Proof & details
Everything behind the money, in plain words.
How $SHELL launches, how your money is held, the public test transactions you can open yourself, and how the city is tested. Each line here is true today; anything not done yet says so.
1 · The launch
How $SHELL launches
$SHELL launched on pump.fun on 8 November 2026, from a console inside the game, shown only to the owner.
Pressed in game
Only the owner's Roblox account can open the launch console. The game server checks who is pressing, and the backend checks again.
A launch code
The press also needs a secret code that only the backend knows. Wrong codes lock the console for 15 minutes after five tries.
Only once
The backend records the launch before sending it. Pressing again returns that same launch; it can never make a second coin.
A note on chain
The launch transaction carries a memo, a short public note, naming the Roblox game, the game server and the game version it was pressed from.
First buy to the treasury
The launch includes a first buy. A second transaction moves every coin from that buy to the city treasury, so none stays with the launch wallet.
A fresh wallet
The launch is signed by a brand-new wallet used only for $SHELL. The server refuses to start if that wallet has ever done anything else.
Once the launch is made public, the launch proof page lists every launch transaction, the memo, the game server and the Roblox account, and links the coin's pump.fun page, so you can check each one yourself.
2 · Your money
How your money is held
Shell City is custodial: the game holds players' $SHELL for them, the way a bank holds money. You never need a wallet, and you never handle a key.
Your own deposit address
Every player gets their own Solana address to send $SHELL to. Only $SHELL is credited, and only once Solana marks the transfer final.
Withdrawals
Paste any Solana address and the amount; the bank shows the fee and what arrives before you confirm. Earned $SHELL can leave once your Street Cred reaches 100, after a few days of play.
Limits and holds
Per-withdrawal and daily limits are set from the launch price and shown in the bank. A player can make 3 withdrawals per 10 minutes. Payouts to a wallet shared by several accounts are held for a person to check.
A ledger you can't edit
Every movement of money is written twice, out of one account and into another, and the two must match. Entries can be added but never changed or deleted.
Books checked against the chain
Every day the city's records are compared with what its Solana accounts actually hold, and the result is written down. A difference raises an alarm; nothing is quietly corrected.
A pause button
Payouts can be paused with one setting. Requests keep their place in the queue and nothing is lost.
Fees are 5% under 2,500 $SHELL, 3% up to 25,000 and 1.5% above, with a smallest fee of 1 $SHELL; they may be adjusted to the launch price. See how the money works for wages, Street Cred and fees.
3 · Public test transactions
Open them yourself.
Devnet is Solana's free test network: the same software as the real one, with coins that have no value. These are real, public transactions on it.
Devnet test of the pump.fun launch, 8 November 2026
| Step | What happened | Transaction |
|---|---|---|
| Launch press | The coin created on pump.fun with its first buy, signed by a fresh launch wallet. The press was sent by a test script the way a game server sends it, so its memo names Roblox place 130170912798923, a test server id and place version 57 | 4QCqhnJi…t2jWGetP |
| First buy to the treasury | Every coin from the first buy moved to the treasury; its memo points back to the launch | 4YJkUsqb…N6oxX2i2 |
| Fee claim to the treasury | The coin's creator fee from a later trade, claimed by the launch wallet and sent to the treasury in the same transaction | 2riwgCm2…j8HYK64h |
Devnet test of the full money loop, 30 October 2026
Deposit, trade, buyback and burn, and withdrawal, each a public transaction: see the table.
4 · Testing
How it's tested
Money code should be dull and well checked. Here is what has been done, and what hasn't yet.
Automated tests
Suites for the backend and the game run on every change, and are themselves checked: run against a fake, empty chain, every chain test must fail.
Break it first
Every fix to a money path is proved by breaking the code on purpose, watching the test fail, then restoring it exactly.
Security review
The money paths have had an internal security review. There has been no outside audit yet.
Mainnet rehearsal
The city-coin code has been rehearsed on Solana's real network with a throwaway coin: launches, trades, buyback and burn, a deposit and a withdrawal, with the books matching.
Load test
Simulated players running one game server for a full session, to find where things slow down.
Test network runs
The launch flow (pressed by a test script the way the game presses it), deposits and withdrawals have each been run end to end on devnet, with the public transactions above.
Shell City never asks for a seed phrase or a wallet connection, and makes no promise of earnings. Token prices can fall as well as rise.