Checked before it runs
Every byte is verified against a fingerprint pinned on the stick before the system is allowed to start. One wrong byte and it refuses to boot. A tampered image cannot run — it can only fail loudly.
LOADING BAGS
Boot into
the pump
An immutable OS stored on chain. Boot a clean machine off a USB stick — Phantom already installed, pump.fun already open. Trade. Pull the stick. It forgets you existed.
Flash it to any USB stick. Boot. That's the whole install.
The situation
You sign transactions on a computer
that runs a cracked game from 2019
Forty browser extensions. A "free" mod menu. That one PDF from Discord. Your seed phrase is in there somewhere, and so is everybody else's malware.
Nobody is auditing your daily driver. You just hope. Hope is not a security model — it's the thing people say right before the post that starts "guys I got drained".
Immutable by construction
The OS lives on chain.
Nobody can edit it. Not even us.
Pump-OS is not a file on a server that could be swapped out one quiet Tuesday. The system is published on chain, where it is permanent and public, and your stick only carries a loader and a fingerprint.
Nothing can rot it
There is no install to decay, no update that quietly changes what you trust, and no writable copy sitting on a disk waiting to be infected. The same verified system, assembled fresh, every single boot.
Nothing lives past power off
Everything runs in memory. Nothing is written down and nothing carries over, so the machine you switch on tomorrow is the same clean system you switched on today.
A clean system from start to finish. Not "cleaned" — clean, because it is built from scratch and checked against the chain every time you switch the machine on.
How it works
Three steps, one of which is trading
STEP 01
Plug it in
Any x86-64 laptop. Yours, a friend's, the sad one in the corner. Boot from USB.
STEP 02
Watch it build
A fresh operating system assembles itself in front of you, then checks itself against a fingerprint before it's allowed to run.
STEP 03
Ape responsibly*
Phantom's installed, pump.fun is the homepage. *Responsibly is doing enormous work in that sentence.
Nothing touches the host
The machine's own disk is never written to. Not a file, not a log, not a swap page. Its hard drive might as well not be plugged in.
Clean every single boot
The OS isn't sitting on the stick collecting damage. It's rebuilt from scratch each time, verified, then run.
Your keys stay yours
Non-custodial, obviously. We never see a key, a seed, or a balance. There is nowhere for us to see it from.
An actual boot, filmed start to finish. Not a mockup.
The part nobody expects
It's faster than the computer you already own
Not a marketing sentence. There is simply less machine in the way, and you feel it on every click.
It runs in RAM
Once verified, the whole system is copied into memory and runs from there. Not off the stick, not off a disk. Nothing you click is waiting on storage — because there isn't any.
It's a small Linux
A few hundred megabytes, total. Your desktop OS is measured in tens of gigabytes and most of it is not for you.
Nothing runs behind you
No antivirus mid-scan. No search indexer. No update service picking a fight during a launch. No telemetry taking a core. Just the browser.
Being honest about it: the browser is the same Chromium you already use, so a heavy page is still a heavy page. The difference is that nothing else on the machine is competing with it — and pulling a stick out of a laptop is a faster reset than any antivirus has ever managed.
Install
Two minutes, one USB stick
There is no installer and nothing to uninstall. You write one image to a stick and boot from it. The machine you write it on is not modified.
WINDOWS
Rufus
Open Rufus, pick the stick, select pump-os.img, hit START.
Choose "Write in DD Image mode" if it asks.
MAC / LINUX
Balena Etcher
Open Etcher, select the image, select the stick, Flash. It handles the rest and verifies the write itself.
TERMINAL
dd
sudo dd if=pump-os.img of=/dev/sdX bs=4M status=progress conv=fsync
Check the letter twice. The wrong /dev/sdX overwrites the wrong disk, and dd will not ask you if you meant it.
Verify what you downloaded
This is an operating system you will hold keys in. Check that the file you got is the file we built — the hash is published at /download/SHA256SUMS.
# Windows (PowerShell)
Get-FileHash .\pump-os.img -Algorithm SHA256
# macOS / Linux
shasum -a 256 pump-os.imgIf it does not match, delete it and download again. A mismatch means the file is damaged or it is not ours — and there is no third option worth risking a wallet on.
Then reboot and press the boot-menu key — usually F12, sometimes F11, ESC or F9 depending on the machine — and pick the USB stick.
Two ways to run it
Free. The one that remembers you is on the way
Burner
$0
- Boots clean, forgets everything
- Nothing written to the stick or the host
- Import a wallet each session
- No account, no email, no KYC, no nothing
- This is the default and always will be
Saved
after bond
- Your wallet is still there next boot
- Wallet data only — no history, no cookies, no browsing
- Encrypted on the machine before it goes anywhere
- Because typing a seed phrase daily is how seeds leak
- Not live yet. Switches on once the token bonds — the fees pay for the infrastructure, so you don't
Questions you were going to ask anyway
FAQ
Are you pump.fun?
No. Enormous fans, zero affiliation. Pump-OS is an independent project, not built by, endorsed by, or connected to pump.fun in any way. We just set it as the homepage, which is a thing anyone is allowed to do with a browser.
Is there a token?
Not yet. When there is, it launches on pump.fun like everything else — no presale, no whitelist, no private round, no "DM for allocation". It will be announced here first, and anything claiming otherwise before then is someone stealing from you.
Saved mode switches on once it bonds. The fees cover the infrastructure that stores your wallet, which is why you're not being charged for it.
Will you ever ask for my seed phrase?
Never. Not on this site, not in the OS, not in a DM, not "for verification". Nobody legitimate ever will. If anything claiming to be us asks for a seed phrase, it is not us and you are being robbed.
Does this make me a better trader?
Absolutely not. It makes you a harder target. Your entries remain entirely your own problem and, statistically, they are a problem.
What if I lose the stick?
Then someone finds a USB stick. There are no keys on it — the burner keeps nothing, and a saved wallet is encrypted with a passphrase that also isn't on the stick. Losing it costs you a USB stick.
Do I need to be technical?
You need to be able to plug in a USB and press a key at startup. If you've ever reinstalled Windows to make a game run, you're wildly overqualified.
Is it actually secure or is that just the pitch?
The honest version: a clean, throwaway machine removes a whole category of risk — the malware already living on your daily driver. It does not make you immune to approving a malicious transaction, and nothing can. You can still rug yourself. Most people do.