Blackhole talked to 5 outside services on a first visit, including 1 that measures visits or shows ads.E5
Before you click anything, the page loads analytics or ad services: Cloudflare Web Analytics.E5
3 cookies were set in your browser, 3 of them by other companies' domains.E10E11E12
Its code can ask your wallet to give an old-style 'eth_sign' signature, approve token spending, sign structured data (logins, orders or off-chain approvals), send transactions and 2 more. Read every wallet pop-up before approving.E134E141E135E136E140E142
Tech check
What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.
The page doesn't make tech claims we check for (AI, on-chain, wallets, trading, own chain, staking, live data, an app).
Contract calls in its codequery, addr, resolveWithGatewaysE143E144E145E146
Talks to AI servicesnone seen
Live connectionsnone seen
What it is
The site describes itself as: “Buy and sell any Solana token privately. Every trade crosses a Zcash or NEAR hop before it touches the token, so your wallet and your bag ne”E2
It's built with React and Next.js (common tools for building web apps).E15E16
In your browser it can copy text to your clipboard, stores data in your browser's built-in database, saves small bits of data in your browser and runs compiled WebAssembly code in your browser.E24E25E26E27
It has sections such as /portfolio, /docs, /token, /api/v1/cards/customer, /api/v1/users/me/accept_terms and /api/v1/analytics_events.E71E72
While loading, it called 2 endpoints on its own servers, such as /api/tokens and /api/live.E28E29
Where your data goes
Analytics & trackingCount visits and record what you do on the page.1
Wallet tools in the code: Privy (wallet login), WalletConnect / Reown, viem, web3.js, thirdweb, Phantom and 1 more.E17E18E19E20E21E22
eth_sign: can ask for a raw 'eth_sign' signature, an old method that signs data you can't read.E134
approve: has code to ask for a token spending approval (lets a contract move that token from your wallet).E141
eth_signTypedData: asks you to sign structured data (can be a login, an order or an off-chain token approval).E135
eth_sendTransaction: asks your wallet to send a transaction (can move funds and costs a fee).E136
wallet_sendCalls: asks your wallet to send a batch of transactions in one go.E140
signTransaction: asks a wallet to sign transactions (often Solana wallets).E142
Contract functions the app calls by name: query, addr, resolveWithGateways, tokenURI, uri, text, reverseWithGateways, findResolver and 22 more.E143E144E145E146E147E148
Chains named in the code: Arbitrum One, Arbitrum Sepolia, Avalanche, Avalanche Fuji, Celo Mainnet, OP Mainnet, Polygon Mainnet, Polygon Amoy and 12 more.E201E202E203E204E205E206
28 contract or wallet addresses are written into the code, including USDC on Ethereum and USDC on Base.E173E179
28 addresses found in the code
0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48 · USDC on Ethereum0x1c7d4b196cb0c7b01d743fbc6116a902379c72380x0b2c639c533813f4aa9d7837caf62653d097ff850x5fd84259d66cd46123540766be93dfe6d43130d70x3c499c542cef5e3811e1192ce70d8cc03d5c33590x41e94eb019c0762f9bfcf9fb1e58725bfb0e75820x833589fcd6edb6e08f4c7c32d4f71b54bda02913 · USDC on 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
Paste any of these into the box on the home page to get the contract's blueprint.
How key features work
What it can ask your wallet to sign
Its code can ask your wallet for eth_sign, approve, eth_signTypedData, eth_sendTransaction and 4 more. Each of these opens a wallet pop-up you must approve; read it before you click.E134E141E135E136E140E142
It connects to crypto wallets using Privy (wallet login), WalletConnect / Reown, viem, web3.js and 4 more. Connecting shows the site your wallet address; it doesn't move funds by itself.E17E18E19E20E21E22
It reads blockchain data (Arbitrum One, Arbitrum Sepolia, Avalanche, Avalanche Fuji and 4 more) to show balances, prices or contract state.E201E202E203
Sign-in and account features show up in its code or traffic (/api/v1/users/me/accept_terms, /api/v1/oauth/unlink, /api/v1/siwe/authenticate and /api/v1/siws/authenticate).E39E44E52
Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.
E1
Page title: Blackhole · Private trading terminal for Solana
page title · https://blackhole.exchange/
E2
Page description: Buy and sell any Solana token privately. Every trade crosses a Zcash or NEAR hop before it touches the token, so your wallet and your bag never meet o
page description · https://blackhole.exchange/
E3
Site name: Blackhole
page site_name · https://blackhole.exchange/
E4
92 request(s) to blackhole.exchange
types: 55 fetch, 31 script, 2 font
GET https://blackhole.exchange/ · fetch · 92 requests · network recording
E5
1 request(s) to static.cloudflareinsights.com
types: 1 script
GET https://static.cloudflareinsights.com/beacon.min.js/vce701823e78c4301a35b7e07294d87301792088814092 · script · network recording
E6
1 request(s) to explorer-api.walletconnect.com
types: 1 fetch
GET https://explorer-api.walletconnect.com/v3/wallets · fetch · network recording
E7
39 request(s) to auth.privy.io
types: 34 script, 2 fetch, 1 document
GET https://auth.privy.io/api/v1/apps/cmvqknjdk01880hlb16ybl3u9 · script · 39 requests · network recording
E8
9 request(s) to assets.geckoterminal.com
types: 9 image
GET https://assets.geckoterminal.com/ce8c5k84cgwco4owhhgu9okki6cd · image · 9 requests · network recording
E9
10 request(s) to coin-images.coingecko.com
types: 10 image
GET https://coin-images.coingecko.com/coins/images/102179786/large/tbchn1vldi9o8ag4z4wvcu3dn7z4. · image · 10 requests · network recording
E10
Cookie '_cfuvid' set for privy.io
session cookie
cookie _cfuvid on privy.io · value not stored
E11
Cookie 'cf_clearance' set for privy.io
kept for about 365 days
cookie cf_clearance on privy.io · value not stored
E12
Cookie '__cf_bm' set for privy.io
kept for about 0 days
cookie __cf_bm on privy.io · value not stored
E13
localStorage: 3 key(s) saved in your browser
localStorage keys: privy:caid, privy:sent:cmvqknjdk01880hlb16ybl3u9:408, privy:connections · values not stored
E14
IndexedDB: 1 key(s) saved in your browser
IndexedDB keys: WALLET_CONNECT_V2_INDEXED_DB · values not stored
E15
React detected by REA (react-runtime)
confidence: medium
blackhole.exchange/_next/static/chunks/362okfsn3nwqz.js · “react-runtime” · REA analyze-web-bundle 6.4.0
E16
Next.js detected by REA (next-runtime)
confidence: high
blackhole.exchange/ · “next-runtime” · REA analyze-web-bundle 6.4.0
We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
Some trackers only load after you accept cookies or log in, so the real list can be longer.
We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
REA hit its size budget on parts of 31 large bundle file(s); those parts weren't fully analysed.
Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id lEV8DZPE.
$大Anew
$ANTSnew
$Williamnew
$USDFnew
$SHERWOODnew
$QBLACKnew
$cumrocketnew
$Maxxingnew
$Blackholenew
$SUIT Pennew
$Gramnew
$Queenienew
$MESHnew
$熊new
$Cage
$MESH
$VEIL
$PAID
$BATON
$DARK
$XTO
$MISTAKE
$HOOKED
$E/ACC