TRENCHCOAT
Website blueprint · 22 h ago

www.derive.xyz

“Derive.xyz | Trade Onchain Crypto Options & Perps”

Template-written 36 evidence items REA analysed 8 scripts
What this means for you

www.derive.xyz talked to 13 outside services on a first visit, including 2 that measure visits or show ads.E13E6

  • Tech check: the site claims live data / analytics, and its public page shows matching evidence.E36E30
  • Tech check: the site mentions on-chain / smart contracts, trading / swaps / bots, own chain / l2 / zk and 1 more, but we found nothing behind those in what its public page loads.E32E33E34E35
  • Before you click anything, the page loads analytics or ad services: Google Analytics / Tag Manager.E13E6
  • 5 cookies were set in your browser, all by the site itself.E20E21E22E23E24

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Nothing found on the public page

On-chain / smart contracts

“…Protocol Institutional-grade options & futures trading onchain. Start trading Crypto Options & Perps on BTC, ETH, and…”E32

No matching code, calls or services in what loaded for us.

Nothing found on the public page

Trading / swaps / bots

“…Trader? Get in touch. Submit White-glove Service HFT & Market maker-friendly with tailored support for institutions, and i…”E33

No matching code, calls or services in what loaded for us.

Nothing found on the public page

Own chain / L2 / ZK

“…combines low-latency trading with self-custody, using zero-knowledge proofs to verify protocol operations on Ethereum L1. B…”E34

No matching code, calls or services in what loaded for us.

Nothing found on the public page

Staking / yield

“…raders seeking an edge across options, perpetuals, and yield products. Portfolio and cross-margining Choose Standar…”E35

No matching code, calls or services in what loaded for us.

Evidence found

Live data / analytics

“…matching, with HTTP and WebSocket APIs for trading and real-time market data. Built on Ethereum Derive V3 combines low-…”E36

Calls to its own backend: /api/stats/totalE30

Calls its own backend /api/stats/totalE30
Wallet code none seen
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

The real tech may live elsewhere. This page links to: github.com/sigp/public-audits · check the code

What it is

  • The site describes itself as: “Institutional-grade crypto options & futures trading onchain. Start trading crypto options & perps on BTC, ETH, and altcoins.”E2
  • It's built with React (common tools for building web apps).E26
  • In your browser it saves small bits of data in your browser.E28
  • It has sections such as /trading, /v3-audit, /getting-started, /about, /images and /terms-of-use.E31
  • While loading, it called 1 endpoint on its own servers, such as /api/stats/total.E30

Where your data goes

Analytics & trackingCount visits and record what you do on the page. 2
www.google-analytics.comGoogle Analytics / Tag Manager: Google's visitor analytics and tag loader 1×E13
www.googletagmanager.comGoogle Analytics / Tag Manager: Google's visitor analytics and tag loader 1×E6
Support & chatHelp widgets and live chat. 4
js.intercomcdn.comIntercom: support chat 11×E15
api-iam.intercom.ioIntercom: support chat 3×E17
nexus-websocket-a.intercom.ioIntercom: support chat 1×E19
widget.intercom.ioIntercom: support chat 1×E14
Not identifiedServices we don't have in our list yet. 7
framerusercontent.comnot identified 41×E8
app.framerstatic.comnot identified 6×E11
storage.ghost.ionot identified 6×E18
framer.comnot identified 4×E9
events.framer.comnot identified 3×E7
api.framer.comnot identified 1×E16
lyra-2.ghost.ionot identified 1×E12

How key features work

Live updates

It keeps live connections open (nexus-websocket-a.intercom.io) so content updates without reloading.E19

nexus-websocket-a.intercom.io

Loading its content

Its content loads from its own API while you browse (/api/stats/total).E30

/api/stats/total

Measuring what you do

Visits and clicks are measured with Google Analytics / Tag Manager and Google tag (gtag.js) (found in its traffic or its code).E13E6E27

Google Analytics / Tag ManagerGoogle tag (gtag.js)

Saving data on your device

It saves data in your browser (localStorage), so some things persist between visits.E28E25

local_storagelocalStorage

Cookies and storage

Names only. We never store the values.

CookieSet forKeptWhose
_ga_N0D8KV8FT4E20derive.xyz about 400 daysthe site
_gaE21derive.xyz about 400 daysthe site
intercom-id-ytse5axfE22derive.xyz about 270 daysthe site
intercom-session-ytse5axfE23derive.xyz about 7 daysthe site
intercom-device-id-ytse5axfE24derive.xyz about 270 daysthe site

localStorageE25: intercom.intercom-state-ytse5axf

Pages and API calls

Pages it links to

//trading/v3-audit/getting-started/about/images/terms-of-use/fees/privacy-policy/en/trade/vaults/stats/files/learning/drv/stake

Endpoints

Called while loading (seen) or named in the code (code).

app.derive.xyz/api/stats/totalseenE30

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: Derive.xyz | Trade Onchain Crypto Options & Perps
page title · https://www.derive.xyz/
E2
Page description: Institutional-grade crypto options & futures trading onchain. Start trading crypto options & perps on BTC, ETH, and altcoins.
page description · https://www.derive.xyz/
E3
Main heading: Crypto Options & Futures Protocol
page h1 · https://www.derive.xyz/
E4
1 request(s) to derive.xyz
types: 1 document
GET https://derive.xyz/ · document · network recording
E5
1 request(s) to www.derive.xyz
types: 1 document
GET https://www.derive.xyz/ · document · network recording
E6
1 request(s) to www.googletagmanager.com
types: 1 script
GET https://www.googletagmanager.com/gtag/js · script · network recording
E7
3 request(s) to events.framer.com
types: 2 ping, 1 script
GET https://events.framer.com/script · ping · 3 requests · network recording
E8
41 request(s) to framerusercontent.com
types: 22 script, 16 image, 3 font
GET https://framerusercontent.com/images/BRrWXkbBv81kMIiyMjuOu3YnM.png · script · 41 requests · network recording
E9
4 request(s) to framer.com
types: 3 script, 1 document
GET https://framer.com/edit/init.mjs · script · 4 requests · network recording
E10
1 request(s) to app.derive.xyz
types: 1 fetch
GET https://app.derive.xyz/api/stats/total · fetch · network recording
E11
6 request(s) to app.framerstatic.com
types: 6 script
GET https://app.framerstatic.com/chunk-CS7BPPVU.mjs · script · 6 requests · network recording
E12
1 request(s) to lyra-2.ghost.io
types: 1 fetch
GET https://lyra-2.ghost.io/ghost/api/content/posts/ · fetch · network recording
E13
1 request(s) to www.google-analytics.com
types: 1 fetch
GET https://www.google-analytics.com/g/collect · fetch · network recording
E14
1 request(s) to widget.intercom.io
types: 1 script
GET https://widget.intercom.io/widget/ytse5axf · script · network recording
E15
11 request(s) to js.intercomcdn.com
types: 9 script, 2 image
GET https://js.intercomcdn.com/frame-modern.d7466666.js · script · 11 requests · network recording
E16
1 request(s) to api.framer.com
types: 1 fetch
GET https://api.framer.com/auth/web/access-token · fetch · network recording
E17
3 request(s) to api-iam.intercom.io
types: 3 xhr
GET https://api-iam.intercom.io/messenger/web/launcher_settings · xhr · 3 requests · network recording
E18
6 request(s) to storage.ghost.io
types: 6 image
GET https://storage.ghost.io/c/d4/b0/d4b0d8d6-38f7-4189-97b7-c417fe4c379b/content/images/2026/10/kHYPE---s-Ethereum-D… · image · 6 requests · network recording
E19
1 request(s) to nexus-websocket-a.intercom.io
types: 1 websocket
GET wss://nexus-websocket-a.intercom.io/pubsub/5-bJz9klXowOG1P1eCZ379ATUH4Algpj_eJ8WmqYHGTBMn0JlhchIY9WP7G_9RWuC3ICeSj4l21mLKw0k… · websocket · network recording
E20
Cookie '_ga_N0D8KV8FT4' set for derive.xyz
kept for about 400 days
cookie _ga_N0D8KV8FT4 on derive.xyz · value not stored
E21
Cookie '_ga' set for derive.xyz
kept for about 400 days
cookie _ga on derive.xyz · value not stored
E22
Cookie 'intercom-id-ytse5axf' set for derive.xyz
kept for about 270 days
cookie intercom-id-ytse5axf on derive.xyz · value not stored
E23
Cookie 'intercom-session-ytse5axf' set for derive.xyz
kept for about 7 days
cookie intercom-session-ytse5axf on derive.xyz · value not stored
E24
Cookie 'intercom-device-id-ytse5axf' set for derive.xyz
kept for about 270 days
cookie intercom-device-id-ytse5axf on derive.xyz · value not stored
E25
localStorage: 1 key(s) saved in your browser
localStorage keys: intercom.intercom-state-ytse5axf · values not stored
E26
React found in the code
framerusercontent.com/sites/7u4doeH7fjXx93G58xOBbR/react.Ds--GDyP.mjs @ 1:3775 · “react.element” · pattern scan
E27
Google tag (gtag.js) found in the code
www.derive.xyz/ (page HTML) @ 158:13 · “gtag(” · pattern scan
E28
Uses the browser ability: local_storage
saves small bits of data in your browser
framerusercontent.com/sites/7u4doeH7fjXx93G58xOBbR/framer.BiKjeW3D.mjs @ 936:15600 · “localStorage.setItem(” · pattern scan
E29
Uses the browser ability: web_worker
runs work in a background thread
framerusercontent.com/sites/7u4doeH7fjXx93G58xOBbR/framer.BiKjeW3D.mjs @ 52:11172 · “new Worker(” · pattern scan
E30
The page called /api/stats/total on app.derive.xyz (GET)
GET https://app.derive.xyz/api/stats/total · fetch · network recording
E31
21 links to pages on the same site
page links · https://www.derive.xyz/ · /, /trading, /v3-audit, /getting-started, /about, /images, /terms-of-use, /fees, /privacy-policy, /en, /trade, /vaults
E32
The site says: “…Protocol Institutional-grade options & futures trading onchain. Start trading Crypto Options & Perps on BTC, ETH, and…”
page text · https://www.derive.xyz/ · …Protocol Institutional-grade options & futures trading onchain. Start trading Crypto Options & Perps on BTC, ETH, and…
E33
The site says: “…Trader? Get in touch. Submit White-glove Service HFT & Market maker-friendly with tailored support for institutions, and i…”
page text · https://www.derive.xyz/ · …Trader? Get in touch. Submit White-glove Service HFT & Market maker-friendly with tailored support for institutions, and i…
E34
The site says: “…combines low-latency trading with self-custody, using zero-knowledge proofs to verify protocol operations on Ethereum L1. B…”
page text · https://www.derive.xyz/ · …combines low-latency trading with self-custody, using zero-knowledge proofs to verify protocol operations on Ethereum L1. B…
E35
The site says: “…raders seeking an edge across options, perpetuals, and yield products. Portfolio and cross-margining Choose Standar…”
page text · https://www.derive.xyz/ · …raders seeking an edge across options, perpetuals, and yield products. Portfolio and cross-margining Choose Standar…
E36
The site says: “…matching, with HTTP and WebSocket APIs for trading and real-time market data. Built on Ethereum Derive V3 combines low-…”
page text · https://www.derive.xyz/ · …matching, with HTTP and WebSocket APIs for trading and real-time market data. Built on Ethereum Derive V3 combines low-…

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • REA hit its size budget on parts of 17 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id LhpyWaCD.