trenchcoat
Free · no sign-up
Website report · 3 h ago

mastsol.fun

“MAST · Tie yourself to the mast”

Template-written 32 evidence items Code reader analysed 2 scripts
What this means for you

mastsol.fun talked to 9 outside services on a first visit, including 1 that measures visits or shows ads.E7

  • An AI agent used the site and saw 0 of 1 claimed features working.E29E30
  • On-chain / smart contracts: The Tie page only shows a "Connect wallet" step (pick a token, an amount and a date, then sign), so we couldn't create a lock without a wallet. The How page says locks are made in the Jupiter Lock program LocpQgucEQHbqNABEYvBvwoxCPsSbG91A1QaQhQQqjn with cancel mode 0 and recipient update mode 0, and that MAST has no contract of its own; we couldn't confirm either point from the site.E29E30
  • Also noticed, Lock lookup returns live data: Opening the $MAST token page called api.mastsol.fun/v1/mast/... and showed 1 holder with 34.20M tied (3.44% of supply), linked to Solscan, plus an unlock chart and an embeddable badge. Going back to the home page called api.mastsol.fun/v1/masts and listed the fleet; the $MAST share there had changed from 3.42% to 3.44%.E28E31
  • Also noticed, Unlock dates differ on token page: On the $MAST page, the only holder row says it is locked until 4 Feb 2027. The "Next rope loosens" figure and the unlock chart both show 2026-11-04 instead.E28
  • Tech check: the site claims on-chain / smart contracts, and its public page shows matching evidence.E25E13E12E10
  • Before you click anything, the page loads analytics or ad services: Cloudflare Web Analytics.E7
  • Its code can ask your wallet to sign transactions. Read every wallet pop-up before approving.E24

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Evidence found

On-chain / smart contracts

“…ey prove it. Lock your own bag until a day you choose, on chain, where nobody can untie you early: not you, not us, no…”E25

Blockchain services it contacts: Phantom, Pinata / IPFSE13E12E10

Wallet requests in its code: signTransactionE24

Calls its own backend /v1/mastsE18
Wallet code web3.js, Solana web3 / wallet adapter, PhantomE15E16E17E24
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

The real tech may live elsewhere. This page links to: github.com/Mast-Solana/mast · check the code

What the AI agent tried

An AI agent (claude-opus-5-5) used the site in our sandbox for 6 steps and saw 0 of 1 claimed feature working. It can't connect a wallet, pay, sign or log in, so those features count as "couldn't test". What it reports is what it observed, not a verdict.

Couldn't test

On-chain / smart contracts

The Tie page only shows a "Connect wallet" step (pick a token, an amount and a date, then sign), so we couldn't create a lock without a wallet. The How page says locks are made in the Jupiter Lock program LocpQgucEQHbqNABEYvBvwoxCPsSbG91A1QaQhQQqjn with cancel mode 0 and recipient update mode 0, and that MAST has no contract of its own; we couldn't confirm either point from the site.E29E30

Also noticed

Things the agent saw along the way that aren't among the site's claims. Not counted above.

Noticed

Lock lookup returns live data

Opening the $MAST token page called api.mastsol.fun/v1/mast/... and showed 1 holder with 34.20M tied (3.44% of supply), linked to Solscan, plus an unlock chart and an embeddable badge. Going back to the home page called api.mastsol.fun/v1/masts and listed the fleet; the $MAST share there had changed from 3.42% to 3.44%.E28E31

Noticed

Unlock dates differ on token page

On the $MAST page, the only holder row says it is locked until 4 Feb 2027. The "Next rope loosens" figure and the unlock chart both show 2026-11-04 instead.E28

What it is

  • The Internet Archive has never saved this site, so it is probably new.E26
  • The site describes itself as: “Holders lock their own bags on Solana, in the open, until a date they choose. Nobody can untie them early: not them, not us. See how much of”E2
  • While loading, it called 1 endpoint on its own servers, such as /v1/masts.E18

Where your data goes

Analytics & trackingCount visits and record what you do on the page. 1
static.cloudflareinsights.comCloudflare Web Analytics: page-view counter 1×E7
Crypto & walletsConnect wallets, read blockchains or fetch token prices. 3
phantom.comPhantom: Phantom wallet 95×E13
phantom.appPhantom: Phantom wallet 1×E12
ipfs.ioPinata / IPFS: decentralised file storage 5×E10
Consent & bot protectionCookie banners, CAPTCHAs and bot checks. 1
cdn.cookielaw.orgOneTrust: cookie consent banner 2×E14
FontsDownload typefaces. 2
fonts.gstatic.comGoogle Fonts: fonts 5×E8
fonts.googleapis.comGoogle Fonts: fonts 1×E5
CDNs & hostingDeliver files (scripts, images) quickly from servers near you. 1
cdn.jsdelivr.netjsDelivr: open-source file CDN 1×E6
Not identifiedServices we don't have in our list yet. 1
edge.uxento.ionot identified 1×E11

Crypto and wallets

  • Wallet tools in the code: web3.js, Solana web3 / wallet adapter and Phantom.E15E16E17
  • signTransaction: asks a wallet to sign transactions (often Solana wallets).E24

How key features work

What it can ask your wallet to sign

Its code can ask your wallet for signTransaction. Each of these opens a wallet pop-up you must approve; read it before you click.E24

signTransaction

Connecting your wallet

It connects to crypto wallets using web3.js, Solana web3 / wallet adapter, Phantom and signTransaction. Connecting shows the site your wallet address; it doesn't move funds by itself.E15E16E17E13E12

web3.jsSolana web3 / wallet adapterPhantomsignTransaction

Loading its content

Its content loads from its own API while you browse (/v1/masts).E18

/v1/masts

Measuring what you do

Visits and clicks are measured with Cloudflare Web Analytics (found in its traffic or its code).E7

Cloudflare Web Analytics

Pages and API calls

Pages it links to

/

Endpoints

Called while loading (seen) or named in the code (code).

api.mastsol.fun/v1/mastsseenE18
/v1/rpccodeE19
/v1/mastcodeE20
/v1/walletcodeE21
/v1/configcodeE22

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: MAST · Tie yourself to the mast
page title · https://mastsol.fun/
E2
Page description: Holders lock their own bags on Solana, in the open, until a date they choose. Nobody can untie them early: not them, not us. See how much of any token
page description · https://mastsol.fun/
E3
Main heading: Tie yourself to the mast.
page h1 · https://mastsol.fun/
E4
5 request(s) to mastsol.fun
types: 2 image, 1 document, 1 script
GET https://mastsol.fun/ · image · 5 requests · network recording
E5
1 request(s) to fonts.googleapis.com
types: 1 stylesheet
GET https://fonts.googleapis.com/css2 · stylesheet · network recording
E6
1 request(s) to cdn.jsdelivr.net
types: 1 script
GET https://cdn.jsdelivr.net/npm/@solana/web3.js@1.98.0/lib/index.iife.min.js · script · network recording
E7
1 request(s) to static.cloudflareinsights.com
types: 1 script
GET https://static.cloudflareinsights.com/beacon.min.js/vce701823e78c4301a35b7e07294d87301792088814092 · script · network recording
E8
5 request(s) to fonts.gstatic.com
types: 5 font
GET https://fonts.gstatic.com/s/marcellussc/v14/ke8iOgUHP1dg-Rmi6RWjbLE_htac.woff2 · font · 5 requests · network recording
E9
1 request(s) to api.mastsol.fun
types: 1 fetch
GET https://api.mastsol.fun/v1/masts · fetch · network recording
E10
5 request(s) to ipfs.io
types: 5 image
GET https://ipfs.io/ipfs/bafkreifn4g4wjqpov3vq7wsjiz4qcjahsfe2gub6twb3krfob7cyao4qg4 · image · 5 requests · network recording
E11
1 request(s) to edge.uxento.io
types: 1 image
GET https://edge.uxento.io/image/Cx83EqERns2VuiKrkwHegTuECVqZebsNhJ3dCU8CucWG · image · network recording
E12
1 request(s) to phantom.app
types: 1 document
GET https://phantom.app/ · document · network recording
E13
95 request(s) to phantom.com
types: 65 script, 25 stylesheet, 4 font
GET https://phantom.com/ · script · 95 requests · network recording
E14
2 request(s) to cdn.cookielaw.org
types: 2 script
GET https://cdn.cookielaw.org/consent/019d2154-6cca-7213-845c-b81bb9fdad3a/OtAutoBlock.js · script · 2 requests · network recording
E15
web3.js found in the code
mastsol.fun/ (page HTML) @ 187:51 · “web3.js” · pattern scan
E16
Solana web3 / wallet adapter found in the code
mastsol.fun/ (page HTML) @ 187:43 · “@solana/web3.js” · pattern scan
E17
Phantom found in the code
mastsol.fun/ (page HTML) @ 258:26 · “window.phantom” · pattern scan
E18
The page called /v1/masts on api.mastsol.fun (GET)
GET https://api.mastsol.fun/v1/masts · fetch · network recording
E19
The code names the endpoint /v1/rpc
mastsol.fun/ (page HTML) @ 230:38 · “/v1/rpc” · pattern scan
E20
The code names the endpoint /v1/mast
mastsol.fun/ (page HTML) @ 357:24 · “/v1/mast” · pattern scan
E21
The code names the endpoint /v1/wallet
mastsol.fun/ (page HTML) @ 409:44 · “/v1/wallet” · pattern scan
E22
The code names the endpoint /v1/config
mastsol.fun/ (page HTML) @ 409:102 · “/v1/config” · pattern scan
E23
1 links to pages on the same site
page links · https://mastsol.fun/ · /
E24
Wallet request in code: signTransaction
asks a wallet to sign transactions (often Solana wallets)
mastsol.fun/ (page HTML) @ 279:33 · “signTransaction” · pattern scan
E25
The site says: “…ey prove it. Lock your own bag until a day you choose, on chain, where nobody can untie you early: not you, not us, no…”
page text · https://mastsol.fun/ · …ey prove it. Lock your own bag until a day you choose, on chain, where nobody can untie you early: not you, not us, no…
E26
The Internet Archive has no saved copy of mastsol.fun
page web archive · https://web.archive.org/web/*/mastsol.fun
E27
Agent step 1: view
AI agent step 1 · view on /
E28
Agent step 2: click How tied is $MAST
AI agent step 2 · click on / · page called POST mastsol.fun/cdn-cgi/rum, GET api.mastsol.fun/v1/mast/6n3TUiXLPVk9gUJfMNSZycg5FxEdefjiXXH4nDZQpump
E29
Agent step 3: click Tie yourself to this mast
AI agent step 3 · click on / · page called POST mastsol.fun/cdn-cgi/rum
E30
Agent step 4: go /
AI agent step 4 · go on / · page called POST mastsol.fun/cdn-cgi/rum
E31
Agent step 5: click MAST
AI agent step 5 · click on / · page called POST mastsol.fun/cdn-cgi/rum, GET api.mastsol.fun/v1/masts
E32
Agent step 6: type Paste a token address (not done: Blocked: we don't type into login, contact, payment or wallet fields.)
AI agent step 6 · type on /

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • The code reader hit its size budget on parts of 1 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id jGpFJBw0.