Three layers: the edge shield stops spam countries and bots at the door, the human gate stops scripted mints, and the contracts make it impossible to rug, sweep, or mint free supply. Plus the full walkthrough of what happens to your money after you buy.
Every request is checked at the network edge before any page or API runs. 43 countries/regions are denied with a 403 — no HTML, no page load, no fingerprint. Bots behind datacenter IP ranges, bare-IP calls, and headless scraper user-agents are blocked too, while search engines and AI crawlers stay reachable. Vulnerability-scanner and secret-probe paths (/.env, /.git, wp-login.php, xmlrpc.php,phpmyadmin, .aws, trace.axd, …) are refused at the edge before they can touch the app. Mobile-wallet in-app browsers (MetaMask / Trust / Coinbase) areallowed — they are real users, not bots.
The mint button stays locked until a client-side human check passes: a hidden honeypot field (bots fill it, humans never see it), a minimum reading time (bots answer in milliseconds), and a simple “which one is the squirrel?” puzzle — trivial for people, annoying for scrapers. This guarded the RIGS sale end-to-end and sits on top ofthe contract’s own EOA-only + cooldown + per-block cap defenses on every drop, including machine mints (0.0004 ETH).
Follow one purchase from your wallet to the real-asset basket. Every step is on-chain and verifiable.
Your wallet signs the mint: X ETH, EOA-only, cooldown + per-block caps enforced by the contract. No bots can front-run you.
The mint fee is forwarded to TokenLaunchFeeLoop. Reentrancy-guarded. 0 amounts rejected. Fee routing enforced at deploy, visible onchain.
Banked for future mineral digs, voting windows, and the recap backstop. Owners can only withdraw it to a destination — never to themselves.
Sits in the rewards leg of the fee router — funds staking yield, machines, and the mineral lottery prizes.
Half of every fee cycle funds real mineral specimen digs — smoky quartz, amethyst, beryl, tourmaline, apatite, UV-fluorescent specimens. Verifiable in the treasury store.
Fees keep flowing as machines run and trades settle. Every buy is oracle-floored — stale or zero feed reverts, never a blind price.
Every treasury position, fee split, and purchase is readable on Blockscout. Nothing opaque — check any number on this page against the chain yourself.
Owner cannot mint NFTs into his own wallet for zero cost.
Fee-loop treasury is only withdrawable by owner to a destination address — audited on-chain, not a single-wallet drain.
Any fee-allocation change emits AllocationChanged publicly; the constructor requires bps to sum to exactly 10,000.
Any stale or zero oracle feed reverts the whole composite mark. Nothing trades on garbage.
Every money-moving function is ReentrancyGuard-protected.
Zero-amount fee submissions revert (require amount > 0).
Strict Content-Security-Policy, X-Frame-Options DENY, nosniff, permission-less (no camera/mic/geo), powered-by header removed, single-edge region deployment.
Full contract audit log → /security/audit
Honest note: the mainnet RIGS contract (0x1DFE…bB56) is live on Robinhood Chain 4663 with SelfMintOnly anti-sybil, 2-per-wallet cap, and a public mintedByWallet() audit trail — all enforced from block zero. All 8 core mainnet contracts are source-verified on Blockscout (8/8 green). The GMTS token (0x6ACC…b6a3, 1.6M fixed supply) is fully renounced — no owner, no mint, no pause. Full mint forensics published at /forensics (107 automated-pattern wallets identified, blacklist public domain).
This page and the live checks are honest: the geo-block list and defenses are shipped in the deployed build. Nothing here is financial advice and nothing here is a securities offer.