$XRAY

The problem

Contract X-ray

How it works

1. 1

   Input

   You paste Solidity source (from the verified Code tab on robinhoodchain.blockscout.com).

2. 2

   Clean

   Comments and string contents are blanked character by character, line breaks kept, so words in comments cannot trigger a flag and line numbers stay exact.

3. 3

   Match

   19 rules (regular expressions plus brace-depth tracking of function bodies) look for owner mint, blacklists, adjustable or high tax, pause, trading switches, max wallet limits, proxies, selfdestruct, fake renounce, allowance bypass, hidden admins, tx.origin and more.

4. 4

   Score

   One finding per rule; label from HIGH x3 + MEDIUM: 0 = "Few red flags found", 1-5 = "Some red flags", 6+ = "Many red flags".

5. 5

   Output

   Findings with line numbers, the matched line, why it matters and what to verify; click to jump; export a text report. Everything runs in your browser; nothing is uploaded.

Status board - as of Oct 2026

Proof of work

function stripCommentsAndStrings(src) {
  var out = new Array(src.length);
  var i = 0, n = src.length, state = 0; // 0 code, 1 line comment, 2 block comment, 3 "str", 4 'str'
  while (i < n) {
    var c = src[i], d = i + 1 < n ? src[i + 1] : "";
    if (state === 0) {
      if (c === "/" && d === "/") { out[i] = " "; out[i + 1] = " "; i += 2; state = 1; continue; }
      if (c === "/" && d === "*") { out[i] = " "; out[i + 1] = " "; i += 2; state = 2; continue; }
      if (c === '"') { out[i] = c; state = 3; i++; continue; }
      if (c === "'") { out[i] = c; state = 4; i++; continue; }
      out[i] = c; i++; continue;
    }
    if (c === "\n") { out[i] = "\n"; if (state === 1) state = 0; i++; continue; }
    if (state === 1) { out[i] = " "; i++; continue; }
    if (state === 2) {
      if (c === "*" && d === "/") { out[i] = " "; out[i + 1] = " "; i += 2; state = 0; continue; }
      out[i] = " "; i++; continue;
    }
    // inside a string (state 3 or 4)
    if (c === "\\" && i + 1 < n) { out[i] = " "; out[i + 1] = d === "\n" ? "\n" : " "; i += 2; continue; }
    if ((state === 3 && c === '"') || (state === 4 && c === "'")) { out[i] = c; state = 0; i++; continue; }
    out[i] = " "; i++;
  }
  return out.join("");
}

Excerpt of the live engine running this page (stripCommentsAndStrings in xray-engine.js).

Changelog

• v0.1 (Oct 2026) - first 8 rules over raw text with line numbers.
• v0.2 (Oct 2026) - comment and string stripping that keeps line numbers; brace-depth tracking of function bodies; fake-renounce, allowance-bypass, hidden-admin and fee-cap rules; 19 rules.
• v0.3 (Oct 2026) - click-to-line viewer, gutter markers, text report export and download, 500,000-character cap, three sample contracts.

View source: this page is the app - the scanner is plain JavaScript in xray-engine.js, shipped with this page.

What $XRAY is (and is not)

$XRAY doesn't unlock anything. The scanner is free for everyone and does not require the token. Holding $XRAY is a vote that tokens should be read before they're bought. It is a community meme and a signal of support, with no promised utility and no expectation of return.

Verify on-chain before buying

Token not launched yet — terms below are the launch configuration.

When it launches, scan our own verified source with the tool above.

How to Buy

1. STEP 1

   Get a wallet

   Install a wallet, then add Robinhood Chain (chain ID 4663).

2. STEP 2

   Bridge ETH

   Bridge ETH to Robinhood Chain for gas and buying via the Arbitrum bridge or a partner route. Robinhood Chain is an Ethereum Layer 2 built on Arbitrum; mainnet went live July 1, 2026; gas is paid in ETH.

3. STEP 3

   Open Uniswap

   Open app.uniswap.org/swap, choose Robinhood Chain, paste the CA.

   CA Copy

4. STEP 4

   Swap ETH for $XRAY

   Check the address matches before you confirm.