Verify us. Don't trust us.
Everything on this page is read live from the chain, from independent scanners and from this site's own headers. No badge here is self-declared. When something is not good yet, it says so.
$NEXUS token scan loading
Independent GoPlus Security scan of the token contract on Robinhood Chain, refreshed every minute.
Reading the scanner…
On-chain facts loading
Read directly from the token contract via RPC. What the chain says, not what we say.
Source code verified on BlockscoutPonsV2LauncherToken · exact match ↗
Compilersolc 0.8.35 · cancun · optimizer 200
Reading the chain…
Site hardening loading
HTTP security headers served by nexus-prtcl.app. Checked live against the production domain.
Reading headers…
How NEXUS touches your wallet Non-custodial
The app's whole surface with your funds, in four lines.
- Nothing connects during analysis. The terminal reads pools and simulates without a wallet.
- The only signature is an EIP-712 typed message (trader, ticker, size, reference block, route hash, 90-second deadline). It cannot move funds.
- The Lounge sign-in is a personal_sign of a plain-text nonce. Also cannot move funds.
- No token approvals are ever requested. If a site claiming to be NEXUS asks for one, it is not us.
Bug bounty Paid in $NEXUS
Found something in the terminal, the API, the engine maths or the Lounge? Tell us first, get paid, get credited.
Critical · funds or sessions at risk500,000 $NEXUS
High · wrong route, bypassed gate150,000 $NEXUS
Medium · logic, spam, leaks50,000 $NEXUS
- Report privately to @NexusPrtcl by DM with steps to reproduce. Do not post it publicly first.
- We confirm within 48 h, fix, then publish the report with your handle if you want it.
- Out of scope: rate-limit noise, third-party RPC or pool-index outages, social engineering.
Audit plan Before execution ships
Today NEXUS deploys no custom contract: the engine runs off-chain and only reads the chain. The moment a contract that can move funds exists (roadmap phase 4, the execution router), this is the plan.
- Engine source published on GitHub so anyone can rebuild the quote and compare it to the terminal.
- Router contract frozen with a written spec and full test suite before anyone looks at it.
- Public audit contest or independent audit, report published in full on this page.
- No execution feature goes live before the report is here. That is a rule, not a promise.