Overview
A trench terminal that leaves fewer tracks.
Undertow is a Solana trading terminal that runs entirely in your browser. It does what fast terminals do: a live board of new pump.fun launches, one-click buys, token pages with live trades and holders, wallet tracking, limit orders and PnL. On top of that it gives you two things the others don't: Dive mode, which buys from fresh wallets funded through NEAR Intents, and Exposure, which shows what wallet trackers can already link to you.
Non-custodial
You sign every trade, in your wallet or in wallets derived from your own signature. Undertow never holds funds.
Best-price routing
Every swap is routed by Jupiter across Solana's DEXs and pump.fun curves.
Indirect funding
Dive wallets are paid by NEAR's bridge, not by you, so there's no direct transfer from your wallet to them.
Static files
The app is plain HTML and JavaScript that runs in your browser, so you can read the code your browser runs.
Wallets
One signature, every wallet.
You connect a normal Solana wallet (Phantom, Solflare, Backpack and others). That is your main wallet. When you first use the instant wallet or Dive mode, the terminal asks it to sign one fixed message, which starts with Undertow dive wallets v1. The signature never leaves your browser and is never stored. From it, the terminal derives:
SHA-256(signature ‖ path): undertow/instant/0 for the instant wallet, undertow/dive/0, /1, /2… for dive wallets.| Wallet | Signs with | Use it for |
|---|---|---|
| Main | Your wallet app, with a popup per trade | Holding funds, funding the others, careful trades |
| Instant | A key in this tab's memory, no popups | ⚡ buys and presets when you trade from it, plus autopilot and snipes. Fund it directly or through NEAR Intents. |
| Dive | A fresh key per dive buy | Buys with no direct transfer from your main wallet |
Recovery
Solana signatures are deterministic: the same wallet signing the same message always produces the same signature. Sign again on any device and you get the same instant and dive wallets back. Nothing secret needs to be backed up beyond your main wallet.
The terminal stores a short fingerprint of the signature (8 bytes of its hash, which reveals nothing). If your wallet ever signs differently, for example a different wallet app that signs messages another way, the terminal stops instead of opening a different set of wallets.
Every derived wallet has an Export key button, so you can import it into any Solana wallet.
Only sign the Undertow message on Undertow. Anyone holding that signature can rebuild your instant and dive wallets; the message itself warns that it opens your private trading wallets. Some hardware-wallet setups can't sign messages; with those, instant and Dive mode are unavailable and you trade from the main wallet.
Trading
From click to confirmed.
- The terminal asks Jupiter for a quote: your amount, slippage from the active preset, routes limited so the transaction has room for the fee.
- It fetches Jupiter's swap instructions, not a finished transaction, and assembles the transaction itself: compute budget, the fee transfer, the swap, cleanup.
- You sign. Main-wallet trades open a popup; instant and dive trades sign in the tab.
- It sends the transaction, rebroadcasts it every 2 seconds until it lands or its blockhash expires, and reports the result.
Presets
Three presets set slippage, priority and Jito. Switch with 1 2 3 on a token page; edit them in Settings.
| Preset | Slippage | Priority fee | Jito tip | MEV-protect |
|---|---|---|---|---|
| P1 | 3% | High, up to 0.001 SOL | none | off |
| P2 | 10% | Very high, up to 0.003 SOL | 0.0005 SOL | off |
| P3 | 20% | Very high, up to 0.01 SOL | 0.001 SOL | on |
Jito and MEV-protect
With a tip set, the transaction pays it to one of Jito's tip accounts and is also sent to Jito's block engine, which helps it land in busy blocks. With MEV-protect on, the terminal simulates the transaction first and sends it only to Jito, never to a public RPC node, which keeps it away from sandwich bots watching the network.
Fees
0.5%, in SOL, in the open.
Every terminal trade pays a 0.5% fee in SOL, inside the same transaction as the swap. You see it in the trade panel and in your wallet's preview before you sign.
- Buys: 0.5% of the SOL you spend, transferred before the swap.
- Sells: 0.5% of the minimum SOL the route guarantees, transferred after the swap, so a fill better than the minimum is all yours.
- Dive buys: the fee is paid by your main wallet when it funds the route. Dive wallets never pay Undertow, so no fee transfer marks them.
- Not charged: dive exits, deposits to and withdrawals from your instant wallet, and limit orders (Jupiter fills those).
Network costs are separate and go to Solana validators: the base fee, the priority fee from your preset, and a Jito tip if set. Jupiter's routing is free.
This terminal fee is separate from the token's trading fee on Float, which funds holder rewards.
Dive mode · NEAR Intents
The bridge pays your dive wallet. You never do.
Trackers link wallets by following SOL: whoever funds a wallet is assumed to own it. Dive mode removes that direct link by never sending SOL from your wallet to the dive wallet. Instead it uses NEAR Intents, a cross-chain settlement network where independent solvers fill requests. Through its 1Click API, you pay into a one-time deposit address, and NEAR's Solana bridge pays the dive wallet out of its own wallets.
- The terminal derives the next dive wallet from your signature and checks the chain that it has never been used, so a cleared browser or a new device never reuses one.
- It asks 1Click for a SOL → SOL route to the dive wallet, with Confidential Intents on: the sender, amount and route stay off NEAR's public record. If 1Click won't route it confidentially, it uses a standard intent, and the approval step names which kind of route it is before you sign.
- It checks the quote before sending anything: the recipient must be the dive wallet, refunds must go to your wallet, the amount and assets must match, and the deposit address must not be one of yours. Otherwise it refuses.
- You sign one transaction: SOL to the deposit address, plus the 0.5% fee.
- NEAR Intents settles and the bridge pays the dive wallet, usually within a minute or two. The terminal follows the route's status.
- The dive wallet buys on Jupiter, keeping 0.01 SOL for network fees and token-account rent.
Exiting
What it costs
The Undertow fee, Solana network fees, and NEAR Intents' route fee. Without a partner key, 1Click charges about 0.1–0.2% per route; with a key held by the relay that fee goes away. Dive buys are capped at 5 SOL each.
If something goes wrong
A route that can't complete is refunded by NEAR Intents to the wallet that sent it. Dive wallets can always be rebuilt by signing again, and Portfolio scans your dive wallets on-chain and lists every one with funds, with buttons to exit or export its key, so nothing is stranded. If you've made many dive wallets, Scan further looks deeper.
What Dive mode does not do. Nothing makes a wallet untraceable. An observer who sees 1.000 SOL leave your wallet and 0.998 SOL reach a fresh wallet a minute later can guess. Vary amounts, don't buy the instant the dive wallet is funded, and don't send funds between dive wallets and wallets you've used publicly. Dive mode makes tracing harder and less certain; it doesn't make it impossible. Undertow doesn't run a mixer and never touches the funds in transit.
Why NEAR Intents
It settles quickly, needs no wallet or account on NEAR, pays out from bridge-owned addresses used by everyone, and offers Confidential Intents for keeping the request itself off the public record. Monero would need a swap in and out through third-party exchanges, slower and with more counterparties.
Pulse data
Where the board comes from.
Pulse is three live columns: New pairs, Final stretch (tokens past 60% of their bonding curve, adjustable) and Migrated. Each token is merged from several sources by its mint address.
- Live trades on a token page come from the chain: pump.fun trades are decoded straight from program logs, other DEX trades from the transaction's balance changes.
- Holders come from the token's largest accounts, with the bonding curve and the dev wallet labelled, plus mint and freeze authority.
- Charts are DexScreener's. Images and socials come from the token's own metadata. If a token arrives without it (a migration, a pasted address), the terminal reads its metadata account on-chain. Images are tried through several IPFS gateways, and a pixel avatar drawn from the address shows until one loads. Every card links straight to the token's X, Telegram, website, pump.fun and DexScreener pages.
- Hover a column to pause it while you read. Filters by market cap, name and socials apply live.
- Spam filter (on by default) hides tokens that match common rug and spam patterns: Jupiter's suspicious flag; mint or freeze authority still on; a major ticker (SOL, USDC, JUP, TRUMP, FLOAT, PRIVACY…) on the wrong mint; a ticker copied from a bigger token in the feed; a dev with 10+ launches and at most one graduation; a creator with 3+ launches in the last hour; a mass-launch tool's signature in the description; a dev holding over 25%; the top 10 holding over 60% once there are 20+ holders; and names with links or hidden characters. It works from data the terminal already has, so it catches patterns, not every scam. Click the chip to show what it hid, each card marked with the reason.
Orders
Orders that run without you, and orders that run with you.
Migration sniper
Tap 🎯 on a Pulse card to arm a snipe. When PumpPortal reports that token's migration, or the on-chain curve shows it complete, the instant wallet buys right away, and can set take-profit and stop-loss rules for the new position (Settings → After a snipe). Like autopilot, it needs the tab open.
The 🤖 chip in the top bar counts armed rules and snipes. Portfolio → Orders lists all of them.
Tracker & PnL
Follow wallets. Keep score.
Tracker checks any wallets you add every 20 seconds and lists their new swaps, read from the chain. ⚡ on a row buys the same token with your quick-buy amount, from whichever wallet you trade from (main or instant).
Portfolio shows each wallet's positions with average cost and realized and unrealized PnL, priced in SOL. It counts trades made in the terminal; Import on-chain history reads the wallet's last 100 transactions so trades made elsewhere count too. Dive buys are logged under the main wallet that paid for them. Everything is stored in this browser only.
Exposure
What trackers already know.
Exposure reads any wallet's public history and scores how linkable it is, 0 to 100, the way commercial trackers score it. It's read-only: nothing to connect or sign. Your browser sends its queries through Undertow's relay to the RPC node, or straight to your own node if you set one under RPC node.
It reads up to 100 recent transactions, the earliest ones it can reach, and one hop out to the funder and the most-linked wallets. It also flags address-poisoning attempts. Scores: Low under 25, Moderate 25–49, High 50–74, Exposed 75 and up.
Infrastructure
Keys stay off the page.
Anything in a static site is public, so API keys can't live in it. Instead every browser sends its requests to Undertow's relay, a small server that holds the keys and forwards them, so all visitors share paid capacity instead of free, rate-limited endpoints:
Rather not go through the relay for reads? Paste your own RPC URL (Helius, Triton, QuickNode) in the terminal's Settings, or under RPC node on Exposure, and your browser reads the chain from that node directly.
Holder rewards · Float
Holder rewards through Float
Undertow's token launches on Float, a launchpad that pairs every coin with another token and pays holders in it. Undertow's pair is Privacy Index (PRIVACY), a basket token issued by Diversifi. Holders of the Undertow token are paid in PRIVACY out of the token's trading fees. Float's own rules are in the Float docs.
Contract address: coming soon.
The launch
Float launches coins on Raydium LaunchLab: a fixed supply of 1 billion, no mint or freeze authority, a starting market cap of about $20k. At about $150k the coin graduates into a Raydium pool that is locked with Burn & Earn.
Where the trading fee goes
Every buy and sell of the token pays a creator-set fee of 1%, 2% or 2.5% (Undertow's rate: coming soon, with the contract address). After Raydium's cut, the Float program splits it:
| Share | Goes to |
|---|---|
| 15% | Holders, pro rata to what they hold, paid in PRIVACY |
| 5% | The creator |
| 35% | $FLOAT buyback |
| 35% | A USDC airdrop to top traders |
| 10% | Float's treasury |
How payouts work
- Every few minutes Float's payout bot,
6LYfrwR67XS8zJPxD2PTEHKocr3d2MBgkZX8umGTfw6E, sends each holder their share in PRIVACY. - Your wallet's PRIVACY token account is created once you're owed at least $2. Smaller amounts roll over to later payouts until they reach it.
- Selling before a payout forfeits what you were owed: it goes back to the other holders.
Paid by Float, not by Undertow. Rewards come from Float's program and payout bot. Undertow doesn't pay them, top them up or set their size. How much holders get depends on how much the token trades, so there is no fixed rate.
Your payouts in the terminal
The terminal's Rewards page reads your payouts from the chain: it lists every transaction where Float's payout bot ran Float's program to pay holders (PayHolders) or a creator fee, and your PRIVACY balance went up. The amount shown is exactly that rise, priced with Jupiter. The bot's other transactions, which swap collected fees through pools, never count. Each payout links to its transaction on Solscan, and you can check any wallet without connecting it.
Addresses
| What | Address | Explorer |
|---|---|---|
| Float program | 3KguFi7YYzLgttG46fRism16CfcuNCkDh6U7td9JTqxX | Solscan |
| Float payout bot | 6LYfrwR67XS8zJPxD2PTEHKocr3d2MBgkZX8umGTfw6E | Solscan |
| PRIVACY mintToken-2022 · 6 decimals · 0.5% transfer fee | DGuudmnJZ6yeFJTQEM1FgFeWB7dz2mo8sqjRqDWDfhLn | Solscan |
| Undertow token | Contract address: coming soon | – |
Know this about Float. Float has said its program hasn't had an outside audit and its upgrade key is held by the team's deployer until a multisig takes over.
Security
What lives where.
| Thing | Where it is |
|---|---|
| Main wallet keys | Your wallet app. Never seen by the terminal. |
| Undertow signature, instant and dive keys | This tab's memory only. Gone when you close the tab or disconnect; rebuilt by signing again. |
| Settings, watchlist, tracked wallets, trade log, rules | This browser's local storage, under keys starting undertow-. Never uploaded. |
| Dive wallet list (addresses, route status) | This browser's local storage, under your main wallet's address. It links the two, so clear site data on a shared computer. The terminal can rebuild it from the chain. |
| Limit orders | On-chain, in Jupiter's Trigger program, under your wallet. |
| Dive routes in transit | NEAR Intents, refundable to the sender. |
- Check the transaction preview in your wallet. An Undertow buy shows the swap, one fee transfer to the Undertow treasury, and a Jito tip if your preset sets one. Nothing else.
- Keep the instant wallet to trading money. Its key sits in an open browser tab.
- Bookmark the site. Never sign the Undertow message anywhere else.
Shortcuts
Keyboard.
| Key | Does |
|---|---|
| / | Search tokens by name, ticker or mint |
| P | Back to Pulse |
| B / S | Buy / sell on a token page, focus the amount |
| 1 2 3 | Switch preset on a token page |
| ↑ ↓ Enter Esc | Move through search results, open, close |
FAQ
Questions.
Can Undertow take my funds?
No. It has no server holding funds or wallet keys, and its relay only forwards requests: it never signs anything. Every transaction is built in your browser and signed by you or by a key derived from your own signature. Dive funds in transit are held by NEAR Intents and refunded to you if a route fails.
Why did my trade fail?
Usually the price moved past your slippage, or the transaction didn't land before it expired. Nothing but the network fee is spent when a swap fails. Try a faster preset or more slippage.
Is Dive mode anonymous?
No tool makes you anonymous. Dive mode removes the direct on-chain transfer between your wallet and the wallet that buys. Timing and amounts can still be matched by someone watching closely, so vary them.
Where are my instant and dive wallets if I clear my browser?
Their keys were never stored, so nothing is lost. Connect the same main wallet, sign the same message, and they come back with their balances. Clearing the browser also deletes the local list linking your dive wallets to your main wallet; the terminal finds them again on-chain.
Do limit orders pay the 0.5% fee?
Not today. Jupiter fills limit orders itself; terminal market trades and dive buys pay the fee.
Who pays holder rewards?
Float's program and payout bot, in PRIVACY, from the token's trading fees. Undertow doesn't pay them, and their size depends on trading volume. See Holder rewards.
Why is a sniper or stop loss tied to the open tab?
Because it signs from the instant wallet, whose key only exists in your tab. Nothing on a server can sign for you. For orders that must fill while you're away, use a limit order.