Website report · 29 Oct 2026

exchange.fun

“Exchange”

Template-written 60 evidence items Code reader analysed 1 scripts
What this means for you

exchange.fun talked to 3 outside services on a first visit.E4E5E3

  • We saw no known analytics or advertising services load on the first visit.E1

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

The page doesn't make tech claims we check for (AI, on-chain, wallets, trading, own chain, staking, live data, an app).

Calls its own backend /api/meE13
Wallet code WalletConnect / Reown, PhantomE7E8E59
Contract calls in its code none seen
Talks to AI services none seen
Live connections receives a live stream of updates from a serverE11

What it is

  • The Internet Archive has never saved this site, so it is probably new.E60
  • The page calls itself “Exchange”.E1
  • In your browser it can copy text to your clipboard, saves small bits of data in your browser and receives a live stream of updates from a server.E9E10E11
  • While loading, it called 1 endpoint on its own servers, such as /api/me.E13

Where your data goes

Crypto & walletsConnect wallets, read blockchains or fetch token prices. 1
api.coingecko.comCoinGecko / GeckoTerminal: token prices and pools 1×E4
FontsDownload typefaces. 2
fonts.gstatic.comGoogle Fonts: fonts 3×E5
fonts.googleapis.comGoogle Fonts: fonts 1×E3

Crypto and wallets

  • Wallet tools in the code: WalletConnect / Reown and Phantom.E7E8
  • signMessage: asks a wallet to sign a message.E59

How key features work

Connecting your wallet

It connects to crypto wallets using WalletConnect / Reown, Phantom and signMessage. Connecting shows the site your wallet address; it doesn't move funds by itself.E7E8E4

WalletConnect / ReownPhantomsignMessage

Sign-in and accounts

Sign-in and account features show up in its code or traffic (/api/auth/logout, /api/auth/nonce, /api/auth/verify and /api/admin/signups).E15E16E17

/api/auth/logout/api/auth/nonce/api/auth/verify/api/admin/signups

Live updates

It keeps live connections open (server-sent events) so content updates without reloading.E11

event_source

Loading its content

Its content loads from its own API while you browse (/api/me).E13

/api/me

Drawing and editing in the browser

The page draws and edits graphics in your browser using the canvas.E12

canvas

Saving data on your device

It saves data in your browser (localStorage), so some things persist between visits.E10E6

local_storagelocalStorage

Cookies and storage

Names only. We never store the values.

localStorageE6: ex_demo_ach

Pages and API calls

Endpoints

Called while loading (seen) or named in the code (code).

exchange.fun/api/meseenE13
/api/mecodeE14
/api/auth/logoutcodeE15
/api/auth/noncecodeE16
/api/auth/verifycodeE17
api.coingecko.com/api/v3/simple/pricecodeE18
/api/office/eventscodeE19
/api/office/statecodeE20
/api/office/buycodeE21
/api/office/traitcodeE22
/api/office/avatar-donecodeE23
/api/office/renamecodeE24
/api/office/lookcodeE25
/api/office/strategycodeE26
/api/office/lanecfgcodeE27
/api/achievementscodeE28
/api/office/riskcodeE29
/api/office/haltcodeE30
/api/office/resumecodeE31
/api/office/sellcodeE32
/api/office/sellallcodeE33
/api/office/pokecodeE34
/api/office/withdrawcodeE35
/api/office/synccodeE36
/api/office/linkcodecodeE37
/api/office/replaycodeE38
/api/office/open-anothercodeE39
/api/office/fund-fromcodeE40
/api/office/admin-unlockcodeE41
/api/office/export-keycodeE42

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: Exchange
page title · https://exchange.fun/
E2
2 request(s) to exchange.fun
types: 1 document, 1 fetch
GET https://exchange.fun/ · document · 2 requests · network recording
E3
1 request(s) to fonts.googleapis.com
types: 1 stylesheet
GET https://fonts.googleapis.com/css2 · stylesheet · network recording
E4
1 request(s) to api.coingecko.com
types: 1 fetch
GET https://api.coingecko.com/api/v3/simple/price · fetch · network recording
E5
3 request(s) to fonts.gstatic.com
types: 3 font
GET https://fonts.gstatic.com/s/chakrapetch/v13/cIflMapbsEk7TDLdtEz1BwkeJI91R5_F.woff2 · font · 3 requests · network recording
E6
localStorage: 1 key(s) saved in your browser
localStorage keys: ex_demo_ach · values not stored
E7
WalletConnect / Reown found in the code
exchange.fun/ (page HTML) @ 3515:16 · “walletConnect” · pattern scan
E8
Phantom found in the code
exchange.fun/ (page HTML) @ 3508:14 · “window.phantom” · pattern scan
E9
Uses the browser ability: clipboard_write
can copy text to your clipboard
exchange.fun/ (page HTML) @ 3538:52 · “clipboard.writeText(” · pattern scan
E10
Uses the browser ability: local_storage
saves small bits of data in your browser
exchange.fun/ (page HTML) @ 3359:44 · “localStorage.setItem(” · pattern scan
E11
Uses the browser ability: event_source
receives a live stream of updates from a server
exchange.fun/ (page HTML) @ 3449:15 · “new EventSource(” · pattern scan
E12
Uses the browser ability: canvas
draws graphics on a canvas
exchange.fun/ (page HTML) @ 2716:60 · “getContext('2d'” · pattern scan
E13
The page called /api/me on exchange.fun (GET)
GET https://exchange.fun/api/me · fetch · network recording
E14
Code reader found the endpoint /api/me
how: call:fetch
exchange.fun/ @ 3475:25 · “/api/me” · The code reader analyze-web-bundle 6.4.0
E15
Code reader found the endpoint /api/auth/logout
how: call:fetch
exchange.fun/ @ 3499:21 · “/api/auth/logout” · The code reader analyze-web-bundle 6.4.0
E16
Code reader found the endpoint /api/auth/nonce
how: call:fetch
exchange.fun/ @ 3551:30 · “/api/auth/nonce” · The code reader analyze-web-bundle 6.4.0
E17
Code reader found the endpoint /api/auth/verify
how: call:fetch
exchange.fun/ @ 3553:20 · “/api/auth/verify” · The code reader analyze-web-bundle 6.4.0
E18
Code reader found the endpoint api.coingecko.com/api/v3/simple/price
how: call:fetch
exchange.fun/ @ 3856:2 · “api.coingecko.com/api/v3/simple/price” · The code reader analyze-web-bundle 6.4.0
E19
The code names the endpoint /api/office/events
exchange.fun/ (page HTML) @ 3449:32 · “/api/office/events” · pattern scan
E20
The code names the endpoint /api/office/state
exchange.fun/ (page HTML) @ 3453:53 · “/api/office/state” · pattern scan
E21
The code names the endpoint /api/office/buy
exchange.fun/ (page HTML) @ 3455:30 · “/api/office/buy” · pattern scan
E22
The code names the endpoint /api/office/trait
exchange.fun/ (page HTML) @ 3456:46 · “/api/office/trait” · pattern scan
E23
The code names the endpoint /api/office/avatar-done
exchange.fun/ (page HTML) @ 3457:37 · “/api/office/avatar-done” · pattern scan
E24
The code names the endpoint /api/office/rename
exchange.fun/ (page HTML) @ 3458:43 · “/api/office/rename” · pattern scan
E25
The code names the endpoint /api/office/look
exchange.fun/ (page HTML) @ 3459:36 · “/api/office/look” · pattern scan
E26
The code names the endpoint /api/office/strategy
exchange.fun/ (page HTML) @ 3460:44 · “/api/office/strategy” · pattern scan
E27
The code names the endpoint /api/office/lanecfg
exchange.fun/ (page HTML) @ 3461:36 · “/api/office/lanecfg” · pattern scan
E28
The code names the endpoint /api/achievements
exchange.fun/ (page HTML) @ 3462:37 · “/api/achievements” · pattern scan
E29
The code names the endpoint /api/office/risk
exchange.fun/ (page HTML) @ 3463:33 · “/api/office/risk” · pattern scan
E30
The code names the endpoint /api/office/halt
exchange.fun/ (page HTML) @ 3464:29 · “/api/office/halt” · pattern scan
E31
The code names the endpoint /api/office/resume
exchange.fun/ (page HTML) @ 3465:31 · “/api/office/resume” · pattern scan
E32
The code names the endpoint /api/office/sell
exchange.fun/ (page HTML) @ 3466:33 · “/api/office/sell” · pattern scan
E33
The code names the endpoint /api/office/sellall
exchange.fun/ (page HTML) @ 3467:32 · “/api/office/sellall” · pattern scan
E34
The code names the endpoint /api/office/poke
exchange.fun/ (page HTML) @ 3468:33 · “/api/office/poke” · pattern scan
E35
The code names the endpoint /api/office/withdraw
exchange.fun/ (page HTML) @ 3469:40 · “/api/office/withdraw” · pattern scan
E36
The code names the endpoint /api/office/sync
exchange.fun/ (page HTML) @ 3470:29 · “/api/office/sync” · pattern scan
E37
The code names the endpoint /api/office/linkcode
exchange.fun/ (page HTML) @ 3471:33 · “/api/office/linkcode” · pattern scan
E38
The code names the endpoint /api/office/replay
exchange.fun/ (page HTML) @ 3472:34 · “/api/office/replay” · pattern scan
E39
The code names the endpoint /api/office/open-another
exchange.fun/ (page HTML) @ 3473:36 · “/api/office/open-another” · pattern scan
E40
The code names the endpoint /api/office/fund-from
exchange.fun/ (page HTML) @ 3474:46 · “/api/office/fund-from” · pattern scan
E41
The code names the endpoint /api/office/admin-unlock
exchange.fun/ (page HTML) @ 3475:36 · “/api/office/admin-unlock” · pattern scan
E42
The code names the endpoint /api/office/export-key
exchange.fun/ (page HTML) @ 3476:52 · “/api/office/export-key” · pattern scan
E43
The code names the endpoint /api/admin/stats
exchange.fun/ (page HTML) @ 3478:35 · “/api/admin/stats” · pattern scan
E44
The code names the endpoint /api/admin/offices
exchange.fun/ (page HTML) @ 3479:37 · “/api/admin/offices” · pattern scan
E45
The code names the endpoint /api/admin/log
exchange.fun/ (page HTML) @ 3480:40 · “/api/admin/log” · pattern scan
E46
The code names the endpoint /api/admin/halt-all
exchange.fun/ (page HTML) @ 3481:44 · “/api/admin/halt-all” · pattern scan
E47
The code names the endpoint /api/admin/resume-all
exchange.fun/ (page HTML) @ 3481:68 · “/api/admin/resume-all” · pattern scan
E48
The code names the endpoint /api/admin/signups
exchange.fun/ (page HTML) @ 3482:41 · “/api/admin/signups” · pattern scan
E49
The code names the endpoint /api/admin/motd
exchange.fun/ (page HTML) @ 3483:38 · “/api/admin/motd” · pattern scan
E50
The code names the endpoint /api/admin/telegram
exchange.fun/ (page HTML) @ 3484:49 · “/api/admin/telegram” · pattern scan
E51
The code names the endpoint /api/admin/wallets
exchange.fun/ (page HTML) @ 3485:37 · “/api/admin/wallets” · pattern scan
E52
The code names the endpoint /api/admin/ops-create
exchange.fun/ (page HTML) @ 3486:39 · “/api/admin/ops-create” · pattern scan
E53
The code names the endpoint /api/admin/fund-gas
exchange.fun/ (page HTML) @ 3487:40 · “/api/admin/fund-gas” · pattern scan
E54
The code names the endpoint /api/admin/sweep
exchange.fun/ (page HTML) @ 3488:50 · “/api/admin/sweep” · pattern scan
E55
The code names the endpoint /api/admin/gas-add
exchange.fun/ (page HTML) @ 3489:47 · “/api/admin/gas-add” · pattern scan
E56
The code names the endpoint /api/admin/gas-remove
exchange.fun/ (page HTML) @ 3490:43 · “/api/admin/gas-remove” · pattern scan
E57
The code names the endpoint /api/admin/feed-key-new
exchange.fun/ (page HTML) @ 3491:40 · “/api/admin/feed-key-new” · pattern scan
E58
The code names the endpoint /api/admin/feed-settings
exchange.fun/ (page HTML) @ 3492:43 · “/api/admin/feed-settings” · pattern scan
E59
Wallet request in code: signMessage
asks a wallet to sign a message
exchange.fun/ (page HTML) @ 3506:148 · “signMessage” · pattern scan
E60
The Internet Archive has no saved copy of exchange.fun
page web archive · https://web.archive.org/web/*/exchange.fun

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id UVh0DLW7.