumpanion stores or transmits a Helius API key, whether it asks for secrets, or whether it signs/sends transactions. The only wallet request was Padre's non-transactional sign-in message; it showed no SOL/token changes, and the balance remained 5 SOL with no tokens. No seed phrase or private key was provided.

C404/04other

They say

CA: 26Zmky7RFLH82XS37XNMLntMJ2bXS6b3wxc4k2Qipump

pumpanion.fun

We checked

The independent site/mint-referenced rule establishes that the supplied address appears on the project website, despite the usage tester's inconclusive website check.

Rests on

Skeptic: plausible The site displays the same token address provided in the project context; this confirms the site's statement of its associated address, not any token rights or value.

We used it: inconclusive The direct on-chain lookup confirms this address is a Token-2022 mint named “your trench agent (pumpanion),” with no mint or freeze authority. That establishes the address's on-chain identity, but I could not inspect the project website or extension interface to verify that it displays this address as claimed.

Part three

Exhibits

Everything the verdicts rest on, as we found it. Files are hashed and kept.

A

Exhibit A

Token metadata

checked Oct 5, 2026reused from a recent check

Name
your trench agent
Symbol
pumpanion
Source
token-2022
Update authority
none
Mutable
no
Description
none
Links
twitter x.comwebsite pumpanion.fun
B

Exhibit B

Market

checked Oct 5, 2026reused from a recent check

Price
$0.0000383
Market cap
$38.3K
Liquidity
$0
Vol 24h
$75.1K
PairQuoteLiquidityAge
pumpfunSOL—today
C

Exhibit C

Mint account

checked Oct 5, 2026reused from a recent check

Mint authority
revoked
Freeze authority
revoked
Permanent delegate
revoked
Close authority
revoked
Program
spl-token-2022
Supply
1,000,000,000
Decimals
6
Transfer fee
none
Transfer hook
none
Extensions
  • metadataPointer
  • tokenMetadata
Capabilities
nothing extra
E

Exhibit E

Deployer

checked Oct 5, 2026reused from a recent check

Launched
Oct 5, 2026 · today ago
Programs
  • pump.fun
  • associated-token-account
  • system
  • spl-token-2022
  • pfeeUxB6jkeY1Hxd7CsFCAjcbHA9rWtchMGdZ6VojVZ
G

Exhibit G

X account

checked Oct 5, 2026reused from a recent check

Name
Pumpanion
Created
Oct 4, 2026 · 1d ago
Based in
Greece
Renames
0
Last rename
—
H

Exhibit H

Website

checked Oct 5, 2026reused from a recent check

Found via
metadata
Shows this mint
yes
J

Exhibit J

Site review

checked Oct 5, 2026reused from a recent checkself-reported · can’t settle a claim

Pumpanion describes itself as a browser extension that reads Solana coin addresses and presents public-data signals to help traders assess coins. The site says it works on Padre in desktop Chromium, requires a user-provided Helius API key, and does not sign or send transactions.

  • positiveThe site provides concrete setup instructions and explicitly describes the product as read-only, with no wallet access.
  • concernThe extension is offered as a ZIP for manual installation and depends on a user-supplied Helius key; the site does not provide documentation, audit details, or team information in the reviewed content.
  • neutralThe site states it is not affiliated with Padre, Helius, or pump.fun.
K

Exhibit K

Skeptic

checked Oct 5, 2026reused from a recent check

Pumpanion is presented as a read-only browser extension that displays public Solana token signals while users browse coins on Padre; it does not describe token-holder rewards or investment returns. The tool’s use of public data and an API provider is technically credible, but its security claims and operating/funding model are not independently established by the reviewed material.

Looks like pump.fun · affiliation denied · confirmed by brand: no

The name “Pumpanion” uses “Pump” and the project is presented in the Solana memecoin trading context, which evokes pump.fun. The project itself explicitly says it is not affiliated.

pump.fun

Looks like Padre · affiliation denied · confirmed by brand: no

The site names Padre as the platform where the extension works and directs users to open a coin there; this is a product-compatibility reference, not an explicit partnership claim. The project itself says it is not affiliated.

trade.padre.gg

Looks like Helius · affiliation denied · confirmed by brand: no

The site requires users to provide a Helius API key and links to Helius; this references the provider rather than claiming shared branding. The project itself says it is not affiliated.

helius.dev
L

Exhibit L

Product test

checked Oct 5, 2026reused from a recent check

What our wallet sawWhat our wallet sawWhat our wallet sawWhat our wallet saw

Field notes

I tried the provided ZIP download and the Padre trading/token pages. The ZIP download did not expose the archive for installation, and the trade pages redirected to sign-in. I clicked a Padre sign-in option that produced a Phantom signMessage request; inspected its contents as a terms/nonce sign-in message with no transaction, and approved it to attempt access. Padre then displayed “Quick security check” and “Verification is required to sign in,” blocking further access; canceling the sign-in left the wallet unchanged at 5 SOL and no tokens. Direct chrome://extensions inspection was unavailable. Solscan returned HTTP 403, so I verified the exact mint address with the direct Solana chain lookup. I also reviewed recent on-chain token history and successful transactions, but these did not provide any Pumpanion displayed-check outputs. The gate and extension-install limitation meant I could not execute Pumpanion's requested coin checks or test its Helius/network behavior. No Pumpanion transaction was presented or signed.

  • C1 inconclusiveThe Padre verification gate and unavailable ZIP installation blocked running Pumpanion. I could not enter a Helius key or inspect creator launch history, commonly funded/coordinated wallets and holdings, newly created top-holder wallets, or matching ticker/name/image findings against public data. This failure to access the product is not evidence against the claim.
  • C2 inconclusiveCould not test the stated free Helius-key requirement or confirm that the extension operates on Solana coin pages in Chromium. No Helius key was provided. Padre's access check prevented reaching the intended coin page.
  • C3 inconclusiveCould not verify where Pumpanion stores or transmits a Helius API key, whether it asks for secrets, or whether it signs/sends transactions. The only wallet request was Padre's non-transactional sign-in message; it showed no SOL/token changes, and the balance remained 5 SOL with no tokens. No seed phrase or private key was provided.
  • C4 inconclusiveThe direct on-chain lookup confirms this address is a Token-2022 mint named “your trench agent (pumpanion),” with no mint or freeze authority. That establishes the address's on-chain identity, but I could not inspect the project website or extension interface to verify that it displays this address as claimed.
End of file.01a10d19-60d5-77c0-a204-a7c4c47e14bb