InspectorLab

Checked

your trench agent

$pumpanionSolana

Checkedin 23s · Oct 5, 17:25 UTC

Pumpanion is a token associated with a proposed read-only Solana research extension; no required role for the token in using that extension is described (review, C1–C2). The website references the supplied mint, and on-chain data shows no mint or freeze authority (site/mint-referenced, facts). Product functionality and security assurances remain untested: installation limitations and Padre's verification gate made the usage checks inconclusive. The market snapshot reports zero liquidity, while the largest account holds 23.9% and belongs to the listed pump.fun pair address, rather than necessarily an individual whale.

pumpanion.fun
Four public-data checks. No guesswork, no hype — just a faster way to see what is actually sitting in front of you.

Pumpanion says its extension checks creator launch history, coordinated or commonly funded wallets and their holdings, newly created top-holder wallets, and earlier coins with matching ticker, name, or image.

UntestedNot tested this run. Checked against Wallet test

The attempted test was inconclusive because the extension could not be installed and Padre access was blocked; no displayed checks could be compared with on-chain data.

To settle it: Install the extension, supply a Helius key, open a coin on Padre, and inspect the displayed checks against public Solana data.

Wallet test, inconclusive: The Padre verification gate and unavailable ZIP installation blocked running Pumpanion. I could not enter a Helius key or inspect creator launch history, commonly funded/coordinated wallets and holdings, newly created top-holder wallets, or matching ticker/name/image findings against public data. This failure to access the product is not evidence against the claim.

Skeptic: plausible

These checks can be built from public Solana transaction, wallet, and token metadata. The resulting wallet-clustering, age, and name/image matches are indicators rather than definitive evidence of coordination or cloning, so their accuracy depends on implementation and data coverage.

pumpanion.fun
Your own free Helius key. Nothing else.

The site says Pumpanion requires the user’s own free Helius API key and operates on Solana coins on Padre in desktop Chromium browsers.

UntestedNot tested this run. Checked against Wallet test

The attempted test could not reach the extension workflow, and no Helius key was provided, leaving compatibility and key requirements unsettled.

To settle it: Install in desktop Chromium, enter a Helius key, and test it on a Solana coin page on Padre.

Wallet test, inconclusive: Could not test the stated free Helius-key requirement or confirm that the extension operates on Solana coin pages in Chromium. No Helius key was provided. Padre's access check prevented reaching the intended coin page.

Skeptic: plausible

A browser extension using a user-supplied API key to query Solana data and run on a specified trading interface is technically ordinary. The site does not independently establish the stated Padre compatibility or the Helius free-tier limits.

pumpanion.fun
Pumpanion never signs, sends, or touches transactions. It never asks for a private key or seed phrase. Your Helius API key stays in your browser

The project says it never signs, sends, or touches transactions, does not request a private key or seed phrase, and keeps the Helius API key in the browser.

UntestedNot tested this run. Checked against Wallet test, Site capture

No Pumpanion code ran or was inspected, so key storage and transaction handling could not be verified. The observed wallet signature was Padre's sign-in message, not a Pumpanion action.

To settle it: Inspect extension permissions and network behavior, and verify whether keys leave the browser or transactions are signed or sent.

Wallet test, inconclusive: Could not verify where Pumpanion stores or transmits a Helius API key, whether it asks for secrets, or whether it signs/sends transactions. The only wallet request was Padre's non-transactional sign-in message; it showed no SOL/token changes, and the balance remained 5 SOL with no tokens. No seed phrase or private key was provided.

Skeptic: doubtful

A read-only extension that does not interact with wallets or transactions is feasible, but the reviewed site does not provide the extension source, audit, or other independent basis to verify that the key stays local or that the extension never signs or sends transactions. Manual ZIP installation makes users reliant on the distributed code matching these assurances.

Receipts
pumpanion.fun
CA: 26Zmky7RFLH82XS37XNMLntMJ2bXS6b3wxc4k2Qipump

The site displays the token address 26Zmky7RFLH82XS37XNMLntMJ2bXS6b3wxc4k2Qipump.

HeldHolds up against Site/mint-referenced, Website

The independent site/mint-referenced rule establishes that the supplied address appears on the project website, despite the usage tester's inconclusive website check.

Wallet test, inconclusive: The direct on-chain lookup confirms this address is a Token-2022 mint named “your trench agent (pumpanion),” with no mint or freeze authority. That establishes the address's on-chain identity, but I could not inspect the project website or extension interface to verify that it displays this address as claimed.

Skeptic: plausible

The site displays the same token address provided in the project context; this confirms the site's statement of its associated address, not any token rights or value.

Receipts
  • 82732c

InspectorLab lists and checks; it doesn't rule. Nothing here is financial advice. Every verdict cites the stored files it rests on.