JustSendIt, explained plainly

JustSendIt is a website built around two joke cryptocurrencies called $SEND and $GWC. A joke cryptocurrency, usually called a memecoin, is a coin made for fun and community rather than for solving a problem. Most of them lose all their value. That is not a warning buried in small print here; it is the starting assumption the whole site is designed around.

The site does four things. It explains how to buy the coins if you have never bought crypto before. It gives people a place to hang out, post, and follow each other. It runs a points game that rewards showing up and taking part. And it scans brand-new coins as they appear and flags the ones that look dangerous.

Here is the important part. The site never holds your money, never asks for your password to a wallet, and never tells you to buy anything. It is a scoreboard and a clubhouse, not a bank and not a broker.

A blockchain is a shared public notebook. Every transaction anyone makes is written in it, everyone can read it, and nobody can quietly erase a page. These coins live on one called Robinhood Chain. Every blockchain has an ID number so software knows which one it is talking to. This one is 4663.

Each coin is a small program living at a fixed address on that chain. An address is a long string starting with 0x. It is like a house number: it never changes, and anyone can look up what happens there.

One detail matters and is stated openly across the site: $GWC charges a 5% fee when you buy and another 5% when you sell. $SEND charges 1% on buying, selling and transferring, and that 1% is added back into the trading pool. These are properties of the coins themselves, not of this website, and the site cannot change them.

Most crypto websites are adverts. This one is built with a short list of things it is not allowed to claim, and those rules show up in the code and the copy, not just in an about page.

• It never says a coin will go up. It shows what the chain says and lets you decide.
• It never claims to be unhackable. No site can honestly promise that, so it does not.
• It is not connected to Robinhood the company. The chain is called Robinhood Chain. That is where the name comes from and nothing more.
• It calls itself entertainment. Points, levels and games are for fun. They are not money and cannot be exchanged for money.
• It never inflates a number. If the site cannot verify something, it says so instead of guessing.

Reading is open. Joining takes a ticket.

You need to tick one box to read this site: that you are 18 or older. It is asked once per device, before the page can be seen (on the front page, the moment the loading screen ends), and remembered for a year. Saying you are under 18 keeps the site closed. The site will not make an account without that tick, and it records on the account when it was given. The privacy and terms pages are the one exception and open without it. After that you do not need anything to read. The front page, the wall, the risk scanner, the competitions, other people's profiles and every Send Call are open to anyone who visits, signed in or not. Two things are behind a sign-in. The New Pairs radar on the Scanner page (section 13) is for members: scanning any one address is open to everyone, the live feed of brand-new pools is not. And each community's holders-only wall (section 11) can only be read by its verified holders. The pages listed above are open to anyone, and search engines may read every one of them. A member's profile is only offered to search results once they have chosen their own @username and put at least one public post on their wall; until then the page asks search engines to leave it out.

You do need an invite code to make an account. Someone already inside sends you one of theirs, and the moment you try to sign up — from any page — a ticket headed Ticket to Send 🚀 opens over whatever you were reading. It states how to get in before you type anything — a code from someone already inside, ten codes of your own once you are in, and the read-only $100 of $SEND wallet check that full access takes — then you enter the code and make your account. Your own codes last as long as your account does: delete it, and the ones you have not given out stop working.

You can always close it. Every step of the ticket has a way out that says so plainly, and closing it puts you back exactly where you were, still reading. A door you cannot walk away from is a wall, and this site does not put one in front of people who are only looking.

Four details worth stating:

• Each code works once. When you get in you are given ten of your own to hand out, which is how the room fills up.
• Your Send ID is your place in line — the number you were when you joined. It is fixed the instant your account exists and never changes. It is printed on your ticket, which you can download as a picture with your name and profile photo on it.
• A code you have already handed out is shown to you as used, and cannot be copied again. The site does not even show you the rest of its characters, because there is nothing to copy: it will never work a second time, and sending a friend a dead code is worse than sending none.
• Three accounts per connection. The site counts how many accounts have been made from one internet connection in the last 90 days, and refuses a fourth. A household sharing one line fits inside that; a ring of fake accounts does not. If several people really do share a connection, one account can link up to five wallets, and every one of them counts toward the same Send Power. The connection itself is kept only as a fingerprint (Section 5), and that fingerprint is erased 90 days after the account was made.

Once you have a ticket, you can join with a crypto wallet or with an email and password. The code can also sign people in through Google, Facebook, X or Instagram, but each of those appears only when whoever runs the site has switched it on with that company’s app keys; one that is not switched on is not offered at all. The invite is checked at every way in — and at nothing else on the site.

You pick your @username as you join. It is your public name, and you can sign in with it as well as with your email. Joining with a wallet asks for the name first, before the wallet connects, and can also take an email and password as a second way in — optional, and useful if you ever want to sign in without the wallet. Both forms offer to set up two-factor straight afterwards; that is optional too, and for the first hour of a new account nothing in its settings asks for a password. If the email you give already belongs to another account, the sign-up is not refused — a refusal would tell anyone with a ticket who is a member. Your account is made without that email: you sign in with your @username and password, and can set a different email later.

Making an account, and then using it

These are two different things here, and the difference is the point.

An email is enough to make an account. No wallet, no signature, no coins. You can read every page, check in each day, and set up your own profile — your name, bio and colours — though that earns no points until the check below passes. Pictures are uploads like any other and wait for the check.

A wallet is what lets you do things. Posting, calling, commenting, reacting, voting, joining a community — all of it waits behind one read-only check, which opens the moment you try, over whatever page you were on. It asks two questions of the chain, across every wallet you have linked:

• Do you hold at least $100 of $SEND? Valued at the lower of the live price and the price the $SEND pool actually sat at over the last 24 hours — its time-weighted median, rebuilt from the pool’s own reserves — so a minute-long pump cannot buy anyone through the door; a pump has to hold for half a day before it moves that median at all. If the live price is more than three times that median, or the chain cannot be read, the site refuses to value the bag and nothing is decided. A dust balance is not a holding, and there has to be a market buy behind the bag: a wallet that has only ever received $SEND from somewhere else has not bought any.
• Are you a net seller? Of the coins that moved between you and the market, no more may have gone out than came in.

And one question of the site's own records: has this wallet already let someone else in? A wallet can open the door for one account only. The moment it verifies an account it is remembered — as a keyed hash, never the address itself — and linking it to a second account will not verify that one, however much it holds. Unlinking the wallet does not release it, and neither does deleting the account it verified. Otherwise one $100 bag could be linked, used, unlinked and passed along forever, and the check would be counting the same coins as many times as anyone cared to move them.

There is no waiting period, and the first day is watched instead. The check used to ask a third question — whether you had held for over a week — and it no longer does. The door opens the moment you hold the bag. In exchange, for 24 hours after your most recent market buy, the position that opened the door has to still be there: let that balance drop by more than about 2% inside that window (a partial sale and a transfer out count the same; the 2% exists because a transfer fee or a dust rounding is not a sell) and it counts as a strike on the same ladder as every other anti-cheat trigger (Section 15): read-only for a day the first time, a week the second, for good the third, bought out at $25 of $SEND per day of the sanction and doubled if that bought bag is sold before its hold is up. The window is anchored on the buy rather than on the sign-up, so somebody who has held since long before today is never in one at all. A week of waiting asked everybody to prove patience before they had done anything; this asks only the person who actually dumps to answer for it.

What $100 actually means on $SEND. At the market prices of 13 September 2026, when this version was written, $100 was about 0.027% of $SEND’s ten billion supply, so on the order of 3,763 wallets could clear this bar at the same time. ($GWC is far tighter — one billion tokens at a market value then around $11,650 made $100 roughly 0.86% of every $GWC in existence, about 116 wallets — which is why the gate no longer asks for it. That floor still applies to the OG badge and to Diamond status, where it is doing a different job.) These are the only figures in this paper that move: they follow the price, and the site values the check at the lower of the live price and the median of the last 24 hours, so a momentary spike cannot buy anyone through the door. The number is a deliberate choice made with the arithmetic in hand, not a round figure picked without checking what it buys.

The check itself is not a punishment. Read-only mode (Section 15) is a penalty with strikes and an escalating ladder. This is simply a new account that has not shown its hand yet, and the site says so in those words. The first-day sell window above is the one part of it that is a penalty, and it is worded as what it is: a strike on that ladder.

Nothing about it can move your money. You sign a sentence to prove the wallet is yours. That signature moves nothing, approves nothing, and costs no gas. This site never asks a wallet to send anything, anywhere, and it has no code that could. A wallet that cannot sign (a GMGN wallet, say) is proved another way: within an hour, you send the exact dust amount of $SEND the site shows you (two cents' worth at most) from it to the burn address yourself, in your own wallet app. That is the one proof where something leaves the wallet, by your own hand, and it is gone for good; the site only reads it on the chain, and an account that uses it signs in with an email and a password, because a burn cannot sign anyone in.

Your history is read from the chain itself. Every transfer of a token is recorded on the blockchain as a log, so the site reads your wallet’s whole $SEND history — everything it ever sent and received — straight from the chain, and checks that it adds up to your wallet’s balance before deciding anything. A block explorer is only asked first when the site has a paid one configured; the public explorer refuses servers, so without one the chain answers directly. Signing in with a wallet starts the check on its own.

A buy is a buy, whichever app carried it. Most swaps do not come straight from the pool: a router or an aggregator takes the pool’s coins and passes them on to you. So the site asks the chain what the pool itself did in the same transaction. If the pool sent $SEND out, the coins that reached you count as bought — but never more than the pool actually sent, so a contract cannot forward coins from its own stock and call them a purchase. Selling is read the same way in reverse. A transfer from another person’s wallet, with no pool movement behind it, is still not a buy.

If the chain cannot be read, nothing is decided. The check can fail to complete — the public node throttles bursts of reads. When that happens the site says nothing has been decided and asks again by itself every fifteen minutes, rather than recording a refusal it did not earn. Answers that only need your history — no balance, nothing bought from the market, more sold than bought — are given even while the price cannot be read.

Once you pass, the rest of your profile is yours to shape: claim your handle, and then, entirely optionally, add an email and password, turn on two-factor, and link more wallets, up to five in all. A wallet-only account is a complete account. (An account that proved a wallet by a burn already has an email and password: a burn cannot sign you in.)

Signing in with a wallet

A wallet is an app that holds your coins. Signing in with one does not hand it over. The site shows you a sentence and asks your wallet to sign it, the way you might sign your name to prove it is you. Signing a sentence moves nothing and gives permission for nothing.

The sentence has the website's own address written inside it. That matters. If a scammer copies this site onto a lookalike domain, the sentence their fake site shows will name their address, so an alert reader can spot the mismatch before signing. The site also invents a fresh random code for each attempt, so an old signature cannot be reused later.

Signing in with a password

Passwords are never stored. They are put through a slow scrambling process called scrypt, which is deliberately hard for a computer to run millions of times, so guessing is expensive. Only the scrambled result is kept. Passwords are also capped at 1024 characters so nobody can jam the server with an enormous one.

Two-factor

You can add a second lock in one of three ways. One is a six-digit code from an authenticator app that changes every 30 seconds. Another is a wallet signature — from the one linked wallet you chose when you turned it on; wallets linked afterwards do not count, so a stolen session cannot add a fresh wallet and use that. And an account that started with a wallet and later added an email and password can use that password as the second factor for wallet sign-ins. Turning any two-factor off, or changing which wallet is the key, requires the current factor — at the change, or at the “confirm it's you” step within the last 30 minutes (section 6) — so someone who steals a logged-in session cannot remove it unless they took it inside that window. Code guessing is rate-limited and gives up after five tries, which destroys the half-finished login.

Everything personal is stored scrambled, using a method called AES-256-GCM. Think of it as a safe that also has a tamper seal: without the key you cannot read what is inside, and if anyone alters the contents the seal breaks and the site refuses to trust it.

The key lives outside the database. In a proper deployment it is set as an environment variable. On a developer's machine the server makes one and writes it to a file only the owner can read.

Your preference settings are scrambled the same way. What is not scrambled is what is already public — usernames, posts, comments, calls and the boards — because searching, sorting and drawing every wall needs to read it, and scrambling it would hide nothing.

The Data API — one door, one key

Anyone who wants the site’s data in bulk — for an AI, a bot, a spreadsheet — goes through one door. A year of access is minted for an account whose linked wallets have sent at least its price — $1,000 of $SEND, half for OG Silver, three quarters for OG Bronze, nothing for OG Gold — to the burn address, checked on the blockchain and valued at the lower of the live price and the day’s median, so a momentary spike cannot inflate it. A key lasts a year and spends the tokens that were worth that price on the day; renewing takes another burn and adds a year. One burn backs one key at a time. OG Gold pays nothing and never expires while the badge is live; OG Silver pays half; OG Bronze pays three quarters. Burning is permanent and buys nothing but the key; the site does not tell anyone to do it.

The key opens everything that is already public, in bulk, and everything in the holder’s own account, unscrambled for them. It never opens anyone else’s private data — a burn does not change whose data it is. The key itself is shown once and stored only as a fingerprint, so a stolen database does not contain it.

The clever bit: looking things up without unlocking them

If your email is scrambled, how does the site find your account when you log in? It keeps a second value called a blind index: a fixed fingerprint of your email made with a secret key. Two identical emails always make the same fingerprint, so the site can match you, but the fingerprint cannot be turned back into your email.

Web attacks mostly work by getting a browser to run code it should not, or by tricking your browser into doing something while you are logged in. The site closes those doors with rules the browser itself enforces.

The strict list

A Content Security Policy is a list the site hands your browser saying where code and images may come from. This one is unusually tight: scripts may only load from the site itself and the analytics hosts the policy names, and there is no inline script anywhere on any page. If an attacker somehow slipped a script tag into a post, the browser would refuse to run it.

Checking who asked

Whenever something changes — a post, a call, a setting — the server checks which website the request came from and rejects it unless it came from this one. That stops another site from acting for you while you happen to be logged in.

Confirming it's you, once

A change to how you get into your account — adding an email or a wallet (your first wallet too), changing your password or email, turning two-factor on or off, unlinking a wallet or disconnecting them all (whether two-factor is on or not), making a data key, deleting the account — needs proof that you are the owner and not just someone holding your logged-in session: your password, if the account has one, and your two-factor step, if it is on. An account that only has a wallet signs with a wallet old enough to vouch for it.

You give that proof once, at the first such change. Your session is then unlocked for security changes for 30 minutes, and the settings stop asking. Signing in does not unlock anything, so a session stolen at the moment you log in is not already unlocked — except that the session which creates a new account is unlocked for an hour, so setting up a new account never asks for the password you just chose, and an account that signs in only through a social sign-in (Google, Facebook, X or Instagram, where the site has one switched on) is unlocked by signing in, because that is the only proof it has. The window does not grow when you use it; Lock now in Settings ends it early; and when anything about how the account signs in changes, the windows on your other devices close. The honest limit: someone who steals your session inside an unlocked window can make those changes until it ends — which is why it is short. The proofs that a new key really works are never skipped: turning on an authenticator still takes a code from it, making a wallet your second factor still takes that wallet's signature, and making your password the second factor takes the password itself.

“That email already belongs to another account” is a fact about somebody else, and there is no email this site could send instead — when you set an email in your settings you need to know whether it took, and a sign-up whose email was not added has to tell you. So that answer is rationed: three every 30 days, counted per account and per connection, so deleting an account and making another does not reset it. After the third, adding or changing an email (and signing up with one, from that connection) pauses until the 30 days are up, with the same answer for every address, in use or not. Someone with many connections and many invites could still ask a few times each; the ration is what keeps it from being free.

Speed limits

Nearly every action has a cap on how often it can be repeated. Making Send Calls is limited to 10 attempts every 10 minutes, comments 25, joining communities 30, and starting a community 3 per day. Logins and wallet challenges are limited per IP address. The limits sit far above what a real person does and far below what a script needs.

Uploads

The site does not trust what a file calls itself. It reads the first few bytes of every upload and checks they match a real image or video. A file named cat.png that is secretly a program fails that check.

It also strips what a phone writes inside the file. A photo or video carries where it was taken and on what device — hidden fields in a JPEG, PNG, WebP or GIF, and the tag blocks in an MP4 or WebM, which is where a phone puts the location. Every upload has those removed before it can be served, and the pixels, sound and timing are left exactly as they were: a JPEG keeps its orientation, so a phone photo is not turned on its side, and colour profiles stay. Uploaded files are served to anyone byte for byte, so a file the site cannot read well enough to clean is refused rather than published as it came.

This is the part people worry about most, so here it is precisely.

The site never takes custody. It never sees a private key or a recovery phrase, it cannot move your coins, and it cannot approve anything on your behalf. Linking a wallet is normally a signature, which proves ownership and nothing else. A wallet that cannot sign can be proved instead by a burn of an exact dust amount of $SEND, shown to you, that you send from it yourself, in your own wallet app; the site never builds or sends that transaction, it only reads it on the chain, and once linked the wallet is read-only in the same way.

There is exactly one feature where the site builds a transaction, and it is the built-in swap. When you use it, the site builds a transaction and hands it to your wallet. You approve it, in your own wallet, and then your ETH really does leave. Nothing else on the site can spend anything. (A burn — to prove a wallet that cannot sign, or for a Data API key — is a transaction you make yourself, in your own wallet app; the site only reads it.)

How holdings are checked

Your rewards depend on what you actually hold, so the site never asks your browser. It reads your balance straight from the blockchain on the server, where you cannot edit the answer. A check is only trusted for 26 hours. After that your bonus pauses until it is re-checked, which happens automatically whenever you open your dashboard.

That pause is deliberate. Without it, someone could get verified once, sell everything, and keep the bonus forever.

The wallet tracker

You can save wallet addresses to watch what they do. These are read from public blockchain records, they are private to your account, and they are stored scrambled.

Send Power is the points system. Almost everything useful earns some. Points are also experience, so earning them raises your level.

Three rules keep it fair. Nearly every action has a daily cap, so it cannot be repeated forever for points. Every award is recorded with a unique tag, so the same action can never be paid twice. And the balance decays when you stop showing up, so the number describes the present rather than the past — that is Section 8b, and it is the one people are most often surprised by.

One exception, and one limit that stands in for it. A call’s milestones have no daily cap, because they are earned by a coin’s real performance rather than by repeating an action. But everything a single call ever pays its caller — the opening award, every milestone and the hold bonus together — comes out of one lifetime budget: the Send Power it takes to reach Level 70, about 737,000. No single payout may take more than a tenth of it. Someone who Sends It on your call has a budget of a quarter of yours. A great call is a big prize; it cannot be the whole game.

Two ceilings sit on top of all of this. No single award can exceed 73,762 points, a tenth of what one Send Call can pay in its lifetime. And every capped action in the table above, plus the check-in, shares one budget of 73,762 points per rolling 24 hours, however large your multipliers. Note what that includes: opening a Send Call, tapping Send It and finding a hidden egg all have daily caps, so they draw on the same shared budget as posting. Only three things sit outside it — the milestone ladder and the two hold bonuses. Boosts pay in full on a call held in profit; on everything else they pay until the day’s ceiling. That is what keeps Level 100 a long climb for everyone.

There is also a quieter ceiling worth knowing: the opening award for a call, and the Send It award, are each capped at ten times their size-scaled base no matter how large the boost stack behind them. Someone calling a coin with no position of their own can never be paid more than 1,200 for opening it. Boosts are for the grind and for holding in profit; they cannot turn the act of making a call into a payday.

Biggest Sender — a fresh race every week

Every Monday at midnight UTC the Biggest Sender board goes back to zero, so a week’s standings are only what you earned inside that week. When the week ends the site settles it by itself: the top ten each receive a Send Power boost by finishing place — first place 5×, then 4.5, 4, 3.5, 3, 2.5, 2, 1.75, 1.5 and 1.25× for tenth; tied places share a rung — added on top of everything they earn for the whole of the following week.

The race is proof of work. The board ranks base points — what you did, with every boost taken out: Holder, OG, community, Rocket Run and any prize you were carrying — so a whale, an OG and a newcomer race on the same footing. Exactly ten prizes are paid; a tie at the edge goes to whoever joined first.

Levels and titles

Levels get harder as you climb, because each level costs a bit more than the last plus an amount that doubles roughly every seven levels. There is no maximum level.

Everything above describes how the number grows. It also shrinks. Send Power is a balance, not a trophy — it drains a little every day you do not show up, and levels can go down as well as up.

This is the part most people will find surprising, so here is the reasoning. A score that only ever climbs stops describing anything after a year. Someone who played hard for a month and left outranks someone playing every day now, permanently, and no amount of present effort can catch a large enough head start. A leaderboard like that is a history book. Making the number decay is what keeps it a description of who is actually here.

What is taken, and when

Two days off cost nothing. After that, each day without a check-in takes 0.4% of the balance, and the rate climbs by 0.2 percentage points for every further consecutive day away. Two other things add to the same daily rate: being in read-only mode adds 1 point, and every Send Call of yours currently below its entry price adds 0.3 points, up to 1.5. Whatever the total, one day can never take more than 4%.

What stops it

The daily check-in, and nothing else. Holding coins does not stop it, and neither does having a high level. Anyone can check in, including a restricted account — read-only pauses what you can make, not your ability to defend what you already earned.

It stops two of the three components. A check-in within the 24 hours before the sweep sets the absence streak to zero and skips the underwater-call charge entirely, so on a day you show up those cost you nothing. The bad-call rate only ever applies on a day you were already away: a call that went down is a market outcome, not misconduct, and billing someone daily for one while they are actively taking part would be a far harsher rule than the one intended.

The read-only charge is the exception. It is the one component a check-in does not cancel — while restricted you pay its flat one point a day regardless. A penalty that stops costing anything the moment you tap a button is not a penalty. But it is all you pay if you keep showing up: a steady 1% a day, rather than that plus an absence rate climbing toward the ceiling.

One consequence worth stating: since a Send Call can never be closed or deleted, a call that is still below its entry price a year later still counts as underwater. Old bad calls keep making absence more expensive, permanently. They cost nothing on any day you check in.

The floors, so it cannot ruin anyone

A balance at or below 5,000 is never touched at all, and the drain can never take you through that floor or below zero. If a day's drain works out to less than one whole point it takes nothing rather than rounding up. Someone who stops playing does not have their account emptied; they settle toward the floor and stay there.

Decay only ever moves the points balance. It does not touch your Holder Boost, your Diamond level, your OG tier, your badges, your community memberships, or any call's recorded history. What you did stays on the record; what you are currently worth on the board is what moves.

Base points are only the start. Six separate bonuses add together — each contributes what it pays above 1× — and that one sum is what your base points are multiplied by. Bonuses never multiply each other: OG Gold at 10× plus a community at 10× is 19×, not 100×.

Holder Boost — owning the coins

The more of the coin supply you hold, the bigger your bonus. Every weighted 1% of supply adds 10. $GWC counts three times as much as $SEND for the same percentage.

That number is then multiplied by your Diamond level, which rewards holding without selling. Selling resets the streak to zero — a market sell from one of your linked wallets, a wallet you unlinked, or a wallet you sent the coins to. Moving coins between wallets is not a sale and never resets it.

A bag only counts at $100. Before any of this applies, the coin has to be worth at least $100, priced at the live market — and that is the rule for every token on this site, not just these two: $SEND, $GWC, community tokens, and any token a conviction play is measured on. Below the floor you hold dust, and dust earns nothing new: no Diamond days, no multiplier, no community verification, no extra tracker slots. (A streak already running pauses and keeps its level and badge until a sale resets it.)

The floor exists because every reward on this page is time-based, and the balance behind it used to be checked only for “more than nothing”. One cent of $GWC, held for thirty days and touched by nobody, reached Diamond Forming and applied a ×6.3 multiplier to a whole account; at two years it reached ×100. That is not conviction, it is a calendar, and it was the cheapest route to the largest multiplier on the site. Four details make the rule fair rather than merely strict:

• It is measured in dollars, not tokens, so it survives a coin's own price moving.
• Each coin is judged separately. $100 of $SEND and $100 of $GWC are two different bags clearing two different floors, and they carry two different streaks.
• Only a sale resets a streak. If a coin drops below the floor in your linked wallets for any other reason — you moved the coins out, unlinked a wallet, or the price fell — its streak pauses: the days stop, and pick up where they left off once your linked wallets hold $100 of it again. The paused days never count.
• A price we cannot read is not an answer. If the market is unreadable, your last verified status stands — an outage somewhere else can never reset a streak you spent months earning.

Your dashboard shows the live dollar value of each bag against the floor, so a holding that is not counting says so rather than quietly paying nothing.

$GWC days count double. The “days held” that pick your row are not simply the days since you last sold. They are the larger of two numbers: how long you have held overall, and twice how long you have held $GWC. So sixty real days of $GWC reads as a hundred and twenty, which is Flawless Diamond at ×16 rather than Diamond Hands at ×10 — two rows higher than the table alone would suggest. $GWC is weighted twice on time in the same spirit that it is weighted three times on supply.

OG — being early

If you bought both coins and you still hold both, you earn an OG badge and a bonus on everything. There is one standard for everybody — the only thing that changes the size of the bonus is when you got in:

• 💎 Diamond — 20×. You bought both in the first month of $GWC (19 August to 18 September 2026) and you were a net buyer of both that month — across all your linked wallets, more of each coin came in from the market than went back to it. That month is over, so nobody can buy their way into Diamond now: it was decided on the chain back then, and a Gold badge that qualifies is upgraded on its own.
• Gold — 10×. You bought both before the beta ended.
• Silver — 5×. You bought both in the ninety days after the beta ended.
• Bronze — 3×. You bought both before $GWC turned one year old.

Diamond keeps everything Gold gives, and it is lost the same way every tier is: sell out of either coin and it is gone for good. It is not the same thing as the Diamond levels of the Holder Boost below, which measure how long you hold.

After that the windows are shut and no badge is given, whatever you buy. All three deadlines are single moments that apply to both coins alike — gold closes with the beta, silver ninety days later, bronze one year after $GWC launched — rather than offsets from each coin’s own launch, so “when does gold close” has one answer. Your tier is the lower of your two coins, because the rule is that you held both.

Each bag has to be worth at least $100 when the badge is granted — both of them, measured independently at the live price. Buying inside the gold window and keeping ten dollars of each earns nothing. The badge is meant to sit behind a real position rather than a dust balance kept alive to hold a tier, and since the badge is permanent once granted, the floor is the only moment that can ask for proof.

Two things also disqualify a wallet, and they apply the same way in every window. If it dumped its whole holding to nothing inside its first month and it is not a net accumulator — meaning it holds less today than it did at the end of that first month — it does not earn a badge. A wallet that sold out but bought back past where it started keeps its place.

All of this is read from the blockchain, and the check is refused rather than guessed if the data cannot be read completely. Sell out of either coin entirely, at any time, and the badge is revoked for good.

Community — taking part

Being a verified holder in at least one live community is a flat 10×. It is not per community. Joining five communities does not give you fifty times anything. A verified slot means at least $100 of that community's coin — the same site-wide floor — read from a linked wallet, and re-checked continuously — sell it and the slot and the bonus go with it.

Arcade — today's game

Cashing out of Rocket Run gives a bonus of up to 5× lasting 24 hours. Section 12 explains it.

Beta badge — finishing the beta in the top ten

The beta ends at one fixed moment. When it does, the standings are frozen, the ten highest balances are badged by finishing place, everyone’s final score is recorded, and every balance on the site goes to zero — including theirs. The badge is permanent and pays 2× on everything earned from then on. It is one more term in the same additive stack, so it is worth exactly +1 over the base and never multiplies with OG or anything else. The dashboard shows where you stand and the countdown before it happens.

A Send Call is a public prediction. You pick a coin, and a permanent scorecard appears on your wall tracking how it does from that moment on. It is a way of putting your reputation where your mouth is.

A call can never be edited or deleted. That is the whole point. A prediction you can delete after it goes wrong is worthless. Its best-ever result is kept forever, even if the coin later dies.

How results are counted

Results are counted in Xs. Doubling in price is 1X. Going up 340% is 3.4X. Every whole X a call crosses pays a rung, and the rungs climb in a straight line: 170 + 17 × (X − 1). So 1X pays 170, 2X pays 187, 10X pays 323, and the ladder stops at 50X, which pays 1,003. A rung is paid on a price the site can trust, not on the last trade: the lower of the live price and the median of the past hour’s readings (at least six of them; until a coin has that many, nothing is credited), and it has to hold across two consecutive readings, so a single spike cannot pay the whole ladder up to it. While the live price runs more than three times the median, nothing is credited at all and the gap is not back-paid. The pool also has to be deep enough to have paid the X for real: each rung needs $500 of pooled liquidity behind it, so a $5,000 pool can pay at most 10X however high the price goes. The scorecard’s peak and grade still record the live price; only the points wait.

That is deliberately modest, and it used to be otherwise. An earlier version paid the X times the base, so 50X paid 8,500 and the whole ladder was worth more than twenty patient calls put together. Rewarding the size of a single lucky number is not the game this is trying to be, so the ladder was flattened into a straight line. All fifty rungs together now come to 29,325 — about an eighth of what the ladder is even allowed to spend.

Holding is the main event

The ladder is the smaller prize. While a call stays in profit it keeps earning a diamond-hands hold bonus that grows faster than the Xs alone — higher and longer both count, and they compound, up to two limits: height above 50X adds nothing more, and at most half an hour of holding is credited per check (a longer gap between price readings is not paid retroactively, because nobody watched the price during it). Every call has one lifetime budget (Section 8), and it is carved on purpose: the opening award may take at most a tenth of it, the ladder at most three tenths, and at least six tenths are reserved for holding in profit.

It also pays more when you are not alone. When the people who tapped Send It on your call are themselves in profit from their own entry, your hold bonus is larger: one tenth extra per profitable Sender, up to three times. A Sender only counts toward that crew with at least $20 of the coin bought from the pool and still held in a linked wallet, read on-chain when they tap — a tap with nothing behind it is not a crew member. Senders' positions (not the caller's) are read again on-chain whenever a call's Senders list is opened, at most once every five minutes and only for the thirty most recent Senders, so a Sender who sells out drops out of the crew once that re-read catches it, not the moment they sell. That multiplier is applied to the payout, after the curve — folded into the running total instead, as it once was, a three-times crew would really have been worth 5.2 times. A conviction play that carries other people with it is worth more than a lonely one, by three, not by five.

How size is counted. The opening award scales with the position behind the call: the dollar value of the coin you bought from its pool and still hold across your linked wallets, read from the chain at the moment you call. Every $100 of that is 1× the base of 120, the floor is 1× (a call with nothing behind it still opens on the base of 120), and it stops at 100× for $10,000 or more. Tokens sent to you, or bought and then sold back to the pool, do not count, and a position is never valued above the liquidity of the pool it sits in. If the chain cannot be read, the call still goes through at 1×. Send It scales the same way on its base of 30, and pays nothing on a tap with no position.

One honest caveat about the name. “Holding” here means the price holds. The bonus is worked out from the call's current price against its entry price, and nothing re-reads the caller's wallet after the call is made. Someone who sells their whole position keeps earning the diamond-hands bonus for as long as the coin stays up. It is a name for the pattern the bonus rewards, not a claim about the person. The size you had when you called is checked on-chain and hard to fake; whether you are still holding is not checked at all.

The scale runs E to S. The code also defines an F for “underwater”, but a Send Call can never receive it: a call's score is measured against its highest point ever reached, which starts at the entry price and only ever moves up. A call that falls below where it started scores E, not F.

Rules that stop cheating

• A coin needs at least $2,000 of trading liquidity to be callable, and a call stops earning — milestones and hold bonus both — for as long as the pool is below that. Otherwise someone could create a fake coin, trade with themselves, and farm a huge score.
• A pool has to be deep enough to have paid the X for real. Every X that is credited — to the ladder, to the caller's hold bonus, and to the Senders' hold bonus — needs $500 of pooled liquidity behind it at the time of the check, so a $5,000 pool can be credited for at most 10X however high its price prints. The peak on the scorecard is still recorded; the points are not.
• You get 5 calls a day to start, counted over a rolling 24 hours so midnight is not a reset to abuse. A day where one of your matured calls doubled earns you an extra slot, up to 5. A day where they all flopped costs you one, down to a floor of 1.
• Then your Diamond level doubles it, once per level. That earned number of 1 to 5 is multiplied by two to the power of your Diamond level (Section 9), so a level 10 holder is multiplied by 1,024. In practice the allowance runs from 1 a day, for a caller sitting on the floor with no Diamond level, to 5,120 a day. Holding the coins for two years without selling is what buys the right to call that often, and selling resets it to 1× the same day.
• A call is only judged after 24 hours, so it gets a fair chance to run.
• If a coin you called gets rugged — its live liquidity, as the price feed reports it, collapses below $100, whoever pulled it — the call is marked rugged for good and your daily allowance drops by 2, once per rugged call and never below the floor of 1.
• Burning a full day's allowance inside one hour is treated as spam, and only counts if your allowance was 3 or more, so a one-call-a-day user is never punished for using it.
• You cannot call your own coin. If a wallet you have signed with deployed the token or is its current owner — the deployer address is read from the block explorer and owner() from the contract itself, never from anything you tell the site — the call is refused. Call something you do not control. If neither can be read (the explorer does not answer, or the token has no owner()), the rule has nothing to match against and does not fire.
• Several accounts on one connection calling the same coin is treated as a ring. Once three accounts behind the same connection have made a Send Call on the same coin inside seven days, every one of them goes read-only — the whole ring, not just whoever acted last — and each still climbs its own ladder (24 hours, then a week, then permanent). Buying out of that restriction costs double (Section 15). The connection is never stored in the clear: the site keeps only a blind index of it, the same kind of keyed fingerprint Section 5 describes for emails, and that index is erased from a call eight days after it was made. Sharing a connection is fine, and linking several wallets to one account is fine and always counts toward the same Send Power; several accounts pushing one coin from the same connection is what the check is looking for.

Other people can tap Send It on your call to join in. They earn from their own entry price, not yours, and it is capped at 30 a day.

Any coin can have a community. You paste its address, and if it has at least $500 of liquidity and you hold at least $100 of it, priced live, in a wallet you have linked, a page is created, automatically decorated with the coin's logo and links.

A community stays in starting-up mode until 10 verified holders have joined. Only then does it go live.

The account that started a community is paid a one-time founder award of 15,000 base Send Power when it goes live — once per account, however many communities it founds. It is a capped action like the rest of the table, so it comes out of the same shared daily budget; if that budget is already spent on the day the community goes live, the award is recorded as zero and is not paid later.

Proving you belong

To count as verified you must actually hold that community's own coin, checked on the blockchain from a wallet you signed with. This is re-checked in the background. Sell your coins and you lose your verified status and the 10× with it.

Two rules stop one person pretending to be a crowd. No more than 2 verified joins may come from the same network address, and joins from the founder's own network do not count toward their own community going live.

There is one exception to holding: the wallet that created the coin can start its community without holding any, because the chain already proves who they are.

A community also shows what share of the coin’s supply its members hold, as one figure for the whole room: the balances of members’ linked read-only wallets, summed from the chain’s own transfer ledger (or, for a token whose ledger cannot be trusted, read wallet by wallet within a fixed bound), divided by the total supply and rounded to two significant figures. It appears only once three or more members have linked a wallet, because with fewer it would be one person’s balance with extra steps. Nothing per member is ever shown; the figure says when it was last refreshed and, when it came from the ledger, the block it was read at.

Community XP and conviction

Communities level up from what their members do inside them. Members separately earn conviction, which is personal loyalty to that one community.

Conviction is earned only by doing things — there is no accrual for time. Staying a member for a year without posting leaves your conviction exactly where it was on the day you joined. It is a measure of participation wearing the word loyalty, and it is worth being clear about which of the two it actually is.

The public wall reaches the Send Wall

A community nobody can see is a community that never fills, so every public community post also appears on the main Send Wall, carrying its community's name, symbol and picture and linking back to it. Someone scrolling the front page can see a community is alive, tap through, and join on the spot if they hold the coin. The sandbox posts there too, badged as the sandbox.

The holders-only wall is the exact opposite and stays that way: those posts are filtered out in the database query itself, not hidden in the page, so they are never in the result to begin with.

Posting inside a community draws on the same allowance as posting on the wall — twelve posts in ten minutes, wherever you write them — so a community is not a second lane to the front page.

The site also writes two posts of its own per community, in the founder's name and earning nothing: one when it is started, saying how many holders it still needs, and one when it goes live. Each can only ever be written once. Because the one-time first-post bonus counts only posts you wrote to the wall yourself, the site posting in your name does not consume it.

Deciding things together

A live community can put a question to its holders, and only verified holders may open a proposal or vote. It runs in two rounds so a handful of people cannot rush something through: round one lasts three days and needs a simple majority to promote it; round two lasts two days and needs a three-quarters majority to pass. Quorum is 20% of qualified members in round one (at least 5, at most 50) and 30% in round two (at least 6, at most 60). One open proposal per person, five per community. Voting earns community XP like any other participation.

Two walls

Every live token community has a public wall that anyone can read, and a holders-only wall that only its verified holders can see. Anyone may read the public one; posting to either, and reading the private one, needs a verified holding — at least $100 of the token, read from a linked wallet on-chain and re-checked continuously, so selling it closes the private wall again. The open sandbox has no token to hold, so it has no private wall at all.

The private wall is enforced by the server on every route that can return a post — the feed itself is refused to anyone without a verified place, and a single post, its comments, its reactions and its votes all answer “not found” rather than “not allowed”, because “not allowed” would confirm the post is there. Nothing written on it appears on the Send Wall, on a profile, or in the public data feed; the only private posts the data key returns are the key holder’s own.

Caps stop one loud person carrying a community: a single member can push at most 250 community XP per day into any one community, and earn at most 150 conviction there per day.

The weekly competition

Each week the communities are ranked by points earned that week alone. The week runs Monday to Monday in UTC and every score resets to zero at the rollover. All-time community level is untouched.

The ranking measures activity only. Price, market value and holder count count for nothing. There is no prize.

Holder snapshots

Any verified holder of a live community can take a holder snapshot: the public block explorer’s full list of the coin’s holders, frozen at that moment, up to 30,000 wallets. Anyone may read the snapshots a community has taken. At most one can be taken every ten minutes per community, because each is hundreds of calls to a shared public explorer, and an account in read-only mode cannot take one. Every walk is checked against the explorer’s own holder count; one the explorer cut short, rate-limited, or that came up short of that count is stored as partial with the reason attached and is never presented as complete. The sandbox has no coin, so it has no snapshots.

A community is a fan group anyone can read. A Send Squad is the opposite: a private group with a door on it, for people who want a room of their own.

What a squad is

Whoever starts a squad names it, writes a short bio, gives it a picture and a banner, and sets one gate, once. The gate is decided at creation and can never be changed afterwards — there is simply no way to edit it, so a squad cannot promise one bar and later move it. The person who started it owns it and cannot leave it; deleting their account closes the squad with its posts and calls. One person may start three squads a day and run ten in all.

The site runs one squad of its own, the $GWC 2% Squad: it takes two percent of the entire $GWC supply, summed across your linked wallets, to get in. It is owned by the site’s own account and verified like any other.

The gate

There are three kinds. Open — anyone with an account may join, and no balance is read. A number of tokens — hold at least that many. A share of the supply — hold at least that percentage of the token’s total supply, anywhere from 0.01% to all of it; because it is measured against the live supply, the number of tokens it takes moves with the supply. Whoever sets a gate has to pass it themselves, read from the chain before the squad is made.

Membership is read from the blockchain: the balances of the wallets you have linked, read-only, are summed and compared with the gate when you join. It is then re-checked on a schedule — every ten minutes the site re-reads a batch of the members it has checked least recently. Fall below the gate and your place is paused: the wall and the calls close, and you can join again the moment your wallets clear it. This is worth saying plainly: a schedule is not a live feed, so a member who sells can stay verified for ten minutes or more, until the check reaches them. A read the chain cannot complete decides nothing either way. A squad holds at most 500 verified members.

The private wall

Squad posts exist only for verified members. The feed is refused to everyone else, and a single post, its comments, reactions and votes answer “not found” rather than “not allowed”, for the same reason the holders-only wall does (Section 11). Nothing written there appears on the Send Wall, on anyone’s profile, or in the public data feed. Posting inside a squad draws on the same allowance as posting anywhere — twelve posts in ten minutes — and pays you the ordinary points for a post. It pays the squad nothing: a squad’s score comes from calls and conviction alone.

Calls that score for the squad

A member can make a Send Call to the squad instead of to the public wall. The call and its scorecard are private to the squad, it takes a verified place to make one, and every rule from Section 10 still applies — the daily allowance, the $2,000 of liquidity, the deployer rule, the ring and spam checks. One call per coin per squad: a public call on the same coin is a separate call, and both may stand.

The numbers are the public ones, paid to a different ledger. The opening award is 120 times the size of the caller’s verified position (each $100 is 1×, the floor is 1×, the cap is 100×). Each whole X pays a rung of 170 + 17 × (X − 1), up to 50X, on a price the site can trust: the lower of the live price and the past hour’s median, sustained across two readings, with $500 of pooled liquidity behind every X. Holding in profit pays the same diamond-hands curve. A Send It on a squad call pays 30 times the Sender’s size, only on a real position, and the Sender’s hold bonus follows it to the squad. One lifetime budget per call, carved the same way.

Conviction

Every member’s public Conviction Plays — the coins pinned to their wall — are gathered inside the squad. Once a day, for each verified member and each pinned coin they still hold (read from their linked wallets, worth at least $20 at the live price), the squad earns 2 × (1 + days pinned ÷ 30), with the days capped at 360: a fresh pin pays 2, a month pays 4, a year pays 26. A coin whose price cannot be read is skipped that day, neither credited nor penalised. The squad’s conviction board shows, per coin, how many members are convicted in it, how many still held it at the last check, and the longest and average time pinned, along with the members with the most pins. Unlike a community’s conviction (Section 11), this one is about time — but only time spent actually holding, checked on the chain each day.

Level and the weekly board

A squad has a level on the same curve as a person or a community (Section 8). A weekly board ranks squads by the points earned that week, Monday to Monday in UTC; the week rolls over on the first point of the new one, and last week’s total is kept beside it. There is no prize.

The lifetime tracker

Every squad shows a running record of its calls: how many, the total and best Xs (each call counted to 50X at most), how much was in the coin when members called and Sent It, and what those positions were worth at each call’s peak and are worth now. These are paper figures: what members’ on-chain positions, read at the moment they acted, would have been worth at the best price the sweep recorded and at the latest one. Nobody has realised anything, and a coin that has since collapsed shows the loss. Dollar figures are rounded to two significant figures, as every public stake on the site is.

Where it lives

Squads have their own tab on the communities page — a directory you can search by name or by a coin’s contract address (several squads may share a coin), the weekly board, and the form to start one — and each squad has its own page with the wall, the calls, the conviction board and the members. All of it is behind a sign-in: signed out, every squad request is refused and the pages show a locked panel. A squad is a club, not an endorsement of the coin that gates it, and never a reason to buy one.

A free game, once per day. A rocket climbs and a number rises with it. You tap to cash out whenever you like. At some hidden moment the rocket explodes, and if you have not cashed out by then you get nothing.

Nothing is at stake. There is nothing to buy, no way to pay to play again, and no way to lose anything you had. The only thing you can win is a temporary points bonus.

Why you cannot cheat, and neither can the site

This is the part worth understanding. When you launch, the server rolls the explosion point immediately and writes it down before you see anything. It is never sent to your browser until the round is over. Your browser is only drawing an animation; it genuinely does not know the answer.

Because the number was fixed at launch and stored, the site cannot move it either when it sees you about to win. And because the multiplier is calculated from the server's own clock, changing your computer's clock does nothing.

Other rules: the explosion point is capped at 50×, a round left abandoned expires after 5 minutes and counts as a loss, and the day rolls over at midnight UTC.

The daily check-in

Showing up is worth 60 points, once every 24 hours counted from your last check-in, claimed by tapping a button on your own wall. It used to happen silently on page load. Making it a button means it is something you did, not something that happened to you.

It is also the switch that stops your Send Power draining (Section 8b), which makes it the single most valuable button on the site — worth far more than its 60 points to anyone with a large balance. Two clocks, on purpose. The button opens once every 24 hours from your last check-in — a tap inside that window pays nothing and does not move it — and decay credits any tap, paid or refused, within the 24 hours before its sweep, which runs in the first minutes after 00:00 UTC. The 60-point award is still deduplicated per UTC day, which changes nothing: two check-ins 24 hours apart can never share a UTC day. Until 9 October 2026 the rule was once per UTC calendar day, which paid a check-in at 23:59 and another at 00:01 two minutes apart.

New coins appear on Robinhood Chain constantly, and a lot of them are traps. The New Pairs Radar watches new pools land on the chain’s Uniswap-V2-style factory — the one behind the site’s swap router — and puts a plain-English warning label on the dangerous ones. It reads that one factory only: a launch on another venue never appears here, so a coin missing from the radar has not been judged — it has not been seen.

It lives on the Scanner page as a second tab, for members. The Scanner itself is open to everyone: paste any token or pool address on Robinhood Chain and read the same full on-chain profile the site shows for every coin. Every scan re-reads the chain and is kept for everyone — the token, the time and the count, never who scanned — so a coin someone already scanned pulls up with its latest read; if the chain cannot be reached, the last snapshot is shown and labelled as such. Other chains are coming soon.

Every coin starts at 100 out of 100. Each warning sign that trips subtracts points.

The last two come from a separate and much deeper check, described below. “Snipers sold out” is the third-heaviest penalty on the whole table, above both serial deployers and thin liquidity, because it is the clearest evidence on the chain that the earliest money has already exited into whoever is buying now.

The score sorts coins into bands, and the radar has three views: Best Runners for biggest gainers, the Hot Feed for the highest-scoring new coins one at a time, and the DEX List with every filter. A coin whose name and symbol cannot be read from the chain is hidden from all three, because a coin nobody can identify is not something to show anyone.

Who bought first, and did they stay?

The deepest check on the site does something a price chart cannot: it replays the pool's own history and finds the wallets that got in before anyone could have reacted — then asks whether they are still holding, or whether they sold into the people buying now.

It looks at two windows. Block 0 is the very first block in which the pool ever paid a coin out; anyone in it was a bot. The first ten buys is the wider view, and since block 0's buyers are the earliest of them, the two windows nest.

Every early wallet is followed as a cluster rather than an address, because moving coins to a fresh wallet is the oldest way to look clean. The trace follows the wallet, everyone it sent coins to, and everyone they sent to — two hops, up to twelve destinations each, up to a hundred and fifty wallets per coin, and the thirty largest early wallets in full. Anything beyond that is counted and said out loud rather than quietly dropped.

For each cluster it reports what it took, what it still holds as a live balance read fresh from the chain, whether it kept buying afterwards, how much supply it sold that it demonstrably never bought here, and a profit-and-loss built from the actual transactions the coins moved in. Then it labels the cluster: accumulator, seller, fully out, or unknown.

Two limits worth knowing. The green verdict is gated on block 0 only: the first-ten cohort is shown to you but does not change the score, so a coin with a clean first block whose next nine buyers all dumped still shows a rocket, with the contradiction visible in the panel for anyone who opens it. And the per-wallet percentages are shares of total supply while the summary and the verdict use tradeable float — two denominators on one screen, so compare like with like.

The data comes from four public sources: the chain's own node, a block explorer, a price service, and GoPlus Security, an automated contract scanner whose readings supply the owner-power flags and stand in for the holder count until the site's own on-chain count for that coin has been built. Those readings are one vendor's automated output, not an audit. The score is a set of quick heuristics on public data. It is not an audit, not a guarantee, and not advice.

There is a shared feed called the Send Wall, and everyone gets a public page of their own. You can post text, images, GIFs and video, comment, react, vote, follow people and search for them.

If you paste a coin's address into a post, the site quietly replaces it with the coin's ticker, which anyone can tap to see its full details. Up to three addresses per post are converted this way.

Muting

On anyone's public profile there is a Moderation menu with a mute option. Muting is one-sided and private. Their posts and comments disappear from your feeds. Where they cannot be removed entirely, such as inside a list of people on a call, they appear greyed with a muted marker you can tap to unmute.

What is public and what is not

Note that your Diamond level is public but the holdings behind it are not. Others see that you have held for a long time without seeing how much you own.

Alerts

On anyone else’s wall there is a 🔔 Alerts button. Turn it on and their posts, Send Calls and public community posts arrive in your notification bell, each one linking to the post itself rather than to the top of their wall.

It is a separate thing from following, on purpose. Following is public, pays Send Power to both sides and puts somebody in your feed; an alert is private, pays nobody, and only rings your own bell. It is built on the same model as a mute: the other person is never told, and no count of who has alerts on a wall is exposed anywhere, to anyone. Muting someone retires any alert on them and clears the rows already delivered, and lifting the mute does not quietly turn them back on.

The notification says who posted and what kind of thing it was. It does not carry the post’s text. A notification outlives the post it is about — deleting a post does not reach into other people’s bells — so a preview would leave somebody’s deleted words sitting in strangers’ notifications indefinitely. Help-desk questions and holders-only community posts are never broadcast at all.

An alert turns one person’s action into up to two hundred notification rows, so it is bounded in five places: two hundred subscribers to a wall, fifty walls to an account, three alerts from any one author per bell per hour, four fan-outs per author per hour, and three alerts on one wall from any one network. Each of those refuses out loud when it is reached rather than accepting the subscription and quietly never delivering — a switch reading ON that never rings would be a lie, and it is the specific failure this design was written to avoid. Alert notifications are also kept in their own bucket, so a busy wall can never push a level-up or a restriction notice out of your bell.

A points game invites scripts. The site watches how fast accounts create things and whether they post the same thing repeatedly. Accounts acting faster than a human is capable of are put into read-only mode.

Read-only is not a ban. You can still browse everything, check in daily, connect a wallet, buy and hold coins, and keep earning from your Holder Boost. What stops is creating things: posting (on the wall or in a community), commenting, reacting, voting, following, calling and Sending It on others’ calls, tracking wallets, uploading images or video, customising your profile or wall, pinning tokens to it, joining or starting a community, taking a holder snapshot, opening or voting on a proposal, claiming an easter egg, minting an API key, and flying Rocket Run. Connecting a wallet still works, but linking one while restricted does not pay the wallet-link points.

It does still cost points, and that is worth saying plainly. A restriction adds a flat one percentage point a day to Send Power decay (Section 8b), and it is the only part of decay that a check-in does not cancel. Keep showing up and that 1% a day is the whole of it; ignore the site while restricted and the absence rate stacks on top and climbs toward the four-percent ceiling.

The check-in is deliberately left open, and the reasoning is worth stating because the opposite choice is tempting. Gating it would make a mute compounding: the one action that defends your balance would be the one action you are barred from, so the penalty would grow every day whatever you did. That is a different and much harsher thing than pausing what you can create, and it punishes the wrong thing — a muted account that keeps turning up is behaving exactly as you would want. The flat 1% is what keeps the restriction meaningful without making it a trap.

The punishment escalates: 24 hours the first time, one week if it happens again, and permanent after that. The thresholds are set far above ordinary enthusiastic use.

The site is deliberately simple. There is no framework, no build step and no bundler. It is plain JavaScript that runs in the browser exactly as written, and a single Node.js program on the server.

• One server file holds every rule. Having one source of truth means the number you see and the number you are paid cannot drift apart.
• SQLite stores everything in a single file on disk.
• No JavaScript is written inline in any page, which is what allows the strict security policy in section 6.
• Only three outside code libraries are chosen directly (they bring a few dozen small packages of their own): one for checking wallet signatures, one for drawing QR codes, and one HTTP client for reading the chain and the price feeds.

The advantage of this style is that anyone can read it. There is no compilation between what is written and what runs, so the code in the repository is the code in your browser. For a project asking people to trust it, that is worth more than convenience.

A white paper that only lists strengths is an advert. These are the real limits.

• A perfect risk score can still mean “no data”. Section 13 describes the partial fix: a coin whose liquidity, holders or index entry could not be read is pulled down to the “caution” band and the panel lists what it could not check, but the number itself is unchanged and a 100 still earns the rocket. It is the most important caveat on the page.
• The site depends on outside services. Prices come from a price service; contract details from a block explorer, the chain itself and an automated contract scanner (GoPlus). Holder counts are read from the chain’s own Transfer events, folded into balances and stamped with the block they were read at, with the scanner and the explorer as fallbacks — and every count says which source it came from. If those are wrong or offline, the site shows less, and it says so rather than inventing numbers.
• Encryption protects a stolen database, not a stolen server. If an attacker took the key as well as the data, the scrambling would not save you.
• Rocket Run is fair but not provably fair. You are trusting the server's roll. Nothing is staked, so nothing is lost either way.
• Points are not money. They cannot be cashed out, sold or transferred, and they never will be.
• Nothing here is advice. The site shows what the blockchain says. What you do about it is yours to decide, and most new coins go to zero.