Noah Hearle We’re Open!: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noah Hearle We’re Open! opening-hours allows Reflected XSS.This issue affects We’re Open!: from n/a through 2.6.
You get about 11.1M $FIXWERE, after pump.fun’s fee. An estimate.
Demo coins live on a pretend chain. Real coins open on pump.fun, where your wallet signs the trade.
Patch We Re: a demo coin filed under CVE-2026-112869, on a pretend chain.
80% to the launcher20% to the Patch Day treasury
Creator fees. Locked at launch on pump.fun. Nobody can change it later, including us.