Security

Found a way to take funds, bypass a payment or burn, or harm people using this site? Tell us before you tell anyone else.

How to report

Email team@pixelframe.tech with what you found, how to reproduce it and what it could do. A transaction signature or a short script helps most. English or German is fine.

Please test on a local validator or devnet where you can, don't touch funds or data that aren't yours, and give us a reasonable chance to fix the issue before you publish it.

In scope

• The on-chain program (pixel) and its buyback vault. Addresses are on the burns page.
• This website and its same-origin RPC proxy.
• The API, indexer and buyback keeper behind this site.

Out of scope

• Wallets, RPC providers, Pyth, pump.fun, PumpSwap and other third parties: report those to their teams.
• Ads that break the rules. Those are a moderation matter, not a vulnerability, unless the image or link attacks visitors.
• Denial of service, spam and social engineering.

See the burns page for the program, vault, treasury and mint addresses.