Buy approval
What exactly does the platform sign?
The server prepares the complete transaction: market, amount, minimum output, accounts, and recent blockhash. Your wallet signs first. The approval endpoint then verifies the wallet signature and checks that the entire transaction message matches what it prepared before adding the platform signature.
A signature for one prepared transaction cannot be reused to change the amount, recipient, or instructions. The endpoint does not co-sign arbitrary instructions supplied by a client.
Can another pool bypass approval?
While restricted, the token’s Token-2022 transfer hook accepts only a real in-progress transfer matching the source, destination, and amount temporarily authorized by the market program. The market writes that authorization for its swap, transfers the tokens, then clears it.
An ordinary wallet transfer or unrelated pool swap lacks that authorization and fails. This restriction applies to transfers, not just this website’s Buy button.
Can I sell from another app?
Yes, if the app integrates the Bundless market program. Its sell instruction needs the holder’s signature but never the platform signature. A compatible client can submit it directly to Solana without contacting the approval service.
This does not make every DEX or aggregator compatible. A generic token transfer or unrelated swap route is blocked while the hook is active.
Does approval stop every bot?
No. Approval is an enforceable signing requirement, not an automatic bot detector. The hosted platform currently uses an open approval policy, accepting requests from any wallet. The server also supports an allowlist policy; its current mode is exposed by the configuration endpoint.
The platform can decide whether to co-sign restricted buys. A refusal or service outage blocks those buys, while the on-chain sell path remains independent of approval.