trenchcoat
Free · no sign-up
Website report · 43 min ago

heisto.xyz

“Heisto — AI red-teaming · Public preview”

Template-written 38 evidence items Code reader analysed 1 scripts
What this means for you

Heisto talked to 3 outside services on a first visit.E6E8E7

  • An AI agent used the site and saw 0 of 1 claimed features working.E35E36
  • Wallet connection: The Connect Wallet button is in the app navigation. Clicking it showed a message telling me to use a Phantom, Solflare or Backpack wallet browser or extension. Connecting a wallet is outside what this sandbox can do.E35E36
  • Also noticed, Arena loads live Sentinel data: Opening the app called /api/sentinels and /api/practice/templates. The page then listed three practice agents and one funded Mainnet Sentinel with a 0.5 SOL pool and 5 attacks.E35
  • Also noticed, Practice Lab chat needs wallet signature: I sent 'hello' to the Vault Keeper practice agent. It made no network call and showed the wallet-required message, which matches the page's note that you must sign a wallet message to continue.E37E38
  • Tech check: the site claims wallet connection, and its public page shows matching evidence.E32E9E10E11
  • We saw no known analytics or advertising services load on the first visit.E1
  • Its code can ask your wallet to sign transactions. Read every wallet pop-up before approving.E30

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Evidence found

Wallet connection

“…e Heisto More Arena Practice Deploy Leaderboard Shield Connect Wallet Mainnet · Pool cap 2 SOL Arena Practice Deploy Board P…”E32

Wallet libraries in its code: web3.js, Solana web3 / wallet adapter, PhantomE9E10E11

Wallet requests in its code: signTransaction, signMessageE30E31

Calls its own backend /api/configE13
Wallet code web3.js, Solana web3 / wallet adapter, PhantomE9E10E11E30
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What the AI agent tried

An AI agent (claude-opus-5-5) used the site in our sandbox for 5 steps and saw 0 of 1 claimed feature working. It can't connect a wallet, pay, sign or log in, so those features count as "couldn't test". What it reports is what it observed, not a verdict.

Couldn't test

Wallet connection

The Connect Wallet button is in the app navigation. Clicking it showed a message telling me to use a Phantom, Solflare or Backpack wallet browser or extension. Connecting a wallet is outside what this sandbox can do.E35E36

Also noticed

Things the agent saw along the way that aren't among the site's claims. Not counted above.

Noticed

Arena loads live Sentinel data

Opening the app called /api/sentinels and /api/practice/templates. The page then listed three practice agents and one funded Mainnet Sentinel with a 0.5 SOL pool and 5 attacks.E35

Noticed

Practice Lab chat needs wallet signature

I sent 'hello' to the Vault Keeper practice agent. It made no network call and showed the wallet-required message, which matches the page's note that you must sign a wallet message to continue.E37E38

What it is

  • The Internet Archive has never saved this site, so it is probably new.E33
  • The site describes itself as: “Explore AI defense on Solana Mainnet. Create Sentinels, challenge AI guardrails, and verify recorded results.”E2
  • In your browser it can copy text to your clipboard.E12
  • While loading, it called 1 endpoint on its own servers, such as /api/config.E13

Where your data goes

FontsDownload typefaces. 2
fonts.googleapis.comGoogle Fonts: fonts 2×E6
fonts.gstatic.comGoogle Fonts: fonts 2×E8
Not identifiedServices we don't have in our list yet. 1
i.replit.comnot identified 2×E7

Crypto and wallets

  • Wallet tools in the code: web3.js, Solana web3 / wallet adapter and Phantom.E9E10E11
  • signTransaction: asks a wallet to sign transactions (often Solana wallets).E30
  • signMessage: asks a wallet to sign a message.E31

How key features work

What it can ask your wallet to sign

Its code can ask your wallet for signTransaction. Each of these opens a wallet pop-up you must approve; read it before you click.E30

signTransaction

Connecting your wallet

It connects to crypto wallets using web3.js, Solana web3 / wallet adapter, Phantom, signTransaction and 1 more. Connecting shows the site your wallet address; it doesn't move funds by itself.E9E10E11

web3.jsSolana web3 / wallet adapterPhantomsignTransactionsignMessage

Loading its content

Its content loads from its own API while you browse (/api/config).E13

/api/config

Pages and API calls

Pages it links to

/

Endpoints

Called while loading (seen) or named in the code (code).

heisto.xyz/api/configseenE13
/api/tx/sendcodeE14
/api/sentinelscodeE15
/api/leaderboardcodeE16
/api/profilecodeE17
/api/shieldcodeE18
/api/guard/keyscodeE19
/api/practice/templatescodeE20
/api/practice/limitscodeE21
/api/attacks/preparecodeE22
/api/attacks/submitcodeE23
/api/sentinels/preparecodeE24
/api/sentinels/confirmcodeE25
/api/attackscodeE26
/api/guard/scorecodeE27
/api/practicecodeE28

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: Heisto — AI red-teaming · Public preview
page title · https://heisto.xyz/
E2
Page description: Explore AI defense on Solana Mainnet. Create Sentinels, challenge AI guardrails, and verify recorded results.
page description · https://heisto.xyz/
E3
Site name: Heisto
page site_name · https://heisto.xyz/
E4
Main heading: Heisto Outwit the machine
page h1 · https://heisto.xyz/
E5
14 request(s) to heisto.xyz
types: 12 image, 1 document, 1 fetch
GET https://heisto.xyz/ · image · 14 requests · network recording
E6
2 request(s) to fonts.googleapis.com
types: 2 stylesheet
GET https://fonts.googleapis.com/css2 · stylesheet · 2 requests · network recording
E7
2 request(s) to i.replit.com
types: 1 script, 1 fetch
GET https://i.replit.com/script.js · script · 2 requests · network recording
E8
2 request(s) to fonts.gstatic.com
types: 2 font
GET https://fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 · font · 2 requests · network recording
E9
web3.js found in the code
heisto.xyz/ (page HTML) @ 696:89 · “web3.js” · pattern scan
E10
Solana web3 / wallet adapter found in the code
heisto.xyz/ (page HTML) @ 696:81 · “@solana/web3.js” · pattern scan
E11
Phantom found in the code
heisto.xyz/ (page HTML) @ 665:29 · “window.phantom” · pattern scan
E12
Uses the browser ability: clipboard_write
can copy text to your clipboard
heisto.xyz/ (page HTML) @ 592:78 · “clipboard.writeText(” · pattern scan
E13
The page called /api/config on heisto.xyz (GET)
GET https://heisto.xyz/api/config · fetch · network recording
E14
The code names the endpoint /api/tx/send
heisto.xyz/ (page HTML) @ 706:22 · “/api/tx/send” · pattern scan
E15
The code names the endpoint /api/sentinels
heisto.xyz/ (page HTML) @ 723:24 · “/api/sentinels” · pattern scan
E16
The code names the endpoint /api/leaderboard
heisto.xyz/ (page HTML) @ 729:46 · “/api/leaderboard” · pattern scan
E17
The code names the endpoint /api/profile
heisto.xyz/ (page HTML) @ 745:94 · “/api/profile” · pattern scan
E18
The code names the endpoint /api/shield
heisto.xyz/ (page HTML) @ 746:72 · “/api/shield” · pattern scan
E19
The code names the endpoint /api/guard/keys
heisto.xyz/ (page HTML) @ 747:106 · “/api/guard/keys” · pattern scan
E20
The code names the endpoint /api/practice/templates
heisto.xyz/ (page HTML) @ 751:14 · “/api/practice/templates” · pattern scan
E21
The code names the endpoint /api/practice/limits
heisto.xyz/ (page HTML) @ 752:33 · “/api/practice/limits” · pattern scan
E22
The code names the endpoint /api/attacks/prepare
heisto.xyz/ (page HTML) @ 772:29 · “/api/attacks/prepare” · pattern scan
E23
The code names the endpoint /api/attacks/submit
heisto.xyz/ (page HTML) @ 778:35 · “/api/attacks/submit” · pattern scan
E24
The code names the endpoint /api/sentinels/prepare
heisto.xyz/ (page HTML) @ 809:29 · “/api/sentinels/prepare” · pattern scan
E25
The code names the endpoint /api/sentinels/confirm
heisto.xyz/ (page HTML) @ 812:26 · “/api/sentinels/confirm” · pattern scan
E26
The code names the endpoint /api/attacks
heisto.xyz/ (page HTML) @ 839:35 · “/api/attacks” · pattern scan
E27
The code names the endpoint /api/guard/score
heisto.xyz/ (page HTML) @ 954:26 · “/api/guard/score” · pattern scan
E28
The code names the endpoint /api/practice
heisto.xyz/ (page HTML) @ 1368:31 · “/api/practice” · pattern scan
E29
1 links to pages on the same site
page links · https://heisto.xyz/ · /
E30
Wallet request in code: signTransaction
asks a wallet to sign transactions (often Solana wallets)
heisto.xyz/ (page HTML) @ 703:8 · “signAndSendTransaction” · pattern scan
E31
Wallet request in code: signMessage
asks a wallet to sign a message
heisto.xyz/ (page HTML) @ 710:42 · “signMessage” · pattern scan
E32
The site says: “…e Heisto More Arena Practice Deploy Leaderboard Shield Connect Wallet Mainnet · Pool cap 2 SOL Arena Practice Deploy Board P…”
page text · https://heisto.xyz/ · …e Heisto More Arena Practice Deploy Leaderboard Shield Connect Wallet Mainnet · Pool cap 2 SOL Arena Practice Deploy Board P…
E33
The Internet Archive has no saved copy of heisto.xyz
page web archive · https://web.archive.org/web/*/heisto.xyz
E34
Agent step 1: view
AI agent step 1 · view on /
E35
Agent step 2: click rocket_launch Explore App
AI agent step 2 · click on / · page called GET heisto.xyz/api/sentinels, GET heisto.xyz/api/practice/templates
E36
Agent step 3: click account_balance_wallet Connect Wallet
AI agent step 3 · click on /
E37
Agent step 4: click chat Challenge agent
AI agent step 4 · click on / · page called GET heisto.xyz/api/practice/templates, GET heisto.xyz/api/practice/limits
E38
Agent step 5: type Your practice prompt ← “hello”
AI agent step 5 · type on /

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id E3golQnH.