Legal
Disclosures
Last updated 17 September 2026.
1How the fees are split
Every trade pays a fee to the token's registered fee recipient. On pons a repository's vault holds that role; on pump.fun the coin's creator is a key CO-FEE holds for the repository. A fixed share, set in the vault contract and readable on chain for pons, applied by the keeper and published with each payout for pump.fun, is booked to the repository; the rest funds CO-FEE. The share cannot be changed for a token once it is launched.
2How payouts happen
A balance is released when it crosses a payout step. If the repository publishes a crypto address in FUNDING.json, on GitHub or Hugging Face, the keeper sends it on its own, in ETH for pons tokens and in SOL for pump.fun coins. SOL owed to a repository that only publishes an Ethereum address is bridged to ETH through deBridge and sent to that address once the balance reaches $100; the bridge's fees come out of CO-FEE's share, not the repository's, and the order id is published with the payout. If a GitHub repository only lists a sponsor page in FUNDING.yml, the CO-FEE team pays that page by hand, and the transfer out of the vault is recorded on chain with the page and the receipt. If it has neither, the balance waits 14 days, then returns to the CO-FEE treasury. Each payout is published with the proof it relied on. CO-FEE can also hand a token's fee stream over permanently, after which the money never passes through CO-FEE again.
3Custody
Collected fees from pons sit in the repository's vault contract until they are released. Collected fees from pump.fun sit with the repository's CO-FEE creator key on Solana, which the CO-FEE team holds. The operator key is held by the CO-FEE team. A balance booked to a repository with an address or a sponsor page has no expiry. One with neither returns to the CO-FEE treasury after 14 days. It is released by verser, which only the operator key can call and which takes the destination address as an argument: that key can send a held balance to any address, including its own. Nothing on chain prevents it. What makes it contestable is that every payout is published with the proof it relied on.
4Who reads the destination, and its limit
No contract can read a file on GitHub or Hugging Face. The keeper reads FUNDING.json from either site, and FUNDING.yml from GitHub, always on the default branch: an address it pays itself, a sponsor page it hands to the team to pay by hand. The file and the destination are recorded with the payout. This is the weakest link in the chain and it is deliberately published, so that a maintainer or anyone else can contest a payout that should not have been made.
5Dependencies
CO-FEE depends on pump.fun, pons, flap and four.meme, where the tokens trade, on Solana and BNB Chain, and on Robinhood Chain, which is operated by a small set of parties and can censor transactions. Any of them may change, pause or shut down. CO-FEE controls none of them. On flap and four.meme, the token's tax is the only source of revenue for the repository and each launchpad keeps a share of it; both can change their rules through their upgradeable contracts, and four.meme co-signs every launch from its own servers.
6Smart contract risk
The vault factory and the vaults are software and may contain defects. They have not been audited. pons itself states that its own contracts are under review and not yet audited. CO-FEE has not audited pump.fun's program either.
7Which repositories are reachable today
A repository is payable once it publishes a crypto address in FUNDING.json, or a GitHub sponsor page in FUNDING.yml; its balance goes out when it crosses a step. Of sixty well-known GitHub repositories measured on 18 September 2026, nine had a crypto address and twenty-three had only a sponsor page; those with a sponsor page are paid there by the team. A repository with neither has its balance returned to the CO-FEE treasury after 14 days.
8Not financial advice
Nothing on this site is a recommendation to buy, sell or hold anything.
9Not affiliated
CO-FEE is an independent project. GitHub, Inc., Hugging Face, Inc., pump.fun, pons, flap, four.meme, Robinhood, BNB Chain and the Solana Foundation have not reviewed, approved or endorsed it.