Refundable fundraising for indie devs: How Keep’s Solana protocol protects backers

Indie developers and small teams often face a harsh reality when fundraising: either surrender equity to venture capitalists or launch a token sale where backers bear the full financial risk if the project fails. To address this dilemma, one builder created a third option—Keep, a refundable, on-chain fundraising platform on Solana that returns money to backers automatically when a project does not meet predefined success criteria.

This protocol eliminates the need for intermediaries to hold funds or make subjective refund decisions. Instead, it leverages smart contracts to handle the entire process transparently. Below is an in-depth look at how Keep’s refund mechanism works, the incentive structure behind it, and the engineering challenges the team overcame to make this possible.

How Keep’s fundraising model works

Keep’s fundraising process is designed to be simple yet flexible. A project creator sets a fixed fundraising target in USDC and opens a campaign for a set period. Backers contribute to the raise at a predetermined price. Once the target is met, the protocol allocates the project’s token supply as follows:

• 60% of tokens are distributed to backers at the fixed price.
• 30% are seeded into a liquidity pool on Raydium when the raise completes.
• 10% are reserved for the founder, subject to a vesting schedule of 180 days.

At the moment the target is reached, the protocol deposits half of the raised USDC into a Raydium Constant Product Market Maker (CPMM) pool along with the 30% token allocation. The remaining USDC is held as a reserve. The token then begins trading on the open market, and a success evaluation occurs at two checkpoints: day 7 and day 30.

Success vs. failure: what happens next

The protocol evaluates success using a 1-hour Time-Weighted Average Price (TWAP) compared to a predefined success gate, which defaults to 85% of the launch price. If the TWAP clears the gate by day 30, the raise is deemed a success.

In this scenario, the project receives its funding, and the platform fee is paid from the reserve. The liquidity pool is locked permanently, and backers no longer have a refund option. This outcome mirrors a standard market launch—where early supporters assume market risk, and the project graduates into normal trading conditions.

However, if the TWAP fails to meet the gate at either checkpoint, the protocol triggers the refund process. This is where Keep’s design truly differentiates itself from traditional launchpads.

Automatic refunds: no custody, no manual intervention

When a project fails, the protocol performs several automated actions:

• It unwinds the entire liquidity pool, dissolving it back into the protocol’s vaults. The returned project tokens are burned.
• A refund pool is created using the recovered USDC plus the untouched reserve, minus a time-decay haircut (5% for day-7 failures, 15% for day-30 failures).
• Backers claim refunds by burning their tokens and receiving a pro-rata share of the refund pool in USDC.

Critically, the protocol retains no custody over funds at any stage. The USDC that refunds backers is the same USDC that was returned from the dissolved pool. There are no delays, no manual review, and no reliance on a third party to process refunds.

Incentives that protect patient backers

One of the most innovative aspects of Keep’s design is its incentive structure, which discourages panic-selling and rewards long-term holding. When a failure occurs, refunds are distributed only to token holders who still possess their tokens at the time of the refund claim. Tokens that were sold or dumped during the holding period do not qualify for a share of the refund pool.

This creates a powerful dynamic: backers who sell early forfeit their right to a refund, while those who hold—even through a price decline—receive a larger share of the recovered funds. The mechanism effectively punishes dumping and rewards patience, ensuring that the refund pool is distributed fairly among committed supporters.

Why the 0.85 success gate and TWAP matter

The choice of a 1-hour TWAP and a success gate set at 85% of the launch price is deliberate and mathematically sound. The TWAP prevents manipulation by requiring sustained price action rather than a single flash-loan pump. Arbitrageurs would need to burn capital for an entire hour to fake the price, making manipulation economically unviable.

The 85% gate aligns with the 15% haircut applied in day-30 failures. At this price point, backers are indifferent between holding the token or taking a refund. Below this threshold, the refund becomes strictly more valuable, ensuring the protocol only declares success when the market genuinely supports the project.

Engineering challenges behind Keep’s protocol

Building a refundable, on-chain fundraising platform on Solana presented unique technical hurdles. One of the most significant was Solana’s 4 KB stack frame limit per instruction. The original design attempted to create a project, initialize vaults, mint tokens, and set up two vaults in a single instruction—far exceeding the stack limit and causing undefined behavior.

The team resolved this by splitting project creation into multiple steps. The create_project and init_vaults instructions are now separate, and the deposit process no longer initializes backer token accounts inline. Instead, the caller creates the account idempotently in the same transaction, ensuring the stack remains within bounds.

Another challenge was ensuring the emergency freeze and finalization processes did not trap refunds. The freeze function pauses payouts for successful projects but must never block failure refunds, as the finalize instruction is the only way to create the ClaimPool needed for refunds. The team implemented path-aware logic to prevent freezing from locking refunds during a hold window.

A new era for indie fundraising

Keep’s protocol represents a significant shift in how small teams and independent developers can raise capital. By removing intermediaries, eliminating the risk of custodial mismanagement, and introducing a fair refund mechanism, it offers a compelling alternative to the traditional VC route or speculative token sales.

As the platform evolves, its automated, trustless design could set a new standard for transparent and backer-friendly fundraising in the Web3 ecosystem.

The next wave of indie projects may no longer have to choose between giving away equity or risking their backers’ funds. Instead, they can rely on a system designed to reward patience and protect early supporters—no matter what the market decides.