trenchcoat
Free · no sign-up
Website report · 1 h ago

nullary.xyz

“NULLARY · Launch blind: the Mystery launchpad on Solana”

Template-written 26 evidence items Code reader analysed 41 scripts
What this means for you

NULLARY only talked to its own servers while we watched.E1

  • An AI agent used the site and saw 1 of 2 claimed features working.E25E26E25E26
  • Own chain / L2 / ZK: The app's Vault page says SOL is shielded in the Privacy Cash pool. To see the browser-made zero-knowledge proof, I would have had to create a vault and fund it with SOL, so I couldn't observe a proof being made. The site describes itself as running on Solana, not on its own chain.E25E26
  • A working app / platform: I opened the Trade page at app.nullary.xyz/market. It loaded live data from the site's market APIs: a SOL price of $94.28, one sealed coin with market cap and transaction count, two revealed coins (ANON, NCAT) and an 'Updated 14s ago' indicator. Launching, buying and the vault need a wallet or SOL, so I didn't try them.E25E26
  • Also noticed, Try the lock demo on homepage: I typed 'hello' and clicked 'Seal it'. The page called /api/blind/beacon and /api/blind/list, and the form changed to 'Try to open it now' and 'Start over' buttons. Clicking 'Try to open it now' made another beacon call, but the page text I got back didn't show any result message.E22E23E24
  • Tech check: the site claims a working app / platform, and its public page shows matching evidence.E19E8E9
  • Tech check: the site mentions own chain / l2 / zk, but we found nothing behind it in what its public page loads.E18
  • We saw no known analytics or advertising services load on the first visit.E1

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Nothing found on the public page

Own chain / L2 / ZK

“…llet. The Privacy Cash pool Private Shields the SOL. A zero-knowledge proof made in your browser breaks the link back to you…”E18

No matching code, calls or services in what loaded for us.

Evidence found

A working app / platform

“…t works Earn $nuLL Privacy Try the lock Live Docs Open the app NULLARY on X Mystery launches on Solana Live Launch bl…”E19

Calls to its own backend: /api/blind/config, /api/blind/listE8E9

Calls its own backend /api/blind/config, /api/blind/listE8E9
Wallet code none seen
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

The real tech may live elsewhere. This page links to: app.nullary.xyz/launch · check the app

What the AI agent tried

An AI agent (claude-opus-5-5) used the site in our sandbox for 6 steps and saw 1 of 2 claimed features working. It can't connect a wallet, pay, sign or log in, so those features count as "couldn't test". What it reports is what it observed, not a verdict.

Couldn't test

Own chain / L2 / ZK

The app's Vault page says SOL is shielded in the Privacy Cash pool. To see the browser-made zero-knowledge proof, I would have had to create a vault and fund it with SOL, so I couldn't observe a proof being made. The site describes itself as running on Solana, not on its own chain.E25E26

Seen working

A working app / platform

I opened the Trade page at app.nullary.xyz/market. It loaded live data from the site's market APIs: a SOL price of $94.28, one sealed coin with market cap and transaction count, two revealed coins (ANON, NCAT) and an 'Updated 14s ago' indicator. Launching, buying and the vault need a wallet or SOL, so I didn't try them.E25E26

Also noticed

Things the agent saw along the way that aren't among the site's claims. Not counted above.

Noticed

Try the lock demo on homepage

I typed 'hello' and clicked 'Seal it'. The page called /api/blind/beacon and /api/blind/list, and the form changed to 'Try to open it now' and 'Start over' buttons. Clicking 'Try to open it now' made another beacon call, but the page text I got back didn't show any result message.E22E23E24

What it is

  • The Internet Archive first saved this site on 2026-10-18 (17 days ago).E20
  • The site describes itself as: “NULLARY is the Mystery launchpad on Solana: coins go live as ??? and trade at once, sealed until your timer, and launch from a private vault”E2
  • It's built with Next.js and React (common tools for building web apps).E6E7
  • It has sections such as /protocol, /launch, /market and /creators.E17
  • While loading, it called 2 endpoints on its own servers, such as /api/blind/config and /api/blind/list.E8E9

Where your data goes

On a first visit the page only talked to its own servers (nullary.xyz).

How key features work

Loading its content

Its content loads from its own API while you browse (/api/blind/config and /api/blind/list).E8E9

/api/blind/config/api/blind/list

Pages and API calls

Pages it links to

//protocol/launch/market/creators

Endpoints

Called while loading (seen) or named in the code (code).

nullary.xyz/api/blind/configseenE8
nullary.xyz/api/blind/listseenE9
/api/blind/beaconcodeE10
/api/blind/noticecodeE11
/api/blind/statuscodeE12
/api/market/candlescodeE13
/api/market/holderscodeE14
/api/market/poolcodeE15
/api/market/tradescodeE16

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: NULLARY · Launch blind: the Mystery launchpad on Solana
page title · https://nullary.xyz/
E2
Page description: NULLARY is the Mystery launchpad on Solana: coins go live as ??? and trade at once, sealed until your timer, and launch from a private vault.
page description · https://nullary.xyz/
E3
Site name: NULLARY
page site_name · https://nullary.xyz/
E4
Main heading: Launch blind.
page h1 · https://nullary.xyz/
E5
30 request(s) to nullary.xyz
types: 11 script, 7 fetch, 5 stylesheet
GET https://nullary.xyz/ · script · 30 requests · network recording
E6
Next.js detected by the code reader (next-runtime)
confidence: high
nullary.xyz/_next/static/chunks/turbopack-2c3mg3r-05n1w.js · “next-runtime” · the code reader
E7
React detected by the code reader (react-runtime)
confidence: medium
nullary.xyz/_next/static/chunks/34goyxc2anvlg.js · “react-runtime” · the code reader
E8
The page called /api/blind/config on nullary.xyz (GET)
GET https://nullary.xyz/api/blind/config · fetch · network recording
E9
The page called /api/blind/list on nullary.xyz (GET)
GET https://nullary.xyz/api/blind/list · fetch · network recording
E10
The code names the endpoint /api/blind/beacon
nullary.xyz/_next/static/chunks/0q-zefogz2-m7.js @ 1:8749 · “/api/blind/beacon” · pattern scan
E11
The code names the endpoint /api/blind/notice
nullary.xyz/_next/static/chunks/2_tkwxb3_pk2_.js @ 1:1594 · “/api/blind/notice” · pattern scan
E12
The code names the endpoint /api/blind/status
nullary.xyz/_next/static/chunks/2_tkwxb3_pk2_.js @ 1:13948 · “/api/blind/status” · pattern scan
E13
The code names the endpoint /api/market/candles
nullary.xyz/_next/static/chunks/2_tkwxb3_pk2_.js @ 1:24690 · “/api/market/candles” · pattern scan
E14
The code names the endpoint /api/market/holders
nullary.xyz/_next/static/chunks/2_tkwxb3_pk2_.js @ 1:25396 · “/api/market/holders” · pattern scan
E15
The code names the endpoint /api/market/pool
nullary.xyz/_next/static/chunks/2_tkwxb3_pk2_.js @ 1:25479 · “/api/market/pool” · pattern scan
E16
The code names the endpoint /api/market/trades
nullary.xyz/_next/static/chunks/2_tkwxb3_pk2_.js @ 1:25819 · “/api/market/trades” · pattern scan
E17
5 links to pages on the same site
page links · https://nullary.xyz/ · /, /protocol, /launch, /market, /creators
E18
The site says: “…llet. The Privacy Cash pool Private Shields the SOL. A zero-knowledge proof made in your browser breaks the link back to you…”
page text · https://nullary.xyz/ · …llet. The Privacy Cash pool Private Shields the SOL. A zero-knowledge proof made in your browser breaks the link back to you…
E19
The site says: “…t works Earn $nuLL Privacy Try the lock Live Docs Open the app NULLARY on X Mystery launches on Solana Live Launch bl…”
page text · https://nullary.xyz/ · …t works Earn $nuLL Privacy Try the lock Live Docs Open the app NULLARY on X Mystery launches on Solana Live Launch bl…
E20
The Internet Archive first saved nullary.xyz on 2026-10-18 and has snapshots from 2 different days
page web archive · https://web.archive.org/web/20261018131936/nullary.xyz
E21
Agent step 1: view
AI agent step 1 · view on /
E22
Agent step 2: type A prediction, a ticker, anything ← “hello”
AI agent step 2 · type on /
E23
Agent step 3: click Seal it
AI agent step 3 · click on / · page called GET nullary.xyz/api/blind/beacon, GET nullary.xyz/api/blind/list
E24
Agent step 4: click Try to open it now
AI agent step 4 · click on / · page called GET nullary.xyz/api/blind/beacon
E25
Agent step 5: go /market
AI agent step 5 · go on /market · page called GET app.nullary.xyz/api/market/trenches, GET app.nullary.xyz/api/blind/config, GET app.nullary.xyz/api/blind/list, GET app.nullary.xyz/api/pump/status, GET app.nullary.xyz/api/vault/status, GET app.nullary.xyz/launch, GET app.nullary.xyz/launched, GET app.nullary.xyz/vault, GET app.nullary.xyz/proto
E26
Agent step 6: click Vault
AI agent step 6 · click on /vault · page called GET app.nullary.xyz/vault

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • The code reader hit its size budget on parts of 13 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id 1XlJKuhp.