xmrroots.xyz

• It describes itself as a place to launch wXMR token pairs on Solana. It promises creator fees, shared ROOTS/wXMR liquidity (a trading pool), buybacks and rewards.E2E4
• Its menu lists Coins, Move wXMR, Roots, Terminal, Activity, Docs, Stats and Plant a coin. It also has a Connect wallet button.E75E74E15
• Its code names many on-chain roles, such as pool, mint, bonding_curve, buyback_vault, fee_recipient and creator_vault. These hint at fee splitting and buybacks.E19E18E55E68E57E50
• The code also contains names like pump_amm and pump_fees. This suggests it works with those trading programs.E52E54
• The page shows on-chain stats, such as 201.8M ROOTS burned, or 20.18% of supply. It can also copy text to your clipboard.E73E11

• The code includes wallet requests signTransaction (approve a blockchain action) and signMessage (sign a text to prove ownership).E71E72
• It reads Solana through PublicNode's public node. We saw 27 data requests during our visit.E6
• The code names several fee destinations: protocol_fee_recipient, buyback_fee_recipient, social_fee_pda and donation_fee_pda. A PDA is a program-owned address.E23E58E62E65
• It also names control roles like burn_authority, buyback_authority and withdraw_authority. These are accounts allowed to perform those actions.E46E47E48

Names only. We never store the values.

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

• We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
• Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
• Some trackers only load after you accept cookies or log in, so the real list can be longer.
• We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
• The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
• We can't see what xmrroots.xyz's own servers do with requests. We only see what the page calls.
• We recorded one visit with 48 requests. Code that only runs after you connect a wallet or take actions may not have run.
• The code reader hit its size budget on parts of 1 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id SFoYfkia.