dyor

Built so you never have to trust us.

How DYOR keeps your money, your account and its findings safe, and what you can check yourself.

No wallet connection

DYOR never asks you to connect a wallet or sign anything, on any surface. If something calling itself DYOR asks you to sign, it is not us.

Payments you can verify

You pay with a plain SOL transfer to your own deposit address. Every payment and every sweep is a public transaction.

Evidence on every finding

Each finding links the post, page or transaction it rests on. No evidence, no claim, and low confidence when the evidence is thin.

Where your SOL goes

  • You send SOL to a deposit address unique to your account or group. Time is credited as soon as it lands.
  • Deposits are swept to DYOR's treasury, usually within 10 minutes. Both hops are public on Solana.
  • A payment buys time and nothing else. Only native SOL counts; tokens sent to a deposit address are not credited.
  • The key behind deposit addresses lives only in the backend's secret store and is used by the sweep job alone.

Reading posts and pages

Everything read from X, websites and search results is treated as untrusted data. The models are told never to follow instructions found there, and none of them has a tool that can spend money, message you or reach an internal service.

Facts we read from the chain are passed separately and marked as verified, so a page that fails to load can never be taken as proof that a coin does not exist.

Your account and data

  • We store your email, a salted hash of your password, your checks and your payments. No wallet keys, ever.
  • Reports are public by link so they can be shared. Your email is never shown on them.

Opening project sites

coming

The tech check will open a coin's site in a throwaway sandbox for each check, never on our servers or in your browser. The sandbox holds no secrets, cannot reach private networks, and gives the site an empty wallet that refuses every transaction. What a site asks it to sign is recorded as evidence.

Chrome extension

coming

The extension will ask only for storage, side panel and active tab, plus the terminal sites it adds a DYOR button to. It will never read cookies, local storage or wallet objects, and will ship no remote code. Its source will be published.

Corrections

Every report has a Report an error link. A person reviews it, and a correction updates the stored report and says so on the page.