Everything a careful holder should be able to verify — on-chain, in the code, and in our operations. Don't trust, verify.
Last updated: —
🛡️ Security & Audit — token safety, backend controls & full assessment →
$GHS is a standard Solana token (Token-2022) launched on Pump.fun — there is no custom smart contract that could move balances or drain funds. We checked the mint directly on-chain, and you can re-verify live in one click:
What to look for: mint authority renounced, freeze authority none, healthy holder distribution. These are read live from the chain by the tools above — we don't ask you to take our word for it.
Mint / CA: 3T4gdB2D4FbnPkh2vELdUrnRcZKAzB5z9QUpFechpump
The interactive Church connects a wallet only to read your public address and $GHS balance. Everything sensitive is enforced server-side, not in the browser:
Full policy: SECURITY.md · Disclosure: security.txt · Report privately via @GodHatesSolana.
The website and backend follow a non-custodial, signature-authenticated, least-privilege design:
| Control | Status |
|---|---|
| Privileged actions authenticated server-side (Ed25519 signature) | In place ✓ |
| Anti-replay: single-use nonce + ±120s freshness window | In place ✓ |
| RPC access via server-side proxy with method allow-list | In place ✓ |
| Database Row-Level Security; writes only via authenticated functions | In place ✓ |
| HTTP hardening: CSP, HSTS, nosniff, frame & referrer policy | In place ✓ |
| Responsible disclosure: security.txt (RFC 9116) + secret-scanning CI | In place ✓ |
| Community rewards: equal split + Merkle root on-chain (immutable program) | In place ✓ |
Full security assessment: /security/AUDIT.md · Security & Audit page.
Only these are official. Anything else is an impersonator.
| Purpose | Address |
|---|---|
| Token mint (CA) | 3T4gdB2D4FbnPkh2vELdUrnRcZKAzB5z9QUpFechpump |
| Creator-fee wallet (verified deployer) | FWvajde3ghsZiCYMYoDNZkqmeicG59s1S8jow6sC1RGT |
| Charity recipient — St. Jude (via Pump.fun) | DApXFR4nXGp2Es1SJDkVSRX34bNiVMqXK65iAr2CUYhG |
| Manna distributor (weekly community rewards) | B4UrgQdGzNziECTAQNJeNuGvsV1Q8n8atsfRXAbuWACR |
Wallets are kept separate on purpose: operational fees, donations and treasury never mix.
50% of every creator fee is routed to St. Jude Children's Research Hospital automatically, through Pump.fun's built-in Creator Fee Sharing. St. Jude is a native charity recipient on Pump.fun — the team never touches the charity half; it is sent on-chain by the protocol. Every distribution is public and verifiable below.
| Date | Amount | Solana tx (proof) |
|---|---|---|
| Aug 30, 2026 | ≈ 0.0115 SOL to St. Jude (total distribution 0.0231 SOL) | view tx ↗ St. Jude wallet ↗ |
$GHS is a satirical, community, entertainment token with no intrinsic value and no promise of return. Nothing here is financial advice — do your own research and verify on-chain using the links above. Not affiliated with Solana, any religion, or St. Jude.