trenchcoat
Free · no sign-up
Website report · 01 Nov 2026

cashpad.trade

“CashPad: Launch a coin. Fund anyone's Cash App.”

Template-written 30 evidence items Code reader analysed 32 scripts
What this means for you

CashPad only talked to its own servers while we watched.E1

  • An AI agent used the site and saw 1 of 2 claimed features working.E27E28E30E26E29E30
  • The account's owner logs in with X and claims. We swap the fees to USDC and send them to their Cash App.: The tool blocked the 'Claim your fees' button. The claim page for @Kishizin1 showed $17.62 in unclaimed fees, a 'Log in with X to claim' button and the steps for claiming to Cash App. Actually claiming needs an X login and a Cash App deposit address, so I couldn't see the swap to USDC or the transfer happen.E27E28E30
  • Extra observation: coin pages and per-account fee tracking: Coin and claim pages loaded data from the site's backend, such as creator wallet, mint address, lifetime fees and unclaimed fees. All 11 listed coins showed $0 market cap, 0 holders, $0 volume and no trades.E26E29E30
  • Tech check: the site claims trading / swaps / bots, and its public page shows matching evidence.E24E22
  • We saw no known analytics or advertising services load on the first visit.E1
  • Its code can ask your wallet to sign transactions. Read every wallet pop-up before approving.E22

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Evidence found

Trading / swaps / bots

“…APP The account's owner logs in with X and claims. We swap the fees to USDC and send them to their Cash App. Clai…”E24

Transaction requests to your wallet: signTransactionE22

Calls its own backend /auth/sessionE13
Wallet code WalletConnect / Reown, Solana web3 / wallet adapterE8E9E22E23
Contract calls in its code none seen
Talks to AI services none seen
Live connections keeps a live two-way connection open to a serverE11

What the AI agent tried

An AI agent (claude-opus-5-5) used the site in our sandbox for 5 steps and saw 1 of 2 claimed features working. It can't connect a wallet, pay, sign or log in, so those features count as "couldn't test". What it reports is what it observed, not a verdict.

Couldn't test

The account's owner logs in with X and claims. We swap the fees to USDC and send them to their Cash App.

The tool blocked the 'Claim your fees' button. The claim page for @Kishizin1 showed $17.62 in unclaimed fees, a 'Log in with X to claim' button and the steps for claiming to Cash App. Actually claiming needs an X login and a Cash App deposit address, so I couldn't see the swap to USDC or the transfer happen.E27E28E30

Seen working

Extra observation: coin pages and per-account fee tracking

Coin and claim pages loaded data from the site's backend, such as creator wallet, mint address, lifetime fees and unclaimed fees. All 11 listed coins showed $0 market cap, 0 holders, $0 volume and no trades.E26E29E30

What it is

  • The Internet Archive first saved this site on 2026-10-10 (22 days ago).E25
  • The site describes itself as: “Launch a memecoin for anyone on X. Every trade pays a creator fee that goes straight to their Cash App. Not affiliated with Block, Inc. or C”E2
  • It's built with Next.js and React (common tools for building web apps).E6E7
  • In your browser it saves small bits of data in your browser and keeps a live two-way connection open to a server.E10E11
  • It has sections such as /launch, /auth, /claim, /how-it-works, /coin and /fees.E20E21
  • While loading, it called 1 endpoint on its own servers, such as /auth/session.E13

Where your data goes

On a first visit the page only talked to its own servers (cashpad.trade).

Crypto and wallets

  • Wallet tools in the code: WalletConnect / Reown and Solana web3 / wallet adapter.E8E9
  • signTransaction: asks a wallet to sign transactions (often Solana wallets).E22
  • signMessage: asks a wallet to sign a message.E23

How key features work

What it can ask your wallet to sign

Its code can ask your wallet for signTransaction. Each of these opens a wallet pop-up you must approve; read it before you click.E22

signTransaction

Connecting your wallet

It connects to crypto wallets using WalletConnect / Reown, Solana web3 / wallet adapter, signTransaction and signMessage. Connecting shows the site your wallet address; it doesn't move funds by itself.E8E9

WalletConnect / ReownSolana web3 / wallet adaptersignTransactionsignMessage

Sign-in and accounts

Sign-in and account features show up in its code or traffic (/auth/session).E13

/auth/session

Live updates

It keeps live connections open (WebSockets) so content updates without reloading.E11

websocket

Loading its content

Its content loads from its own API while you browse (/auth/session).E13

/auth/session

Search

Search runs through /api/search.E14

/api/search

Drawing and editing in the browser

The page draws and edits graphics in your browser using the canvas.E12

canvas

Pages and API calls

Pages it links to

//launch/auth/claim/how-it-works/coin/fees/leaderboard/support/terms/privacy/_next/image

Endpoints

Called while loading (seen) or named in the code (code).

cashpad.trade/auth/sessionseenE13
/api/searchcodeE14
/api/launch/preparecodeE15
/api/launch/configcodeE16
/api/x/resolvecodeE17
/api/launch/metadatacodeE18
/api/launch/submitcodeE19

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: CashPad: Launch a coin. Fund anyone's Cash App.
page title · https://cashpad.trade/
E2
Page description: Launch a memecoin for anyone on X. Every trade pays a creator fee that goes straight to their Cash App. Not affiliated with Block, Inc. or Cash App.
page description · https://cashpad.trade/
E3
Site name: CashPad
page site_name · https://cashpad.trade/
E4
Main heading: Launch a coin. Fund anyone's Cash App.
page h1 · https://cashpad.trade/
E5
61 request(s) to cashpad.trade
types: 24 script, 18 image, 15 fetch
GET https://cashpad.trade/ · script · 61 requests · network recording
E6
Next.js detected by The code reader (next-runtime)
confidence: high
cashpad.trade/_next/static/immutable/chunks/0x3t4-0p5u8m6.js · “next-runtime” · The code reader analyze-web-bundle 6.4.0
E7
React detected by The code reader (react-runtime)
confidence: medium
cashpad.trade/_next/static/immutable/chunks/1v4gh-mruc7hh.js · “react-runtime” · The code reader analyze-web-bundle 6.4.0
E8
WalletConnect / Reown found in the code
cashpad.trade/_next/static/immutable/chunks/0x3t4-0p5u8m6.js @ 1:311129 · “WalletConnect” · pattern scan
E9
Solana web3 / wallet adapter found in the code
cashpad.trade/_next/static/immutable/chunks/0x3t4-0p5u8m6.js @ 13:20 · “wallet-adapter” · pattern scan
E10
Uses the browser ability: local_storage
saves small bits of data in your browser
cashpad.trade/_next/static/immutable/chunks/0x3t4-0p5u8m6.js @ 485:27863 · “localStorage.setItem(” · pattern scan
E11
Uses the browser ability: websocket
keeps a live two-way connection open to a server
cashpad.trade/_next/static/immutable/chunks/0x3t4-0p5u8m6.js @ 12:7598 · “new WebSocket(” · pattern scan
E12
Uses the browser ability: canvas
draws graphics on a canvas
cashpad.trade/_next/static/immutable/chunks/0x3t4-0p5u8m6.js @ 487:102383 · “getContext("2d"” · pattern scan
E13
The page called /auth/session on cashpad.trade (GET)
GET https://cashpad.trade/auth/session · fetch · network recording
E14
The code names the endpoint /api/search
cashpad.trade/_next/static/immutable/chunks/1_rqpddo_sfq9.js @ 1:5737 · “/api/search” · pattern scan
E15
The code names the endpoint /api/launch/prepare
cashpad.trade/_next/static/immutable/chunks/0tkbaq527uhdq.js @ 1:1711 · “/api/launch/prepare” · pattern scan
E16
The code names the endpoint /api/launch/config
cashpad.trade/_next/static/immutable/chunks/0tkbaq527uhdq.js @ 1:48642 · “/api/launch/config” · pattern scan
E17
The code names the endpoint /api/x/resolve
cashpad.trade/_next/static/immutable/chunks/0tkbaq527uhdq.js @ 1:48879 · “/api/x/resolve” · pattern scan
E18
The code names the endpoint /api/launch/metadata
cashpad.trade/_next/static/immutable/chunks/0tkbaq527uhdq.js @ 1:51723 · “/api/launch/metadata” · pattern scan
E19
The code names the endpoint /api/launch/submit
cashpad.trade/_next/static/immutable/chunks/0tkbaq527uhdq.js @ 1:53718 · “/api/launch/submit” · pattern scan
E20
21 links to pages on the same site
page links · https://cashpad.trade/ · /, /launch, /auth, /claim, /how-it-works, /coin, /fees, /leaderboard, /support, /terms, /privacy
E21
Code reader found the route /_next/image
cashpad.trade/_next/static/immutable/chunks/0x3t4-0p5u8m6.js @ 485:85888 · “/_next/image” · The code reader analyze-web-bundle 6.4.0
E22
Wallet request in code: signTransaction
asks a wallet to sign transactions (often Solana wallets)
cashpad.trade/_next/static/immutable/chunks/0x3t4-0p5u8m6.js @ 1:11576 · “signTransaction” · pattern scan
E23
Wallet request in code: signMessage
asks a wallet to sign a message
cashpad.trade/_next/static/immutable/chunks/0x3t4-0p5u8m6.js @ 1:11858 · “signMessage” · pattern scan
E24
The site says: “…APP The account's owner logs in with X and claims. We swap the fees to USDC and send them to their Cash App. Clai…”
page text · https://cashpad.trade/ · …APP The account's owner logs in with X and claims. We swap the fees to USDC and send them to their Cash App. Clai…
E25
The Internet Archive first saved cashpad.trade on 2026-10-10 and has snapshots from 3 different days
page web archive · https://web.archive.org/web/20261010143242/cashpad.trade
E26
Agent step 1: view
AI agent step 1 · view on /
E27
Agent step 2: click Claim your fees (not done: Blocked: actions that pay, sign, trade or send are not allowed here.)
AI agent step 2 · click on /
E28
Agent step 3: click How does the X account get the fees into Cash App?
AI agent step 3 · click on /
E29
Agent step 4: click 0 holders CashCat 3w $CASHCAT $0 MC 0% 4h vol $0 0% @Kishizi
AI agent step 4 · click on /coin/AM5ukFQPFXMcRJMuVqMataDAp4sy1mxgJti1XcZMoQjj · page called GET cashpad.trade/coin/AM5ukFQPFXMcRJMuVqMataDAp4sy1mxgJti1XcZMoQjj, GET cashpad.trade/coin/9aHMzmTjJw85aM6B4GKszXzzU4hFAWwQ4KC5mKop7ckz, GET cashpad.trade/coin/FFLe6RSDCirjZa3Lno6TxYJ4F7xUTDer5qEX8z6Bpump, GET cashpad.trade/coin/8GWDyEY9brfzoGjM7u48BJwXQNct5CAcQ3sTvDupaLjG, GET cashpad.trade/coin/3
E30
Agent step 5: go /claim/Kishizin1
AI agent step 5 · go on /claim/Kishizin1 · page called GET cashpad.trade/auth/session, GET cashpad.trade/, GET cashpad.trade/launch, GET cashpad.trade/coin/AM5ukFQPFXMcRJMuVqMataDAp4sy1mxgJti1XcZMoQjj

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • The code reader hit its size budget on parts of 17 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id U7APLLVi.